Privacy Policy

Last updated: 19 August 2026

This Privacy Policy describes how Nairobi Forex Traders (“NairobiFX”, “we”, “us”, or “our”) collects, uses, and protects your information when you use our application and website at nairobiforextraders.com. NairobiFX is an independent payment agent that moves funds between Safaricom M-Pesa and your Deriv trading account.

1. Information we collect

We collect only what we need to operate the Service securely:

Deriv account details — your Deriv nickname and account identifier, so we can link deposits and withdrawals to the right account.
M-Pesa number — the mobile-money line used to send and receive payments.
Transaction records — amounts, exchange rates, timestamps, M-Pesa reference numbers, and status, kept as a record of each deposit and withdrawal.
Device push subscriptions — if you enable notifications, the push subscription token that lets us deliver transaction alerts to your device.
Passkey / biometric credentials — public-key credentials used for passkey or biometric sign-in. The biometric data itself never leaves your device; we store only the public credential needed to verify you.
Technical & security data — your IP address and basic device information, used to protect your account and detect fraud.

We do not store your M-Pesa PIN, your Deriv password, or any other sensitive payment credential.

2. How we use your information

Processing payments — to carry out your M-Pesa ↔ Deriv deposits and withdrawals and keep an accurate record of them.
Security & anti-fraud — to verify your identity, secure your account, and detect or prevent fraudulent or unlawful activity.
Notifications — to send transaction confirmations, status updates, and one-time verification codes.
Support — to respond to your questions and resolve issues with your transactions.

3. Third parties & processors

We do not sell, rent, or trade your personal information. We share it only with the service providers needed to run the Service, and only as far as necessary:

Deriv — to credit deposits to, and process withdrawals from, your trading account.
Safaricom M-Pesa / Daraja — to process mobile-money payments; your phone number and transaction amount are shared to complete a payment.
Africa’s Talking — to deliver SMS one-time passwords for phone verification.
Upstash Redis — to store account and transaction data that powers the Service.
Vercel — to host and serve the application.
Web-push services — to deliver push notifications to your device when you enable them.

4. Data retention

We retain your personal information for as long as your account is active and for as long as needed to provide the Service. Transaction records may be kept for longer where required to comply with legal, accounting, or anti-money-laundering obligations. When information is no longer needed, we delete or anonymise it.

5. Security measures

We take the security of your information seriously and apply appropriate technical and organisational measures — including encrypted connections, restricted access, and support for passkey and biometric sign-in — to protect your data against unauthorised access, alteration, disclosure, or destruction. No system is completely secure, but we work to safeguard your information and to respond promptly to any issue.

6. Your rights & how to request deletion

You have the right to access, correct, or delete your personal information, and to ask us to stop sending notifications. To exercise any of these rights, or to request deletion of your account and associated data, email us at support@nairobiforextraders.com. We may need to verify your identity before acting on a request, and some records may be retained where the law requires it.

7. Children’s privacy

The Service is not intended for anyone under the age of 18, and we do not knowingly collect personal information from minors.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and post the new policy on this page.

9. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at support@nairobiforextraders.com. You can also review our Terms of Service.

This document is a template and does not constitute legal advice. Have a qualified Kenyan lawyer review it before relying on it.