1. Introduction

LoanAfrica ("we", "us", or "our") operates a multi-tenant loan management platform ("the Platform"). This Privacy Policy explains how information is collected, used, and handled in connection with the Platform. By registering for or using the Platform, you ("the Tenant") acknowledge and agree to the practices described in this Policy.

2. Information We Collect

We collect two broad categories of information:

2.1 Account and Subscription Information

When a Tenant registers, we collect the organisation name, administrator name, email address, country, timezone, currency, and subscription status. This information is used solely to provision and maintain the Tenant's account.

2.2 Tenant Data

All borrower records, loan details, repayment schedules, payment histories, client personal information, and other financial data entered into the Platform ("Tenant Data") are entered by the Tenant and remain the Tenant's sole property and responsibility. We do not independently collect, verify, or assume ownership of Tenant Data.

2.3 Usage and Technical Data

We automatically collect technical data such as IP addresses, browser type, device information, session logs, and usage analytics to operate, maintain, and improve the Platform.

3. How We Use Information

• To provision, operate, and maintain the Tenant's account and the Platform;
• to process Subscription payments and communicate billing information;
• to provide technical support and respond to queries;
• to detect, investigate, and prevent security incidents, fraud, or abuse;
• to comply with legal obligations; and
• to use anonymised and aggregated Tenant Data to analyse usage patterns, improve Platform features, and advance software development. Such use will not identify any individual or expose identifiable Tenant information.

4. Tenant's Role as Data Controller

The Tenant is the data controller in respect of all personal information of third parties (borrowers, guarantors, and others) entered into the Platform. LoanAfrica is not responsible for the Tenant's data collection practices, the legality of the Tenant's data processing, or the Tenant's compliance with applicable data protection laws. The Tenant is solely responsible for obtaining valid consents, responding to data subject rights requests, and complying with all relevant legislation including POPIA (South Africa), Zimbabwe's Data Protection Act, and any other applicable law.

5. No Liability for Data Breaches or Exposure

To the fullest extent permitted by applicable law, LoanAfrica, its developers, owners, and operators shall not be liable for any loss, corruption, unauthorised disclosure, or exposure of Tenant Data, regardless of cause. This includes incidents resulting from cyberattacks, server failures, third-party breaches, force majeure events, or any other circumstance. The Tenant is solely responsible for notifying affected individuals and regulators in the event of a data breach involving Tenant Data, as required by applicable law.

6. Data Sharing and Third Parties

We do not sell identifiable Tenant Data to third parties. We may share information with:

• Service providers — hosting providers, payment processors, email delivery services, and other vendors engaged to support the Platform, who are bound by confidentiality obligations;
• Legal and regulatory authorities — where required by law, court order, or to protect the rights and safety of LoanAfrica or others; and
• Business transfers — in the event of a merger, acquisition, or sale of assets, Tenant Data may be transferred to the acquiring entity subject to equivalent privacy protections.

7. Data Retention

We retain account information for the duration of the Subscription and for a reasonable period thereafter as required by law or legitimate business purposes. Upon termination of a Tenant's account, Tenant Data may be deleted after a reasonable notice period. The Tenant is solely responsible for exporting and retaining copies of Tenant Data before account termination.

8. Security

We implement industry-standard technical and organisational security measures to protect the Platform and data it holds. However, no system is completely secure, and we cannot guarantee the absolute security of any data. The Tenant is responsible for maintaining the security of its login credentials and access controls within its organisation.

9. Cookies and Tracking

The Platform uses session cookies necessary for authentication and security. We do not use third-party advertising trackers. By using the Platform, the Tenant consents to the use of such necessary cookies.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Continued use of the Platform following any update constitutes acceptance of the revised Policy. We encourage Tenants to review this Policy periodically.

11. Contact

For privacy-related queries, please contact us at privacy@myloanafrica.com.