This Privacy Policy describes how Sporafind ("we", "our", or "us") collects, uses, stores, shares, and protects your personal information when you access or use our AI-powered diaspora intelligence platform, website, and related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
1. Information We Collect
We collect information you provide directly, information automatically collected through your use of the Service, and information我们从 publicly available sources to power our diaspora intelligence engine.
1.1 Personal Data You Provide
When you create an account, subscribe to a plan, contact our team, or participate in a demo, we collect:
- Account information: name, email address, organisation name, job title, phone number, and billing address.
- Payment information: processed by our third-party payment processors. We do not store full credit card numbers or banking details on our servers.
- Communications: records of your correspondence with our support, sales, and customer success teams.
1.2 Usage Data
We automatically collect certain information when you use the Service, including:
- Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
- Device data: device type, screen resolution, unique device identifiers, and browser settings.
- Interaction data: search queries, profiles viewed, filters applied, exports generated, and feature usage patterns.
- Performance data: page load times, error messages, and API call metrics used to monitor and improve service reliability.
1.3 Profile Data from Public Sources
Sporafind's core intelligence is built from publicly available data sources, including:
- Public social media profiles and professional network pages
- Company registries and business filings (e.g., Companies House, SEC filings)
- Public news articles, press releases, and media mentions
- Academic publications and institutional directories
- Government databases, trade registers, and publicly maintained diaspora records
- Crunchbase, Bloomberg, and other publicly accessible business intelligence sources
This data is aggregated, structured, and enriched by our AI models to produce diaspora profiles. Where we display information about individuals identified through these sources, we do so on the basis of our legitimate interest in providing diaspora intelligence services. If you believe your publicly available data has been included in error or wish to exercise your data rights, please contact us at the address below.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and maintain the Service: authenticating users, processing searches, generating profiles, enabling exports, and delivering platform features as described in our product documentation.
- To improve and develop the Service: analysing usage patterns to refine AI models, improve segmentation accuracy, and develop new features that better serve our users.
- To communicate with you: sending account-related notices, billing information, security alerts, and product updates. We may also send marketing communications about new features or offerings, which you can opt out of at any time.
- To ensure security and prevent abuse: monitoring for unauthorised access, detecting fraudulent activity, enforcing our terms of service, and protecting the integrity of the platform.
- To comply with legal obligations: responding to lawful requests from regulators, law enforcement, or other government authorities as required by applicable law.
3. Data Sharing and Disclosure
We do not sell your personal information. We may share your data in the following circumstances:
- Service providers: with third-party vendors who process data on our behalf for cloud hosting (AWS), payment processing (Stripe), analytics (PostHog), email delivery (Resend), and customer support (Intercom). These providers are contractually bound to protect your data and may only use it for the purposes we specify.
- Affiliates: with Gabochie Intelligence Ltd, our parent company, for internal administrative purposes and product development.
- Legal compliance: when required by law, court order, or government regulation, or to establish or exercise our legal rights or defend against legal claims.
- Business transfers: in connection with a merger, acquisition, restructuring, or sale of assets, in which case your information will remain subject to this Privacy Policy (or a substantially similar policy) unless you are notified otherwise.
- With your consent: we may share information for any other purpose with your explicit consent.
Aggregated, anonymised data that cannot reasonably identify an individual may be shared for research, reporting, or benchmarking purposes without restriction.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: retained for the duration of your account plus 90 days after account deletion to allow for recovery, after which it is permanently deleted or anonymised.
- Usage data: retained for up to 24 months for analytics and service improvement purposes, after which it is aggregated and anonymised.
- Profile data from public sources: periodically refreshed to maintain accuracy. Historical versions may be retained for audit and provenance tracking purposes.
- Billing records: retained for the period required by applicable tax and financial regulations (typically 6-7 years).
You may request earlier deletion of your data in accordance with your rights described in Section 6 below.
5. Data Security
We implement industry-standard technical and organisational measures to protect your personal information, including:
- Encryption of data in transit using TLS 1.3 protocols
- Encryption of data at rest using AES-256
- Access controls and authentication mechanisms for all internal systems
- Regular security audits, vulnerability assessments, and penetration testing
- Employee training on data protection and privacy best practices
- Strict least-privilege access policies for production data
While we take every reasonable precaution, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but will notify you promptly of any data breach affecting your personal information as required by applicable law.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restrict processing: request that we restrict the processing of your data in certain circumstances.
- Right to data portability: request a structured, machine-readable copy of your data for transfer to another service provider.
- Right to object: object to processing based on legitimate interests, including profiling for direct marketing purposes.
- Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, contact us at privacy@sporafind.com. We will respond to your request within 30 days. If you are in the European Economic Area (EEA) or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience, analyse usage, and support our security operations. Specifically:
- Essential cookies: required for authentication, session management, and platform functionality. These cannot be disabled.
- Analytics cookies: help us understand how users interact with the platform so we can improve features and performance.
- Preference cookies: remember your settings, language, and display preferences across sessions.
You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality. We do not use cookies for third-party advertising or cross-site tracking. For more details, please refer to our Cookie Policy.
8. Children's Privacy
Sporafind is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information promptly. If you believe a child has provided us with personal data, please contact us immediately at privacy@sporafind.com.
9. International Data Transfers
Sporafind is headquartered in Ghana and operates globally. Your personal data may be transferred to, stored, and processed in countries outside your country of residence, including Ghana, the United States, the United Kingdom, and the European Economic Area.
When we transfer data across borders, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) as approved by the European Commission
- Data Processing Agreements (DPAs) with all sub-processors
- Adequacy decisions where applicable under GDPR Article 45
- Binding Corporate Rules for intra-group transfers where required
By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your own, subject to the safeguards described above.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be notified via:
- Email to the address associated with your account
- A prominent notice on the Sporafind platform
- An update to the "Last updated" date at the top of this policy
We encourage you to review this policy periodically. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy. If you do not agree with any material change, you may close your account and request deletion of your data.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
For users in the European Economic Area, our EU representative can be contacted at eu-rep@sporafind.com.
For users in the United Kingdom, our UK representative can be contacted at uk-rep@sporafind.com.
This Privacy Policy is governed by the laws of the Republic of Ghana, without regard to its conflict of laws principles. Any disputes arising under this policy shall be resolved in the courts of Accra, Ghana.