Privacy Policy

This Privacy Policy applies to visitors, registered users, tenant administrators, employees whose data is stored in customer workspaces, and participants in the Mankuca Partner (Agent) Program.

By using Mankuca, you acknowledge that we will process information as described here and in our Terms of Service. Where you act on behalf of an organization, you confirm you have authority to accept this policy for that organization.

Depending on your jurisdiction and the type of data, we process information based on:

• Contract: to provide the platform, modules, and partner services you request
• Consent: for optional marketing, cookies, or features where consent is required
• Legal obligation: tax, accounting, anti-fraud, and regulatory requirements
• Legitimate interests: security, product improvement, and partner program administration, balanced against your rights

This policy is designed to align with the Zambia Data Protection Act and, where applicable, the GDPR and similar frameworks.

We use collected data to:

• Provision and maintain workspaces, modules, and user accounts
• Process in-platform subscriptions, renewals, and billing events
• Authenticate users, enforce permissions, and prevent fraud or abuse
• Operate the Partner Program: attribute referrals, calculate commissions and markups, and process settlements
• Send service notices, security alerts, and support responses
• Analyze aggregated usage to improve performance, reliability, and features
• Comply with law and respond to lawful requests from authorities

Mankuca is a multi-tenant platform. Each workspace (tenant) is logically isolated. We design our architecture so that one customer's data is not accessible to another customer without explicit permission.

• Tenant administrators control which users can access their workspace and with what permissions.
• System administrators access tenant data only when necessary for support, security, billing, or legal compliance, under controlled procedures.
• You are responsible for the accuracy and lawfulness of data you upload about your employees, customers, and business operations.

We may share information with:

• Infrastructure and hosting providers that store and run the platform
• Payment processors to complete in-app subscription transactions
• Email and notification services for account and billing communications
• Analytics and monitoring tools (often in aggregated or pseudonymized form)
• Professional advisers and authorities when required by law or to protect rights and safety

We do not sell your personal information to third parties.

Service providers are bound by contractual obligations to protect data and use it only for the services they perform for us.

We retain information for as long as needed to provide services and meet legal obligations. Typical periods include:

When data is no longer required, we delete or anonymize it in accordance with our retention procedures.

Subject to applicable law, you may have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion where legally permitted
• Restriction — request limited processing in certain circumstances
• Portability — receive data in a structured, machine-readable format where applicable
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is consent-based

To exercise these rights, contact privacy@mankuca.com. We may need to verify your identity before responding. Some requests may be limited where we must retain data for legal or contractual reasons.

We implement technical and organizational measures to protect data, including:

• Encryption in transit (TLS) and encryption at rest for stored data
• Role-based access controls and authentication
• Tenant isolation and audit logging
• Monitoring, backups, and incident response procedures
• Staff training on data protection and confidentiality

No system is completely secure. Please use strong passwords, enable available security features, and report suspected unauthorized access promptly.

For privacy-related questions, data subject requests, or security concerns: