afriQora

Privacy Policy

Last updated: September 25, 2026

This Privacy Policy explains how afriQora ("afriQora", "we", "us") collects, uses, and protects information when you use the afriQora platform (the "Service").

1. Information we collect

We collect information in the following ways:

  • Account information you provide directly: name, email address, phone number, preferred language, and organization details.
  • Business data you or your organization enter into the Service: farm and livestock/crop records, inventory, orders, customers, suppliers, financial records, funding applications, support tickets, and similar operational data.
  • Payment information processed for transactions on the platform. Full card or mobile money credentials are handled by our payment providers (Flutterwave, MTN Mobile Money) directly — afriQora stores transaction references and status, not raw payment credentials.
  • Usage data such as log-in activity and general usage of the Service, used to maintain security and improve the product.

2. How we use information

We use the information we collect to:

  • Provide, maintain, and secure the Service for you and your organization.
  • Process payments and financial transactions you initiate on the platform.
  • Communicate with you about your account, transactions, and Service updates.
  • Detect, investigate, and prevent fraudulent or unauthorized activity.
  • Comply with applicable legal and regulatory obligations.

We do not sell your personal information.

3. How information is shared

We share information only as needed to operate the Service:

  • Within your organization, according to the roles and permissions your organization's administrators configure.
  • With other organizations on the platform, only where a feature explicitly requires it — for example, order and marketplace details shared between a buyer and a seller organization, or a funding application shared with the reviewing funding partner.
  • With service providers who process data on our behalf, such as our hosting provider (Supabase), payment providers (Flutterwave, MTN Mobile Money), and, where configured, AI, SMS/WhatsApp, and email providers.
  • When required by law, such as in response to a valid legal request from a competent authority.

4. Data security

Business data in the Service is isolated by organization using database-level access controls (row-level security), so one organization cannot read another organization's records except where a feature explicitly shares specific data between them. We use industry-standard measures such as encrypted connections (HTTPS/TLS) to protect data in transit.

5. Data retention

We retain account and business data for as long as your organization's account is active, and for a reasonable period afterward as needed to comply with legal, accounting, or reporting obligations. You can request deletion of your account by contacting us.

6. Your rights

Depending on your location, you may have rights to access, correct, export, or request deletion of your personal information. To exercise these rights, contact us using the details below.

7. Children

The Service is intended for business use and is not directed to individuals under the age of 18.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by other reasonable means before the changes take effect.

9. Contact

Questions about this Privacy Policy can be sent to [insert support/privacy contact email].

This document is a general-purpose starting template and has not been reviewed by a lawyer. Have it reviewed for the data protection laws that apply in the countries where your organization operates (for example, Togo's and Ghana's data protection regimes) before relying on it.