1. Who this policy covers
Boon Technologies ("we", "us", "our") operates Bankify. This policy covers the personal information we handle as a business in our own right, namely:
- Visitors to bankify.cloud, including people who submit the demo or contact forms
- Staff at licensed institutions who hold Bankify user accounts
- People who correspond with us about the product
2. Borrower and applicant data — who is responsible
Bankify is a multi-tenant platform licensed to lending institutions. When a bank or microfinance institution uses it to onboard a customer, service a loan or run collections, that institution decides what personal information is collected and what it is used for. In data-protection terms the institution is the controller, and Boon Technologies acts as a processor on its documented instructions.
In practice that means:
- Your lender, not Boon Technologies, decides what identity and income documents are required
- Your lender is responsible for the lawful basis on which your information is collected, and for the disclosures made to you
- We do not use borrower personal information for our own marketing, and we do not sell it
- Requests to access, correct or delete borrower information should go to the lending institution; if you send one to us we will pass it on rather than act on it ourselves
- Each institution publishes its own data-collection terms, which are served on this site under that institution's name at bankify.cloud/terms/ followed by its identifier
Institutions remain responsible for their own regulatory obligations, including any local data-protection registration or notification requirements.
3. Information we collect
From website visitors and prospective customers, where you choose to give it to us:
- Name, business email address and telephone number
- The institution you work for, your role, and its approximate size
- The modules you asked about and anything else you write in a form or email
From users of the platform, provided by their institution:
- Name, work email address and role within the institution
- Authentication data, including hashed credentials and multi-factor authentication settings
- Records of actions taken in the platform, which form the audit trail institutions rely on
Collected automatically when you use our systems:
- IP address, approximate location derived from it, browser and device type
- Pages requested, timestamps and referring addresses
- Application and security logs generated in the ordinary course of running the Service
4. How we use information
We use the information described above to:
- Provide, operate, secure and improve Bankify
- Respond to demo requests, contact messages and support enquiries
- Administer subscriptions, invoicing and payment
- Send service and security notices to account holders, which are not marketing and cannot be opted out of while an account is active
- Send product and marketing email to business contacts who have asked for it or with whom we have a relevant business relationship, with an unsubscribe link in every message
- Detect, investigate and prevent fraud, abuse and security incidents
- Meet our own legal and regulatory obligations
We do not sell personal information, and we do not use borrower data held on behalf of an institution for any purpose other than providing the Service to that institution.
6. Where information is processed
Bankify runs on a globally distributed edge network. Requests are served from the location closest to the person making them, which means your information may be processed in a country other than the one you are in, including countries whose data-protection laws differ from your own.
Where we transfer personal information across borders we take steps to ensure it remains protected to the standard described in this policy, and we impose confidentiality and security obligations on the providers who handle it.
7. Security
We use technical and organisational measures appropriate to the sensitivity of the information we hold. These include encryption of data in transit, encryption at rest for credentials held on behalf of institutions, role-based access control, multi-factor authentication for platform accounts, and audit logging of actions taken in the platform.
No system is completely secure, and we cannot guarantee absolute security. If a breach affects personal information we hold, we will notify affected institutions without undue delay so that they can meet their own notification obligations.
8. How long we keep information
Data an institution holds in Bankify is retained for as long as that institution's subscription is active, and is governed by the retention rules the institution sets and the record-keeping obligations that apply to it. After termination we make data available for export for a reasonable period and then delete it in accordance with our retention practices.
Enquiries submitted through this website are kept for as long as needed to deal with them and to maintain a record of our business relationship. Records we are required to keep for legal, tax or audit purposes are retained for the period the law requires.
9. Your rights
Depending on where you are, you may have the right to:
- Ask what personal information we hold about you and obtain a copy
- Have inaccurate information corrected
- Ask us to delete information we no longer have a reason to keep
- Object to or ask us to restrict certain processing
- Receive information you gave us in a portable form
- Withdraw consent where processing relies on it
- Complain to your local data-protection authority
To exercise a right in relation to information we hold as a business — for example a demo enquiry you submitted — contact us at hello@bankify.cloud.
11. Marketing communications
Marketing email from us always carries an unsubscribe link, and unsubscribing takes effect across our mailing lists rather than only the message you clicked from. You can also ask us to stop by emailing hello@bankify.cloud.
Unsubscribing from marketing does not stop service and security notices relating to an active account, which are necessary to operate the Service.
12. Children
Bankify is a business product and is not directed at children. We do not knowingly collect personal information from children in our own right. Where a lending institution processes information about a minor, that institution is the controller and is responsible for the lawful basis on which it does so.
13. Third-party sites
This site links to sites we do not operate, including those of Boon Technologies and our providers. We are not responsible for their content or privacy practices, and we recommend reading the policy of any site you visit.
14. Changes to this policy
We may update this policy from time to time. The current version is always the one on this page, and the "last updated" date reflects when it changed. Where a change materially affects how we handle personal information, we will take reasonable steps to notify affected institutions.
15. Contact us
For any question about this policy or about how we handle personal information, contact hello@bankify.cloud, or write to Boon Technologies, 9 Manitoba Road, Braeside, Harare, Zimbabwe.