Privacy Policy

Last updated: July 2026

Generic document. This text has not been reviewed by a lawyer and is not legal advice. Have it reviewed by a legal professional before any real commercial use (notably GDPR compliance if users reside in France/Canada, or applicable data protection law in Ghana/Nigeria).

1. Data collected

Identity: name, email, password (hashed, never stored in plain text)
Country and currency (detected at signup, editable)
Project data: name, budget, schedule, work packages, progress reports, declared amounts
Evidence photos: geolocation (latitude/longitude) and timestamp captured at the moment of upload
Technical log: IP address and user-agent at sign-in time
Sign-in history: date, IP address, browser and the email address entered, for every sign-in attempt on your account — successful and failed alike. Failed attempts are kept just like successful ones: that is what makes it possible to detect an attempted fraudulent access to your account. This history is available to you from your account, and automatically purged beyond 90 days.

2. Geolocation

GPS position is only requested when a site supervisor submits a report or photo from the field capture page — never in the background, never without an explicit action from the user. The browser shows its own permission prompt; declining it does not block report submission, but photos cannot then be verified as taken on site.

3. Use of data

Data is used exclusively to operate the service: project tracking, progress calculation, PDF report generation, transactional emails (verification code, invitation, weekly summary). No data is sold to third parties.

4. Technical subprocessors

Vercel — application hosting
Neon — PostgreSQL database
Vercel Blob — photo storage
Resend — transactional email delivery

5. Your rights

You may request access, correction or deletion of your data. A complete export of your project data (reports, disbursements, photos) is available directly from the application.

6. Retention

Data is kept as long as the account is active. Upon account deletion, associated data is erased, unless a legal retention obligation applies. Sign-in history is an exception to the “as long as the account is active” rule: it is automatically purged beyond 90 days, and erased in full upon account deletion — including when project data is kept in anonymized form.