Privacy Policy

AfrikGPT respects your privacy. This policy describes how we collect, use, retain, and protect your information, and your rights under applicable law (including GDPR, CCPA, and other data protection regulations).

1. Information We Collect

We collect: (a) Account data you provide (e.g. name, email, phone, password); (b) Usage data (e.g. feature use, logs, session data); (c) Content you create (summaries, transcripts, prompts, generated content) when you use our services; (d) Payment and billing data (processed by our payment provider) where applicable; (e) Technical data (IP address, device/browser) for security and operations.

2. How We Use It & Legal Basis (GDPR)

We use your information to operate the service, authenticate users, process payments, improve products, and comply with law. We do not sell your personal information to third parties. For EEA/UK users: we rely on contract performance, legitimate interests (security, analytics, product improvement), and where required, your consent.

3. Data Retention

We retain account and usage data for as long as your account is active and as needed to provide the service. Audit and security logs are retained per our security policy (e.g. up to 90 days unless a longer period is required by law). You may request deletion (see Your Rights below); we will delete or anonymize data except where we must retain it for legal or legitimate purposes.

4. Your Rights (GDPR, CCPA & Others)

• Right to know / access: You may request a copy of the personal data we hold about you.
• Right to erasure / delete: You may request deletion of your personal data, subject to legal exceptions.
• Right to portability: Where applicable, we can provide your data in a machine-readable format.
• Right to correct: You may update your account details or ask us to correct inaccuracies.
• Right to restrict or object: In certain cases you may restrict or object to processing (e.g. marketing).
• Right to withdraw consent: Where we rely on consent, you may withdraw it at any time.
• CCPA – Opt-out of sale/share: We do not sell personal information. If our practices change, we will provide a “Do Not Sell or Share My Personal Information” option (see below).
• Non-discrimination (CCPA): We will not discriminate against you for exercising your privacy rights.

To exercise these rights, use the self-service options below or contact us using the details in the Contact section. We will respond within the timeframes required by applicable law (e.g. 30 days for CCPA, one month for GDPR, subject to extensions where permitted).

Self-service: Log in and go to Account & privacy to export your data or delete your account.

5. Do Not Sell or Share My Personal Information (CCPA)

We do not sell or share your personal information as defined under the CCPA. If that changes, we will update this policy and provide a clear way to opt out (e.g. link in footer or account settings). California residents may contact us to request disclosure or deletion as described above.

6. Subprocessors & Data Processing

We use subprocessors for hosting, email, payments, and analytics. We ensure they meet appropriate security and confidentiality obligations. For GDPR, we use standard contractual clauses or other approved mechanisms where data is transferred outside the EEA. A Data Processing Agreement (DPA) is available to customers on request.

7. Security & Compliance

We implement technical and organizational measures to protect your data (e.g. encryption in transit and at rest where applicable, access controls, audit logging). Our approach to security hardening, DoS prevention, and compliance (GDPR, ISO 27001, SOC 2, CCPA) is described in our Security and Compliance documentation, available to customers and upon request.

8. Contact & Data Protection Enquiries

For privacy requests, data subject rights, or Data Protection Officer (DPO) enquiries, please contact us through the channels provided on our website (e.g. contact form, support email). Include “Privacy” or “Data Request” in the subject line. You also have the right to lodge a complaint with a supervisory authority (e.g. in your country of residence).