Privacy Policy

Effective date: 27 May 2026 | Savvy Ventures Limited

We collect only the minimum data needed to operate the platform. We do not sell your personal data to third parties.

1. Who We Are

Africa Watch is operated by Savvy Ventures Limited ("we", "us", "our"), a company registered in Kenya. This policy explains what personal data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

Account data — when you register, we collect:

Username
Email address
Hashed password (we never store your password in plain text)
Date and time you accepted our Terms of Service
Account creation date
Organisation name (optional)

Usage data — we log standard server access data including IP address, request path, HTTP status code, and timestamp. This is used for security monitoring and platform reliability.

Briefing queries — when you generate a Briefing, we store the location queried and the generated output to allow you to retrieve past Briefings and to improve the service.

3. Multi-Factor Authentication

If you enable MFA, we send a one-time code to your email address for verification. We do not store MFA codes after they expire.

4. How We Use Your Data

To provide, maintain, and improve the platform
To authenticate your account and protect against unauthorised access
To send transactional emails (account verification, MFA codes, billing receipts)
To comply with legal obligations
To investigate security incidents or abuse

We do not use your data for advertising or sell it to third parties.

5. Data Sharing

We share data only with:

Infrastructure providers — our server runs on Oracle Cloud Infrastructure. Data is stored and processed in the EU or US depending on Oracle region configuration.
Email delivery — transactional emails are sent via Brevo (formerly Sendinblue). Your email address is shared with Brevo solely to deliver emails to you.
Intelligence processing — when you generate a Briefing, the location query is processed by our automated analysis pipeline. No account-identifying data is transmitted externally.
Law enforcement — we will disclose data when required by a valid legal order.

6. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days except where we are required to retain it by law (for example, billing records).

Server access logs are retained for up to 90 days.

7. Security

We apply industry-standard security measures including bcrypt password hashing, HTTPS/TLS in transit, JWT authentication, and rate limiting. No system is perfectly secure — if you discover a vulnerability, please report it responsibly to [email protected].

8. Cookies and Local Storage

Africa Watch stores your authentication token in browser localStorage and sessionStorage to keep you signed in. We do not use third-party tracking cookies or analytics cookies.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict certain processing
Receive a copy of your data in a portable format

To exercise any of these rights, email [email protected] with the subject line "Data Request".

10. Children

Africa Watch is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. We will note the updated effective date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the revised policy.

12. Contact

Questions or requests? Email us at [email protected].