Back to home

M-Pesa privacy disclosures — effective September 22, 2026.

Privacy Policy

Last updated: September 8, 2026

1. Who We Are

Walled, LLC, a Delaware limited liability company, is the data controller for personal data processed through the Walled platform. Its registered agent is Legalinc Corporate Services Inc. at 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA.

Contact for privacy matters: admin@trywalled.com

2. Data We Collect

Account data: name, email address, Clerk user ID, account role, profile photo, and authentication metadata.

Identity and KYC data: government-issued ID information collected during identity verification (processed by Didit). This data is required before your first payout.

Transaction data: payment amounts, currencies, payment-provider identifiers, buyer email and phone number when provided at checkout, M-Pesa transaction status and receipt references, payout amounts, exchange rates applied, and payout records.

Payout details: mobile wallet phone numbers (M-Pesa, eMola, mKesh) or bank account information you provide for receiving payouts.

Technical data: server logs, IP addresses on certain endpoints, and audit records of admin actions.

3. Why We Process Your Data

To provide the Walled service: creating accounts, processing payments, managing payouts, moderating products, and delivering purchased digital content.

To prevent fraud and comply with legal obligations: KYC verification, transaction monitoring, sanctions screening, and maintaining financial records as required by applicable law.

To operate and improve the platform: security monitoring, technical maintenance, and aggregate usage analytics.

To communicate with you: account notifications, payout status updates, and platform announcements.

4. Third-Party Processors

Clerk (auth.clerk.com): Handles account authentication and session management. Your email and profile data are stored with Clerk.

Stripe, Inc.: Processes card payments. Buyer card-payment data is governed by Stripe's Privacy Policy. Stripe is PCI-DSS compliant.

M-Pesa and our M-Pesa integration gateway: Process eligible MZN mobile-money payments using the buyer's Vodacom Mozambique phone number, payment amount, transaction reference, status, and receipt information. Their handling of data is also governed by their applicable privacy terms.

Didit: Performs identity verification (KYC) for sellers before their first payout. Identity documents are processed per Didit's own privacy policy.

Open Exchange Rates (open.er-api.com): Provides the USD/MZN exchange rate used at payout time. No personal data is shared with this service.

Cloud infrastructure: Our database and application servers are hosted with appropriate security controls. Data is not sold to third parties.

We disclose the minimum information needed to the selected payment provider to initiate, confirm, reconcile, refund, or investigate a payment. We may share limited buyer information with the relevant seller only where reasonably necessary to deliver the purchase, provide requested support, or resolve a buyer case.

5. Data Retention

Financial and transaction records are retained for 5 years from the date of the transaction, as required for tax and accounting purposes.

Account data is retained for as long as your account is active. If you close your account, account data is deleted within 90 days, except where retention is required by law.

KYC documents are retained for 5 years after the last transaction associated with your account, in compliance with anti-money-laundering obligations.

After the applicable retention period, data is securely deleted or anonymised.

6. Your Rights

You have the right to access, correct, or request deletion of your personal data. You may also request restriction of processing or portability of your data in machine-readable format.

To exercise any of these rights, contact us at admin@trywalled.com. We will respond within 30 days. In some cases, legal obligations may prevent us from deleting certain records.

If you believe we have mishandled your personal data, you may lodge a complaint with the appropriate data protection authority in your country of residence.

7. Security

We implement technical and organisational measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews. No internet transmission is 100% secure. If you believe your account has been compromised, contact us immediately at admin@trywalled.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or notice on the platform before they take effect. Continued use after the effective date constitutes acceptance.

9. Contact

Walled, LLC, c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA

Email: admin@trywalled.com | WhatsApp: +258 849 448 994