Privacy Policy

Last updated: October 29, 2026.

1. Who we are

Bonga One is a donation-gateway platform that collects charitable card donations on behalf of NGOs in South Sudan through Stripe (our payment processor) and settles them, on the NGO's request, to the NGO's verified KCB bank account. This policy explains how we handle personal data as a data controller for the platform itself. For what an NGO does with donor data beyond the donation itself, that NGO is responsible.

[LEGAL REVIEW] — controller/processor roles under applicable South Sudanese data-protection law to be confirmed by counsel.

2. Data we collect

• Donor-provided data (all optional): your name, email address and an optional message accompanying a donation. You may give anonymously — the donation then records no name at all.
• Donation data: amount, currency, fee choice, status, unique reference and timestamps. These are needed to prove where the money went.
• Technical data: a hashed IP address (see section 3) and basic widget events (page views, donation starts) used for fraud prevention.
• NGO user data: name, work email, role and authentication data for organisation accounts, plus KYC documents and bank details submitted during onboarding.

We do not collect card credentials on our infrastructure. Donations are paid through the Stripe Embedded Payment Element shown inside our donation widget: card details are typed into fields that Stripe hosts, and the card data never reaches Bonga One's servers or the NGO's website.

[LEGAL REVIEW] — Stripe card-data processor wording (PCI/DSS SAQ-A scope, Stripe's role as payment services provider) to be confirmed by counsel.

3. IP addresses — hashed, never stored raw

When you interact with a donation widget we store only sha256(IP + application secret key). The raw IP address is never written to disk or logs. The hash cannot be reversed to recover your IP, but still lets us recognise repeated abusive patterns from the same source for fraud prevention.

4. Why we process data

• To process payments and route donations to the chosen NGO.
• To issue receipts and let you retrieve a receipt by its reference.
• To prevent fraud and abuse (rate limiting, replay protection, hashed-IP signals).
• To operate NGO accounts: verification, payouts and statements.
• To meet legal and accounting obligations.

5. KYC documents

Organisation verification documents (registration certificates, IDs and similar) are stored on a private storage disk that is not web-accessible. They are never served by a public URL; access happens only through authenticated, authorisation-checked application routes for platform administrators.

6. Bank details

NGO bank account numbers are encrypted at rest in our database and are never exposed in dashboards, exports, API responses or logs. Payout files sent to the bank are generated on demand and delivered only via short-lived signed URLs.

7. Retention

Donation and accounting records are kept as long as required by financial-record rules. Widget fraud-signal data (hashed IPs, events) is kept only as long as useful for abuse prevention. NGO verification documents are kept while the account is active and for the statutory period after closure. You can request specifics at admin@bongaone.test.

[LEGAL REVIEW] — retention periods to be aligned with South Sudanese statutory requirements.

8. Third parties

• Stripe — the payment processor. Card data is entered in Stripe-hosted payment fields inside our widget and handled under Stripe's own privacy terms.
• KCB — our bank. Settled funds are disbursed to NGOs' verified KCB bank accounts via KCB bank transfers; only the NGO's bank details (encrypted at rest) are needed for this.
• Email delivery provider — used to send transactional emails (invitations, activation, receipts-related notifications).
• Foreign-exchange rate API — used to fetch daily USD/SSP/KES display rates. This request contains no donor personal data whatsoever.

We do not sell donor data, and we do not share donor PII with the FX provider or for advertising.

9. Cookies and sessions

The platform uses essential cookies only: a session cookie for logged-in NGO/admin users, a CSRF-protection cookie, and short-lived cookies tied to donation sessions (which expire within minutes). We use no advertising or third-party analytics cookies on the donation surface.

10. Security

Transport is encrypted (HTTPS), sessions are signed, access to money-moving endpoints is rate-limited and authorisation-checked, sensitive columns are encrypted, and admin accounts require two-factor authentication. Security headers including a strict Content-Security-Policy are applied to every page.

11. Your rights

Subject to applicable law, you may ask us to access, correct, delete or restrict processing of your personal data, or object to processing. Because donations are financial records, some data cannot be deleted while retention duties apply. Contact admin@bongaone.test and we will respond within a reasonable period.

[LEGAL REVIEW] — rights catalogue to be conformed to the applicable South Sudanese legal framework.

12. Changes to this policy

We will post any update on this page with a new "last updated" date.

13. Contact

Privacy questions: admin@bongaone.test.