Skip to content
CGN WiFi
Back to home

Privacy Policy

Last updated: 27 October 2026

CGN WiFi provides billing and network management software to internet service providers (ISPs) in Kenya. This policy explains what we collect, why we collect it, who we share it with, and how long we keep it. It covers our website, our dashboard, and the captive portal your ISP shows you when you buy Wi-Fi.

1. What We Collect

We collect only what we need to sell Wi-Fi access and run the platform:

  • Phone numbers. Used to identify you when you pay by M-Pesa and to send receipts and reminders.
  • MAC addresses and session logs. Used to connect your device to the network and to measure the time and data you have used.
  • Account details for ISPs. Business name, contact details, and login information for the people who operate the dashboard.

We do not track the websites you visit, the apps you use, or your DNS queries.

2. How We Use It

We use the information we collect to:

  • Process M-Pesa payments and issue receipts.
  • Authenticate Wi-Fi users through RADIUS and apply the plan they paid for.
  • Provide the ISP dashboard, including live sessions, subscribers, and reports.
  • Send service messages such as payment confirmations and expiry reminders.

We do not use your data for advertising, and we do not build browsing profiles.

3. Who We Share It With

We share data only with the providers that make the service work:

  • Tuma — to collect M-Pesa payments and settle them to your ISP.
  • Clerk — to handle sign-in and account security for ISP staff.
  • Hosting providers — to run the platform and store data securely.

We never sell your data. We may disclose it if the law requires us to, or to protect the safety and rights of our users.

4. Data Retention

Session logs, including MAC addresses and connection times, are deleted after 12 months. Payment records are kept for 7 years to meet Kenyan tax and accounting requirements. ISP account details are kept for as long as the account is active.

5. Contact Us

Questions about this policy, or a request to access or delete your data, can be sent to [email protected].