Legal
Privacy Policy
Last updated: January 2026
1. Data Collection
We collect information you provide directly — your name, email, phone number, and property preferences when you register, list, or enquire. We also collect usage data automatically: pages visited, search queries, device information, and IP address. Payment information is processed by our payment partners (EcoCash, InnBucks, OneMoney, Stripe) and is not stored on our servers beyond what is required for transaction records.
2. How We Use Your Data
Your data is used to provide and improve the Musha platform: matching you with properties, connecting you with agents, processing transactions, sending notifications, and personalising your experience. We do not sell your personal data to third parties.
3. Cookies
We use essential cookies to maintain your session and preferences (language, currency). Analytics cookies help us understand how the platform is used so we can improve it. You may disable non-essential cookies in your browser settings, though some features may not function correctly without them.
4. Third Parties
We share data with: (a) EAC-verified agents you contact through the platform, (b) payment processors to complete transactions, (c) analytics providers to understand usage patterns, and (d) law enforcement when required by Zimbabwean law. All third parties are bound by data protection agreements.
5. Data Storage & Security
Data is stored on encrypted servers with access controls, regular security audits, and automated backups. We comply with the Zimbabwe Data Protection Act and international best practices. Despite our best efforts, no system is completely secure — we recommend using strong passwords and enabling two-factor authentication.
6. Your Rights
You have the right to: access your personal data, correct inaccuracies, request deletion of your account and associated data, export your data in a portable format, and object to processing for direct marketing. To exercise any right, contact [email protected].
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Transaction records are retained for 7 years as required by Zimbabwean financial regulations. You may request account deletion at any time, after which we will remove your personal data within 30 days, except where retention is legally required.
8. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via email or platform notification at least 14 days before taking effect. Continued use of the platform constitutes acceptance of the updated policy.