Privacy Policy

What we collect

• Account: email, name, country.
• KYC (for higher contributions): government ID type/number, ID document image, optional selfie.
• Payment: M-Pesa confirmation SMS contents (reference, amount, payer name, paid_at). We do not store your M-Pesa PIN — we never see it.
• Activity: pages visited, ideas viewed, contributions made.

How we use it

• To verify payments and update your portfolio.
• To meet anti-fraud / KYC obligations on larger contributions.
• To notify you about milestones, payouts, and disputes.

Who we share with

We do not sell personal data. We share narrowly: with our database/auth provider (Supabase) and with M-Pesa/NCBA in the course of payment reconciliation.

Your rights

You may request a copy or deletion of your personal data by emailing hello@aicentral.africa. KYC records may be retained for the regulatory minimum period.

Security

KYC documents live in a private, owner-only bucket with row-level security. All payment writes pass through audit logs.