Privacy Policy

Last updated: 14 June 2026

Data we collect

Account details (name, email, organisation), the program and reporting data you enter, and evidence files you upload. We collect minimal usage analytics to improve the Service.

How we use data

To provide and secure the Service, process subscriptions, and provide support. We do not sell your data.

Beneficiary and community data

You are the data controller for any personal data of beneficiaries you record. Collect only what you need, obtain consent where required, and avoid storing sensitive identifiers unless necessary.

Storage and security

Data is isolated per organisation with role-based access controls. Evidence files are stored with access restricted to your organisation. We apply database-level protections (row-level security) in production.

Your rights

You can export your data at any time and request deletion of your account. Contact privacy@csitoolkit.app.

Sub-processors

We rely on infrastructure and payment providers (hosting, database, Stripe, Paystack). Each is bound by appropriate data protection terms.