Privacy Policy

Last updated: 8 July 2026

Data we collect

Account details (name, email, organisation), the program and reporting data you enter, and evidence files you upload. We collect minimal usage analytics to improve the Service.

How we use data

To provide and secure the Service, process subscriptions, and provide support. We do not sell your data.

Beneficiary and community data

You are the data controller for any personal data of beneficiaries you record. Collect only what you need, obtain consent where required, and avoid storing sensitive identifiers unless necessary.

Storage and security

Data is isolated per organisation with role-based access controls. Evidence files are stored with access restricted to your organisation. We apply database-level protections (row-level security) in production.

Your rights and deleting your data

You can export your data at any time. You can also delete your data yourself from Settings, under “Danger zone”: an owner can permanently delete their organisation and all of its data, and any user can permanently delete their own account (which also removes any organisation they are the sole member of). These actions are immediate and cannot be undone. For any other privacy request, contact privacy@csitoolkit.app.

Sub-processors

We rely on infrastructure and payment providers (hosting, database, Stripe, Paystack). Each is bound by appropriate data protection terms.