Privacy policy | mfileads

This policy explains how mfileads, part of the Zung.ai ecosystem (“mfileads”, “we”), uses personal data.

Two different roles

Website visitors and account users. For people who visit mfileads.com, request a demo, subscribe to our newsletter or create an account, we are the data controller.

Leads stored by our customers. When an institution stores prospects in its mfileads workspace, that institution is the data controller and we are its data processor. We process that data only on the institution’s instructions, under our data processing agreement. If you are a borrower or prospect, please contact the institution that holds your details; you can also use the opt-out link in any message to stop marketing messages immediately.

What we collect

Demo, contact and newsletter forms: name, e-mail, phone (optional), institution, country and your message.
Accounts: name, e-mail, phone (optional), a hashed password, your role, your two-factor settings if you turn them on, and sign-in times, IP addresses and browser type for security.
Payments: the plan, amount, date and Paystack reference. Card and mobile-money details are entered on Paystack’s checkout and never reach mfileads.
Technical data: IP addresses for rate-limiting and security logs. We do not use advertising or analytics trackers.

Why we use it

To answer your request and provide the service (contract and legitimate interest).
To keep the service secure and prevent abuse (legitimate interest).
To send product news and growth tips, only if you opted in and confirmed by clicking the link we e-mail you (consent). Every e-mail has an unsubscribe link.

Sharing

We do not sell personal data. We use a small number of service providers to run mfileads — hosting and bot protection on our forms (Cloudflare), e-mail delivery, payment processing for subscriptions through Paystack and, if an institution enables it, SMS delivery through Africa’s Talking or Twilio — each bound by confidentiality and data-protection terms.

Retention

Inquiries are kept for up to 24 months. Account data is kept while the account is active and deleted within 30 days after the workspace is closed. Security logs are kept for up to 12 months.

Your rights

You can ask to access, correct or delete your personal data, object to processing, or withdraw consent at any time, by e-mailing growth@mfileads.com. You may also complain to your data-protection authority, such as Kenya’s Office of the Data Protection Commissioner.

Changes

We will update the date at the top of this page when this policy changes, and notify account owners of material changes by e-mail.