Privacy policy

• Account data — name, phone number, email address and, optionally, a profile photo.
• Campaign data — the title, story, images, goal and payout details you publish.
• Contribution data — amount, currency, timestamp, channel and the provider reference for each transaction.
• Messaging data — WhatsApp opt-in status and message delivery receipts, where you enable notifications.
• Technical data — device, browser and IP information used for security and fraud prevention.

We use your data to run campaigns, process and reconcile contributions, generate the public ledger, send the notifications you asked for, verify organizers, prevent fraud, and meet our legal and accounting obligations. We do not sell personal data, and we do not use contribution data for advertising.

Campaign pages are public by design: the title, story, cover image, organizer name, goal and progress are visible to anyone with the link. Contributions appear in the public ledger with a display name and amount. If a contributor selects "contribute anonymously", their name is hidden from the public page — but the record is still retained internally for reconciliation and legal compliance.

We share the minimum necessary data with the providers that make the platform work: mobile money and payment processors, the WhatsApp Business Cloud API for notifications, our cloud hosting and database provider, and error monitoring. These providers process data on our instructions. We also disclose data where required by a lawful order.

Financial records — contributions, payouts and fee records — are kept for at least seven years to satisfy accounting and anti-money-laundering requirements. Other account data is deleted or anonymised within 30 days of account closure.

You can access, correct, export or delete your personal data, withdraw consent for notifications at any time, and object to processing. Deleting an account does not remove immutable ledger entries for contributions already made, because those records also belong to the contributors and to our statutory obligations. To exercise a right, contact us through the contact page.

Data is encrypted in transit and at rest. Access to production data is restricted and logged, payment credentials are held in a managed secret store and never in application code, and every database table enforces row-level access rules so users can only read the records they are entitled to.

Crowpay is not intended for anyone under 18, and we do not knowingly collect their data.