Privacy Policy
Your privacy matters to us. Here is exactly how we handle your data.
Last updated: April 2026
We take your privacy seriously
Questions about your data? Contact our privacy team at privacy@thecircleafrica.com
1. Introduction
The Circle Global ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at thecircleafrica.com (the "Platform"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform.
2. Information We Collect
Information you provide directly:
- Account registration data: name, email address, password (stored as a one-way hash)
- Profile information: country, organisation, bio, role selection
- Innovation submissions: title, description, problem statement, solution, impact metrics, media files
- Funding expressions: funding range, intent, timeline, message
- Validation reviews: scores, notes (validators only)
- Communications: emails and messages sent to our support team
Information collected automatically:
- Usage data: pages visited, features used, session duration
- Device data: browser type, operating system, IP address
- Cookies and similar tracking technologies (see Section 7)
3. How We Use Your Information
- To create and manage your account
- To process and display innovation submissions
- To facilitate the validation process and connect innovators with validators
- To enable funding expressions of interest between funders and innovators
- To send transactional emails (submission confirmations, validation results, platform updates)
- To improve and personalize your experience on the Platform
- To analyze usage patterns and improve Platform features
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
4. Information Sharing
We do not sell your personal information. We may share your information in the following limited circumstances:
- With other Platform users as necessary (e.g., your innovation profile is visible to funders and validators)
- With service providers who help us operate the Platform (AWS, Cloudflare, email providers) under strict data processing agreements
- With law enforcement or regulators when required by applicable law
- In connection with a merger, acquisition, or sale of assets, with appropriate notice provided to you
- With your explicit consent for any other purpose
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes or preventing fraud). Innovation submissions may be retained in anonymized form for research and impact reporting purposes.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a machine-readable format
- Objection: Object to processing of your data for direct marketing or other purposes
- Restriction: Request that we restrict processing of your data in certain circumstances
To exercise these rights, email privacy@thecircleafrica.com. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: encrypted data transmission (TLS), hashed password storage (bcrypt), JWT-based authentication with short-lived access tokens, rate limiting on authentication endpoints, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. International Transfers
The Circle Global operates primarily from Nairobi, Kenya, with infrastructure hosted on AWS (af-south-1 primary region). If you access the Platform from outside Africa, your data may be transferred to and processed in Kenya and other countries where AWS operates. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
10. Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly. If you believe a child has submitted information to us, please contact us at privacy@thecircleglobal.org.
11. Third-Party Links
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of any third-party sites you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date and, where appropriate, by sending an email notification. We encourage you to review this policy periodically. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team at privacy@thecircleafrica.com or by writing to: The Circle Global, Privacy Team, Nairobi, Kenya. We aim to respond to all privacy inquiries within 30 days.