Privacy policy

NKENIDY INVEST is operated by Africa Rise Consulting / Phoenix Informatique, based in Burkina Faso. We are the data controller for the information described here.

When you create an account: your name, email address, country, and depending on your role, a phone number or the name and type of your firm.

When you sign in with Google: the name and email address that Google confirms, and a stable identifier for your Google account. We never see your Google password.

For security: a password, if you set one, stored only as a hash that cannot be reversed; your two-factor secret, encrypted; backup codes, hashed; the sessions you open; and the time, network address and browser of security-relevant actions, kept in an audit log.

Later phases of the platform will add identity documents for verification (KYC), project documents and signed confidentiality agreements. This policy will be updated before those features open.

To run your account and sign you in; to protect accounts against misuse, which is why security actions are logged; to send you the emails the service needs, such as address verification and password resets; and to meet legal obligations that apply to an investment platform.

We do not sell personal data and we do not use it for advertising.

The database is hosted by Neon in Frankfurt, Germany (European Union). The application runs on Vercel. Emails are sent through Resend. Each of these providers processes data on our instructions under its own agreements. The hosting arrangement may move to Google Cloud as the platform grows; this policy will say so when it does.

We use only the cookies the service needs: the ones that keep you signed in, the one that remembers a device you chose to trust for 30 days, and short-lived ones that protect sign-in against forgery. There are no advertising or tracking cookies.

Account data stays for as long as your account exists. Sessions expire after 30 days of inactivity. Audit log entries are kept for the time the law requires for a platform of this kind, and otherwise for no longer than needed to investigate misuse.

When you delete your account, your personal data is removed except where we are required to keep a record.

You can ask to see the data we hold about you, correct it, or have it deleted; you can object to a use you disagree with; and you can take your data with you. Write to the address below and we answer within one month. You may also complain to the data protection authority of your country, including the Commission de l'Informatique et des Libertés in Burkina Faso.

We will update this policy as the platform adds features. The version and date at the top tell you which text applies; material changes are announced on the platform.