Privacy Policy
Last Updated: [28th January 2026]
Notify Africa (“we”, “us”, “our”) is a cloud communication platform owned and operated by IPF Softwares Co. LTD, registered in the United Republic of Tanzania.
We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy describes how we collect, use, store, and protect information when you access our website, dashboard, APIs, mobile services, and communication tools.
By using Notify Africa, you agree to the practices outlined in this Privacy Policy.
1. Information We Collect
1.1. Information You Provide
We collect personal and business information when you:
- Create an account
- Verify your phone number or email
- Purchase credits or subscriptions
- Use our APIs
- Contact support
- Submit sender IDs, templates, or compliance documents
This may include:
- Full name
- Email address
- Phone number
- Business name & registration details
- Billing information
- Sender IDs and approved templates
- Uploaded verification or compliance documents
1.2. Information Collected Automatically
When using the Platform, we automatically collect:
- Device information (browser, OS, IP)
- Log data (timestamps, pages visited, session behaviour)
- API request metadata
- Authentication logs
- Delivery reports from network operators
- Error logs and system analytics
This helps us improve performance, security, and user experience.
1.3. Message Metadata
For SMS, WhatsApp, Email, Voice, and USSD, we may collect and store:
- Sender and recipient numbers
- Message length
- Routing data
- Delivery reports
- Channel used
- Timestamps
We do not retain message bodies longer than operationally necessary, unless required for:
- Debugging
- Fraud investigations
- Regulatory obligations
Standard retention applies (see Section 7).
1.4. Cookies & Tracking
We use cookies to:
- Keep you signed in
- Enhance dashboard performance
- Analyse usage patterns
- Improve user experience
You can disable cookies in your browser settings, but some features may not function properly.
2. How We Use Your Information
We use collected information to:
- Provide communication services (SMS, WhatsApp, Email, Voice, USSD, AI)
- Authenticate and manage user accounts
- Process payments and issue invoices
- Deliver messages and obtain delivery reports
- Enable automation, analytics, and API integrations
- Prevent fraud, spam, and misuse
- Improve platform performance and reliability
- Comply with regulatory requirements
- Communicate updates, alerts, or service notifications
We do not sell personal information to third parties.
3. Legal Basis for Processing (Tanzania)
We process personal data based on:
- Your consent
- Contractual necessity (providing the service)
- Legal or regulatory compliance (e.g., TRA/TCRA)
- Legitimate business interests (fraud prevention, analytics)
4. Sharing of Information
We may share information with:
- Telecommunication operators & aggregators (to deliver SMS, WhatsApp, Voice, USSD)
- Payment partners (for transaction processing)
- Cloud hosting providers (for secure service delivery)
- Regulators or law enforcement when legally required
- Enterprise clients, when a user belongs to their organisation
All partners are required to handle information securely.
We never sell or rent user data.
5. User Responsibilities
You agree to:
- Only upload or send data you have lawful rights to use
- Obtain consent from message recipients
- Avoid transmitting sensitive data through channels that are not encrypted end-to-end
- Maintain confidentiality of your API keys and account credentials
- Notify us immediately if you suspect unauthorised access
6. Data Security
We implement technical and organisational measures to protect your information, including:
- TLS encryption
- API authentication
- Firewall protection
- Intrusion detection
- Regular security audits
- Role-based access control
- Encrypted storage of sensitive fields
While we take reasonable precautions, no system is fully immune to security risks.
7. Data Retention
We retain data in accordance with operational and regulatory requirements:
- Message metadata: 90 days
- Message bodies: Temporary storage only (deleted after processing unless required for debugging or compliance)
- Billing records: Minimum required by Tanzanian tax law
- Account information: Until account closure or as required by law
Users may request deletion of their data unless retention is legally required.
8. International Data Transfers
Our platform may use cloud infrastructure hosted inside or outside Tanzania. Where data leaves Tanzania, we ensure appropriate safeguards and confidentiality protections.
9. Your Rights
Depending on applicable laws, you may request:
- Access to personal data
- Correction of inaccurate information
- Deletion of your data (where applicable)
- Data portability
- Restriction of processing
- Withdrawal of consent
To submit a request, contact us using the details in Section 12.
10. Children's Privacy
Notify Africa does not target or knowingly collect data from individuals under the age of 18. If such data is discovered, it will be deleted promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy to reflect:
- Changes in services
- Legal updates
- Regulatory requirements
- Security improvements
Continued use of the Platform after updates implies acceptance of the revised Policy.