Skip to main content
Xabira
Legal

Privacy Policy

Effective date: 15 May 2026

1. Who We Are

Xabira Ltd (“Xabira”, “we”, “our”, or “us”) is a property management platform incorporated in Uganda. We operate the Xabira website at xabira.com and the Xabira mobile and web applications. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, request early access, or use our platform.

This policy is governed by Uganda's Data Protection and Privacy Act, 2019 (PDPA) and, where applicable, supplemented by internationally recognised data protection standards.

2. Information We Collect

2.1 Information you provide directly

  • •Early access requests: full name, email address, phone number, role (landlord / property manager / tenant), and city.
  • •Account registration: email, password (stored as a salted hash), profile information.
  • •Property data: property addresses, unit details, lease terms, and rental amounts you add to the platform.
  • •Tenant information: names, contact details, National Identification Numbers (NIN), and lease agreements — collected with tenant consent.
  • •Payment data: Mobile Money transaction references and payment records (we do not store full Mobile Money credentials).
  • •Communications: messages you send to our support team.

2.2 Information collected automatically

When you visit our website, we automatically collect certain device and usage information including your IP address, browser type, operating system, referring URLs, and pages viewed. This data is collected through cookies and similar tracking technologies (see our Cookie Policy).

3. How We Use Your Information

We use the information we collect to:

  • •Process and respond to early access requests.
  • •Provide, operate, and improve the Xabira platform.
  • •Send transactional communications: receipts, lease notifications, rent reminders.
  • •Send service updates and, where you have opted in, marketing communications.
  • •Verify tenant identity using Uganda's National Identification Register (NIRA) with the tenant's consent.
  • •Detect, prevent, and address fraud, security incidents, and abuse.
  • •Comply with our legal obligations under Ugandan law.

4. Legal Basis for Processing

Under the Uganda PDPA, we process personal data on the following bases:

  • •Consent: for marketing communications and NIN-based tenant verification.
  • •Contractual necessity: to provide the services described in our Terms of Service.
  • •Legitimate interests: for fraud prevention, platform security, and service improvement.
  • •Legal obligation: to comply with applicable Ugandan laws and regulations.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

  • •Service providers: cloud hosting providers, payment processors (MTN, Airtel), SMS gateways, and analytics tools — all bound by confidentiality and data protection obligations.
  • •NIRA: for NIN verification, only with explicit tenant consent.
  • •Legal authorities: where required by Ugandan law, a court order, or to protect rights, property, or safety.

6. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security audits. No method of transmission or storage is 100% secure. In the event of a data breach that affects your rights, we will notify you and the relevant authority as required by the Uganda PDPA.

7. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Early access request data is retained for 24 months or until you request deletion. Account data is retained for the duration of your account and up to 7 years after closure for legal compliance.

8. Your Rights

Under the Uganda PDPA, you have the right to:

  • •Access the personal data we hold about you.
  • •Correct inaccurate or incomplete data.
  • •Request deletion of your data (subject to legal retention obligations).
  • •Object to or restrict certain processing activities.
  • •Withdraw consent at any time (without affecting prior processing).
  • •Lodge a complaint with the Personal Data Protection Office of Uganda.

To exercise any of these rights, contact us at [email protected].

9. Cookies

We use cookies and similar tracking technologies. For full details on what we use and how to manage your preferences, please read our Cookie Policy.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the new policy with an updated effective date. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related enquiries, contact our Data Protection Officer at [email protected] or write to us at: Xabira Ltd, Kampala, Uganda.