M-Pesa privacy disclosures — effective September 22, 2026.
Last updated: September 8, 2026
Walled, LLC, a Delaware limited liability company, is the data controller for personal data processed through the Walled platform. Its registered agent is Legalinc Corporate Services Inc. at 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA.
Contact for privacy matters: admin@trywalled.com
Account data: name, email address, Clerk user ID, account role, profile photo, and authentication metadata.
Identity and KYC data: government-issued ID information collected during identity verification (processed by Didit). This data is required before your first payout.
Transaction data: payment amounts, currencies, payment-provider identifiers, buyer email and phone number when provided at checkout, M-Pesa transaction status and receipt references, payout amounts, exchange rates applied, and payout records.
Payout details: mobile wallet phone numbers (M-Pesa, eMola, mKesh) or bank account information you provide for receiving payouts.
Technical data: server logs, IP addresses on certain endpoints, and audit records of admin actions.
To provide the Walled service: creating accounts, processing payments, managing payouts, moderating products, and delivering purchased digital content.
To prevent fraud and comply with legal obligations: KYC verification, transaction monitoring, sanctions screening, and maintaining financial records as required by applicable law.
To operate and improve the platform: security monitoring, technical maintenance, and aggregate usage analytics.
To communicate with you: account notifications, payout status updates, and platform announcements.
Clerk (auth.clerk.com): Handles account authentication and session management. Your email and profile data are stored with Clerk.
Stripe, Inc.: Processes card payments. Buyer card-payment data is governed by Stripe's Privacy Policy. Stripe is PCI-DSS compliant.
M-Pesa and our M-Pesa integration gateway: Process eligible MZN mobile-money payments using the buyer's Vodacom Mozambique phone number, payment amount, transaction reference, status, and receipt information. Their handling of data is also governed by their applicable privacy terms.
Didit: Performs identity verification (KYC) for sellers before their first payout. Identity documents are processed per Didit's own privacy policy.
Open Exchange Rates (open.er-api.com): Provides the USD/MZN exchange rate used at payout time. No personal data is shared with this service.
Cloud infrastructure: Our database and application servers are hosted with appropriate security controls. Data is not sold to third parties.
We disclose the minimum information needed to the selected payment provider to initiate, confirm, reconcile, refund, or investigate a payment. We may share limited buyer information with the relevant seller only where reasonably necessary to deliver the purchase, provide requested support, or resolve a buyer case.
Financial and transaction records are retained for 5 years from the date of the transaction, as required for tax and accounting purposes.
Account data is retained for as long as your account is active. If you close your account, account data is deleted within 90 days, except where retention is required by law.
KYC documents are retained for 5 years after the last transaction associated with your account, in compliance with anti-money-laundering obligations.
After the applicable retention period, data is securely deleted or anonymised.
You have the right to access, correct, or request deletion of your personal data. You may also request restriction of processing or portability of your data in machine-readable format.
To exercise any of these rights, contact us at admin@trywalled.com. We will respond within 30 days. In some cases, legal obligations may prevent us from deleting certain records.
If you believe we have mishandled your personal data, you may lodge a complaint with the appropriate data protection authority in your country of residence.
We implement technical and organisational measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews. No internet transmission is 100% secure. If you believe your account has been compromised, contact us immediately at admin@trywalled.com.
We may update this Privacy Policy from time to time. Material changes will be communicated by email or notice on the platform before they take effect. Continued use after the effective date constitutes acceptance.
Walled, LLC, c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA
Email: admin@trywalled.com | WhatsApp: +258 849 448 994