📄 Applies to SaccoRa web platform and mobile app
SaccoRa ("we", "our", or "us") is committed to protecting the privacy of SACCO staff, members, and operators who use our platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use SaccoRa.
Section 02
How We Use Your Information
We use the information collected to:
- Provide and operate the SaccoRa platform for your SACCO
- Process savings deposits, withdrawals, loan applications and repayments
- Generate account statements, receipts, and financial reports
- Send transaction notifications and alerts to SACCO members
- Provide customer support and respond to enquiries
- Maintain security, detect fraud, and prevent unauthorised access
- Comply with applicable laws and regulatory requirements in Uganda
- Improve and develop our platform features
We do not use your information for advertising purposes or sell it to third parties for marketing.
Section 03
Information Sharing
We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:
- Within your SACCO: SACCO staff with appropriate permissions can access member data as necessary to provide services
- Service providers: Trusted third-party providers who help operate our infrastructure (hosting, email delivery) under strict confidentiality agreements
- Legal requirements: When required by Ugandan law, court order, or government authority
- Business transfers: In connection with a merger or acquisition, with continued protection under this policy
Your SACCO's data belongs to your SACCO. SaccoRa acts as a data processor on behalf of each SACCO organisation. Each SACCO retains ownership and control of their members' data.
Section 04
Data Storage & Security
Your data is stored on secure servers hosted in accordance with industry standards. We implement the following security measures:
- Encrypted data transmission using HTTPS/SSL on all connections
- Password hashing using bcrypt — we never store plain text passwords
- Role-based access controls limiting staff access to appropriate data only
- Two-factor authentication available for staff accounts
- Regular database backups to prevent data loss
- Audit logging of all significant account actions
Data Location
Secure servers, Uganda/EA region
Encryption
HTTPS/SSL + bcrypt passwords
Backups
Regular automated backups
Access Control
Role-based permissions + 2FA
Section 05
Data Retention
We retain your data for as long as your SACCO maintains an active account with SaccoRa, and as required by applicable financial regulations in Uganda.
- Transaction records are retained for a minimum of 7 years in compliance with financial record-keeping requirements
- Member profile data is retained while the member is active and for a reasonable period after account closure
- When a SACCO account is terminated, we will securely delete or anonymise data within 90 days, except where retention is required by law
Section 06
Your Rights
SACCO members and operators have the following rights regarding their personal data:
- Access: Request a copy of personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your data where no legal obligation requires retention
- Portability: Download your SACCO data in CSV format at any time
- Objection: Object to processing of your data in certain circumstances
To exercise any of these rights, contact us at privacy@saccoraapp.com. We will respond within 30 days.
Section 07
Children's Privacy
SaccoRa is a financial management platform intended for adults and registered SACCO organisations. We do not knowingly collect personal information from children under the age of 18.
If you believe a child has provided us with personal information, please contact us immediately at privacy@saccoraapp.com and we will take steps to remove such information.
Section 08
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify SACCO administrators via email
- Display a notice in the SaccoRa staff portal
Continued use of SaccoRa after changes take effect constitutes acceptance of the updated policy.