Purple Router Kenya· Powering Kenyan Internet Service Providers
KenyaLive
BlogPrivacyTerms
CHOOSE YOUR COUNTRY
Kenya
Coming soonTanzaniaSoonUgandaSoonRwandaSoonBurundiSoonSouth SudanSoonDR CongoSoonSomaliaSoonEthiopiaSoonDjiboutiSoonEritreaSoonMadagascarSoonComorosSoonSeychellesSoonMauritiusSoonMalawiSoonMozambiqueSoonZambiaSoonZimbabweSoonSouth AfricaSoonBotswanaSoonNamibiaSoonLesothoSoonEswatiniSoonAngolaSoonCameroonSoonCentral African RepublicSoonChadSoonRepublic of the CongoSoonGabonSoonEquatorial GuineaSoonSão Tomé and PríncipeSoonNigeriaSoonGhanaSoonCôte d’IvoireSoonSenegalSoonMaliSoonBurkina FasoSoonNigerSoonGuineaSoonSierra LeoneSoonLiberiaSoonTogoSoonBeninSoonGambiaSoonGuinea-BissauSoonCabo VerdeSoonMauritaniaSoonSudanSoonEgyptSoonLibyaSoonTunisiaSoonAlgeriaSoonMoroccoSoon
PURPLE ROUTER KENYA · PRIVACY POLICY

Privacy policy

Last updated: 15 October 2026

The key points

  • Purple Router Kenya is managed by Purple Cloud Ltd.
  • We deal only with ISPs, never with an ISP’s customers or subscribers.
  • We keep only four kinds of records: the account owner, company details, router licences (active and expired) and the payments your ISP pays us, Purple Cloud Ltd, for Purple Router (your router licence fees).
  • Everything else, including your customers’ details, your routers, the payments your customers make to you, and SMS, is protected behind two-factor authentication (email and SMS) and end-to-end encryption.
  • We do not sell personal data, and we do not use your customers’ data for our own marketing.
  • Your customers’ data belongs to you, the ISP. They must contact you about it, not us.
  • Export your own data while your account is active. We do not export it for you, and we delete it when your account closes.
  • You can ask to see, correct or delete your data, and complain to the Data Commissioner of Kenya.

Full privacy policy

This privacy policy explains how Purple Cloud Ltd ("Purple Cloud", "we", "us", "our"), which manages and operates Purple Router Kenya, collects, uses, shares and protects personal data. It is written to meet the Kenya Data Protection Act, 2019 and its regulations.

We deal only with ISPs.

Purple Router is sold to, and used by, internet service providers (ISPs) only. We have no contract or relationship with an ISP’s own customers or subscribers, and we do not provide them with internet service, support or refunds. If you are a customer or subscriber of an ISP, please contact your ISP for anything about your internet, your account, your payments or your data.

1. Who we are and our role

  • As a data controller, we decide how to use the account records listed in section 2, about the internet service providers ("ISPs") that use Purple Router and their admin contacts, and the limited data we collect from website visitors and people who contact us.
  • As a data processor, we process personal data about an ISP’s own customers ("Subscribers") only on behalf of that ISP and on its instructions, to provide the service. The ISP is the data controller for that data.

2. What we keep

Purple Router is software as a service (SaaS), charged per router. We keep only:

  • The account owner: the ISP that owns the account, and its admin contact person (name, email and phone number).
  • Company details: the company name and the business details you give us.
  • Router licences: which routers are licensed on your account, both active and expired.
  • Payments you pay us: only the payments your ISP makes to Purple Cloud Ltd for Purple Router, meaning your router licence fees, with amounts, dates, receipts and invoices. We do not keep records of the payments your customers make to you.

3. What is protected

All other details are protected behind two-factor authentication (email and SMS) and end-to-end encryption. This includes your Subscribers’ details, their accounts and plans, the payments they make to you, their messages, your routers and network data, and all other data in your account. Because this data is end-to-end encrypted, keeping access to your account, your email and your two-factor phone is your responsibility.

4. How we use the records we keep

  • To create and run your account, and to let your admins sign in securely.
  • To license and bill your routers, and keep accounting and tax records.
  • To give support and send service messages (security alerts, invoices, terms updates).
  • To keep the service secure, prevent fraud and misuse, and investigate problems.
  • To send product updates to your admin contact (you can opt out of marketing at any time).

5. Our lawful bases

  • Contract: to provide the service you signed up for and bill you.
  • Legal obligation: to keep tax and accounting records and respond to lawful requests.
  • Legitimate interests: to secure the service, prevent fraud and improve the platform.
  • Consent: where requested (for example, optional marketing).
  • Your instructions as controller: for Subscriber data we process on your behalf.

6. Who we share data with

  • Service providers helping us run Purple Router (hosting, email, SMS delivery) under strict confidentiality contracts.
  • Payment and SMS providers that you choose (Safaricom, banks, SMS aggregators).
  • Authorities, courts or regulators where required by law or to protect rights.

7. Payments

  • Payments you pay us: amounts, dates, receipts and invoices for your router licences.
  • Payments your customers pay you: paid via M-Pesa, Safaricom Daraja or your bank directly to you. We never receive or hold that money, nor keep those customer payment ledgers.

8. Transfers outside Kenya and security

Data transfers comply with the Kenya Data Protection Act, 2019. Enterprise ISPs can choose to self-host Purple Router on their own servers.

Security: we implement encrypted tunnels, two-factor authentication, access controls, audit logs and automated backups. You must secure your own admin logins and two-factor devices.

9. Your rights

Under the Kenya Data Protection Act, 2019, you have the right to access, correct, delete, restrict or port your data, or complain to the Office of the Data Protection Commissioner of Kenya. Contact: support@purplerouter.com.

10. If something goes wrong

If a personal data breach is likely to put people at risk, we will notify the Office of the Data Protection Commissioner within 72 hours where the law requires, and inform the affected ISP without undue delay so it can meet its own duties.

11. How long we keep data

  • Account records (account owner, company details, router licences): while your account is active, and afterwards for as long as needed for legal, tax, accounting and dispute purposes.
  • Payments you pay us (router licence fees): for as long as tax and accounting laws require.
  • Encrypted account data: while your account is active only. We do not export data for you. You must export and keep your own copies while your account is active. When your account is closed, we may permanently delete this data straight away, and it cannot be recovered.
  • Server logs: for a limited period needed for security and troubleshooting.