1. Overview & Data Controller
At Mustuds ("we", "our", or "the Platform"), we are committed to upholding the highest standards of data security, confidentiality, and transparency. This Privacy Policy details how we collect, process, store, and safeguard personal information obtained when you register as a digital task contributor, perform online tasks, subscribe to platform tiers, request M-Pesa payouts, or engage our travel logistics services.
The designated Data Controller responsible for your personal data is Mustuds Operations Ltd, duly registered under the laws of the Republic of Kenya.
2. Information We Collect
Depending on how you interact with Mustuds, we collect and process the following categories of data:
- Member Account & Identity Data: Username, email address, secure salted password hash, phone number (used for M-Pesa payouts and account notifications), and account registration timestamps.
- Task Submissions & Proof Data: Task identifier, verification submission proofs (such as completion URLs, answer text, and uploaded proof screenshots), reviewer audit notes, and quality timestamps.
- Financial & Payout Records: Destination M-Pesa phone number, beneficiary account name, withdrawal request references, transaction statuses, and Paystack subscription references (we do not store raw credit card numbers; payment card transactions are tokenized via PCI-DSS compliant gateways).
- Travel Concierge Details: When utilizing flight, luggage storage, or safari services, we collect passenger names, passport numbers (where statutory for aviation), flight itineraries, and luggage custody manifests.
- Technical & Telemetry Data: IP address, device type, browser user-agent, operating system, and request headers collected strictly to enforce platform quotas and detect automated bot fraud.
3. How We Process & Use Your Data
We process your personal information strictly on lawful grounds (contract fulfillment, statutory compliance, and legitimate operational interests), including:
- Authenticating your login sessions and securing your contributor account.
- Verifying the accuracy and legitimacy of completed tasks submitted to our verification desk.
- Authoritatively synchronizing your earning balance: approved tasks increment your balance, while completed payouts deduct from it.
- Disbursing earnings directly to your verified M-Pesa phone number or bank account.
- Providing 24/7 member assistance via WhatsApp and email.
- Detecting and mitigating multi-accounting, proxy abuse, automated submission scripts, and fraudulent activities.
4. Tasks, Quotas & Review Policy
To guarantee fairness and real-world task quality for our campaign sponsors, all members operate under structured platform safeguards:
- 24-Hour Submission Quotas: Active accounts may submit a maximum of 3 tasks per 24-hour rolling window. Submissions beyond this limit are automatically held until the 24-hour cycle refreshes.
- Verification Window: Every submitted task undergoes thorough human and algorithmic inspection within 24 to 72 hours. Approved tasks are immediately credited to your wallet balance.
- Zero-Trust Server Validation: Submissions require active account authentication. Unauthenticated or spoofed submissions are rejected at the server level.
5. Wallet & Payout Processing
When you request a payout from your accumulated earnings, we collect your destination M-Pesa or bank account details to execute the disbursement:
- Disbursement Timeline: Withdrawal requests are reviewed, verified against task submission authenticity, and dispatched within 24 to 78 hours.
- Authoritative Balance Verification: Payout requests undergo cryptographic balance synchronization to prevent race conditions and ensure only genuine, approved earnings are cashed out.
- Payout Rejections & Balance Reversals: If a payout is rejected due to inaccurate phone number or banking details, the amount is automatically returned in full to your wallet balance.
7. Data Security & Anti-Fraud
We implement enterprise-grade technical and organizational measures to safeguard your personal and financial information:
- Transport Encryption: All platform communications are protected with TLS 1.3 / HTTPS encryption.
- Database Protection: Member records and task logs are stored in secure PostgreSQL databases with strict row-level security and restricted service-role access.
- Password Protection: Passwords are cryptographically salted and hashed; plain-text credentials are never stored.
- Audit Logging: Administrative actions, payout reviews, and task verifications are permanently logged for accountability.
8. Your Data Protection Rights
Under the Kenya Data Protection Act 2019 and international privacy standards (GDPR), you possess full control over your personal data:
- Right to Access: You may request an export of all personal data, task submissions, and payout history associated with your account.
- Right to Rectification: You can update your contact information, phone number, and account details at any time via your member dashboard.
- Right to Erasure: You may request account closure and deletion of personal data, subject to statutory retention obligations for tax and financial auditing.
- Right to Object & Restrict: You may object to specific non-essential data processing or revoke consent.
9. Data Retention & Deletion
We retain member account records, approved task logs, and payout disbursements for a statutory period of 5 years to satisfy legal auditing, fraud prevention, and Kenyan commercial tax regulations. Unregistered inquiries and transient session logs are permanently purged within 90 days.
10. Contact Our Data Protection Officer
For questions regarding this policy, to exercise your privacy rights, or to submit a data protection inquiry, please contact our Data Protection Desk:
Data Protection Officer - Mustuds Platform
Email: privacy@mustuds.com • Support Desk: concierge@mustuds.com
WhatsApp Concierge: +44 7476 681 190
Physical Address: JKIA Logistics & Operations Hub, Airport North Road, Nairobi, Kenya