Privacy Policy

At Jambi Core, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, organization name, and role when you register for an account.
• Profile Information: Phone number, job title, and profile picture if you choose to provide them.
• Organization Data: Information about beneficiaries, projects, cases, distributions, and financial data that you enter into the platform.
• Communications: Information you provide when you contact us for support or feedback.

1.2 Information Collected Automatically

When you use our platform, we automatically collect:

• Usage Data: Pages visited, features used, actions taken, and time spent on the platform.
• Device Information: Browser type, operating system, device type, and IP address.
• Log Data: Access times, error logs, and referring URLs.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and manage your account
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns and trends
• Detect, investigate, and prevent fraudulent transactions and unauthorized access
• Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Within Your Organization: Data is shared with other members of your organization based on their role and permissions.
• Service Providers: We work with third-party service providers who need access to your information to support our operations (e.g., hosting, analytics).
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred.

4. Data Security

We implement robust security measures to protect your data:

• End-to-end encryption for data in transit (TLS 1.3)
• Encryption at rest using AES-256
• Row-level security ensuring data isolation between organizations
• Regular security audits and penetration testing
• Multi-factor authentication options
• 24/7 security monitoring

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You may request deletion of your data at any time, subject to legal and contractual obligations.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

8. Sensitive Data

We understand that humanitarian organizations handle sensitive data, including information about vulnerable populations, GBV cases, and child protection matters. We implement additional security measures for such data, including:

• Restricted access controls
• Enhanced audit logging
• Break-glass access procedures
• Online-only access (no offline caching for sensitive cases)

9. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Understand how you use our platform
• Improve our services

You can control cookies through your browser settings.

10. Children's Privacy

Our platform is not directed to children under 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: privacy@jambicore.org
• Address: Plot 123, Kololo Road, Juba, South Sudan