Privacy policy
Last updated: July 2026
1. Data collected
MPPA collects, in the course of operating its services, the following data: name, email address, phone number, identity document (for KYC verification of project owners), and payment information. On mppa.africa, only data required for the contact form and newsletter is collected.
2. Use of data
Your data is used to: process donations and disbursements, verify your identity (KYC), send you platform-related communications, improve our services, and meet our legal and regulatory obligations.
3. Data sharing
Your data may be shared with our payment provider (FedaPay) and hosting providers (Supabase, Google Firebase) strictly for service delivery. MPPA does not sell or rent your data to third parties for commercial purposes.
4. Data retention
Your data is retained for the duration of your relationship with MPPA, plus the legally required period (5 years for financial data, in accordance with applicable OHADA regulations).
5. Your rights
Under applicable regulations, you have the right to access, correct, delete, and port your data. To exercise these rights, contact us at contact@mppa.africa. We will handle your request within 30 days.
6. Security
MPPA implements technical and organisational measures to protect your data: in-transit encryption (TLS), access compartmentalisation, and strict access control. In the event of a confirmed breach, we will notify you as soon as possible.