Legal

Privacy Policy

Last updated: July 22, 2026 AfroTools.com privacy@afrotools.com
🔒
Local tools stay on device by default
🚫
We do not sell personal data
🍪
Analytics requires consent
📩
Workflow-specific unsubscribe controls
📜
Section 01

Introduction

AfroTools ("we", "us", "our") operates the website afrotools.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website and use our tools. We are committed to protecting your privacy and handling your data transparently.

By accessing or using AfroTools, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this policy, please discontinue use of the platform immediately.

This policy applies to visitors, users, and subscribers of AfroTools. Feature-specific disclosures, consent controls, and request channels are intended to support applicable privacy obligations; this policy is not a legal compliance certification.

📋
Section 02

Data We Collect

AfroTools uses feature-specific data flows. The following list describes the main personal and non-personal data classes evidenced by current public workflows:

  • Email address — collected only when you voluntarily subscribe to updates, create an account, or use a labelled email-delivery workflow. Core public calculators remain available to guests without a paid subscription.
  • Account information — if you create an account, Supabase Auth manages the credential flow; AfroTools account services can store your email, profile, subscription status, preferences, and supported saved items.
  • Usage analytics — on measured public pages, GA4 may receive limited cookieless consent-state and page-measurement pings while analytics storage is denied. Persistent analytics identifiers and product events require analytics consent. Raw sensitive workflow content and URL query strings are excluded; provider request metadata can still exist.
  • Calculator inputs — local-only tools process salary, tax, health, and financial inputs in your browser. AI-assisted tools send a calculation summary and your question only after you continue from the AI notice. Saved scenarios are stored only when you use account sync.
  • Payment information — if you start a paid checkout, payment details are entered and processed on the configured provider flow. AfroTools receives the transaction and subscription metadata required to confirm entitlement, not the full card number or CVV entered with the provider.
  • Contact form submissions — when you use our contact form, your name, email, and message are stored by our form provider for the purpose of responding to your enquiry.
📩
Section 03

How We Use Your Email

If you submit your email address, we use it only for the specific purpose you agreed to:

  • Sending a newsletter or update you explicitly subscribed to
  • Responding to a contact, support, or lead form you submitted
  • Delivering output only when a tool exposes a labelled email-delivery action
  • Account-related communications such as credential recovery or confirmed billing status

Email or contact details are used for the disclosed request and processed by the configured service; unsubscribe and deletion controls depend on that workflow.

ℹ️

You can use the unsubscribe link in a marketing email. The configured email service applies the request; delivery timing and any required confirmation depend on that service.

🍪
Section 04

Cookies & Local Storage

AfroTools does not enable advertising features in its intended analytics configuration. Advertising permissions stay denied. GA4 uses denied-by-default Consent Mode on measured public pages; analytics cookies remain blocked until consent, although limited cookieless pings can still be sent.

  • Analytics cookies — after consent, Google Analytics 4 can use _ga and _ga_* identifiers for bounded usage measurement, and Microsoft Clarity may set analytics identifiers for session diagnostics. Before consent or after rejection, GA4 analytics storage stays denied and Clarity stays unloaded. AfroTools does not describe cookieless provider request metadata as anonymous. You can reject or withdraw analytics consent.
  • Supabase authentication cookies — if you sign in to an AfroTools Pro account, Supabase stores a session token to keep you logged in. These are strictly functional and are cleared when you log out.
  • localStorage preferences — we use browser localStorage to remember settings such as preferred country, dark/light mode, cookie consent choice, and recently used tools. Browser-local preferences stay on your device unless you choose a tool or feature that uses account sync, analytics, forms, or AI assist.

You can clear browser-local AfroTools data by clearing cookies and site data for afrotools.com. Account, provider, email, payment, or vault records require their corresponding deletion or account control.

For the full list of cookies, analytics identifiers, and how to change your choices, see our dedicated Cookie Policy.

🔒
Section 05

Calculator & PDF Data

This local workflow processes its working data in your browser; AI, account sync, email, TTS, analytics, payments, and explicit cloud uploads are separate disclosed actions.

FeatureWhere processedThird partyRetentionUser control
Local calculatorsBrowser JavaScriptNone unless you choose AI or account syncBrowser session or localStorage onlyClear the page or browser storage
AI assistAfroTools function, then configured model providerAnthropic API where enabledNo account calculation record unless you separately save one; operational logs follow the deployed service and provider configurationContinue or cancel at the AI notice before the request is sent
Cloud sync and dashboardAfroTools account servicesSupabaseWhile your account or saved scenario existsDelete saved data or request account deletion
Contact, newsletter, and email reportsAfroTools forms and email workflowsNetlify or email providerOnly as long as needed for the stated purposeUnsubscribe or request deletion
PDF WorkspaceBrowser by defaultNone for local processingTab memory and local downloadsClose the tab and delete downloaded files
Analytics and fontsBrowser request metadata and consented usage/session diagnosticsConfigured Google Analytics, Microsoft Clarity, and font delivery servicesRetention follows the configured analytics property and provider settingsCookie controls and browser privacy settings

PDF tools (merge, split, compress, convert): Files you upload to our PDF Workspace are processed within your browser for the local workflow. If a future tool offers cloud sharing, email delivery, or account sync, that workflow must be labeled before upload.

🛡️

Local-only means no server upload. AI-assisted, cloud sync, contact, email, analytics, payment, and font services are labeled separately so you can decide before data moves.

AI
AI Notice

AfroTools AI Privacy And Source Limits

AfroTools AI is a router and planning assistant. It helps you find the right AfroTools calculator, planner, document tool, or export workflow, but it is not a tax, legal, immigration, engineering, customs, medical, financial, admissions, employment, or government authority.

  • Deterministic routing first — core routing, tool search, manual launch, and supported prefill handoffs can work without model consent.
  • Deterministic routing works locally; optional AI may send the disclosed prompt or selected context to AfroTools servers and the configured provider after consent.
  • Sensitive details need care — career, financial, education, document, property, trade, legal, health, immigration, payroll, invoice, and business details should not be sent to optional AI help unless you understand what will be sent.
  • Saved AI projects are sanitized by default — saved AI summaries should not store raw CVs, resumes, invoices, PDFs, transcripts, salaries, payroll rows, private identifiers, client names, or raw prompts unless a future feature explicitly adds consent and retention controls.
  • Sources can go stale — rates, fees, deadlines, fuel prices, scholarships, visa rules, tax rules, customs rules, and construction assumptions need source and freshness checks before you rely on them.
  • Verify before high-stakes action — use official sources or qualified professionals before filing, applying, importing, building, hiring, paying, submitting documents, or making compliance decisions.
ℹ️

AfroTools AI should route, clarify, prefill, explain, and export around existing workflows. It should not invent official sources, make guarantees, or turn planning estimates into professional advice.

🔗
Section 06

Third-Party Services

AfroTools uses the following service classes in current public workflows. Each feature should send only the fields disclosed for that action:

  • Supabase — provides configured authentication, account database, workspace, and private-vault services. Supabase processes account identifiers and the records a signed-in user explicitly saves. Supabase Privacy Policy
  • Google Analytics 4 — can receive limited cookieless page-measurement pings while analytics storage is denied, then process consented identifiers and product events after opt-in. Advertising permissions remain denied; raw sensitive workflow content and URL query strings are excluded by the site implementation. Google Privacy Policy
  • Microsoft Clarity — consented product-session diagnostics such as page interactions, scroll behaviour, and heatmap-style UX signals. AfroTools does not intentionally send form values or sensitive calculator inputs to Clarity. Microsoft Privacy Statement
  • Paystack — can provide the configured checkout and payment-status flow. Card details are entered with the provider; AfroTools receives transaction and subscription metadata needed to confirm status. Paystack Privacy Policy
  • Stripe — can provide the configured checkout and payment-status flow. Card details are entered with the provider; AfroTools receives transaction and subscription metadata needed to confirm status. Stripe Privacy Policy
  • Netlify — hosts AfroTools and processes form submissions. May log basic request metadata. Netlify Privacy Policy
  • Anthropic Claude API — AI assist may send your prompt and selected workflow context only after you continue from the AI notice. Do not include personal identifiers or sensitive documents unless the workflow explicitly asks and you choose to continue. Anthropic Privacy Policy
  • Google Fonts — typography loaded from Google's CDN. Google may log the request IP address. Google Privacy Policy

AfroTools does not sell personal data. Configured processors can receive the bounded data and request metadata described for their workflow above.

🗃️
Section 07

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Newsletter subscriptions — email addresses are retained until you unsubscribe
  • Accounts and saved workspace items — retained while the account or saved item exists, subject to the account deletion and service-retention process
  • Contact form submissions — retained for the disclosed response purpose and the configured form or email service process
  • Analytics data — retained according to the configured analytics property and provider settings
  • Local calculator inputs — not stored on our servers unless you explicitly save a scenario to your account

You may request deletion of eligible account or contact data by emailing privacy@afrotools.com. We will acknowledge the request and explain any service-controlled or legally required retention.

⚖️
Section 08

Your Rights

Under applicable data protection legislation, including POPIA and NDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of any personal data we hold about you
  • Right to correction — ask us to correct inaccurate or incomplete personal data
  • Right to deletion — request that we delete your personal data from our systems
  • Right to data portability — receive your data in a structured, commonly used, machine-readable format
  • Right to object — object to the processing of your personal data for specific purposes
  • Right to withdraw consent — withdraw your consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal
  • Export controls — use the export control offered by the relevant tool or workspace; contact us for eligible account data not exposed by a current export control

To exercise an applicable right, use our self-service Data Request tool or contact us at privacy@afrotools.com. We verify ownership of the email address before actioning any request and aim to respond within 30 days.

🔑

Self-service: request access, export, correction, deletion, marketing opt-out, or restriction of processing at afrotools.com/privacy/data-request. Each request is confirmed by an email link so no one can act on your data but you.

🌎
Section 09

Regional Privacy Rights (POPIA, NDPA & GDPR)

AfroTools extends the core data-subject rights in Section 08 to all users regardless of location, and provides feature-specific disclosures, consent controls, and data-request channels intended to support applicable privacy obligations. This page does not certify legal compliance in any jurisdiction.

South Africa — POPIA: South African users may exercise the rights above and may contact the Information Regulator about applicable rights.

Nigeria — Nigeria Data Protection Act 2023 (NDPA): Nigerian users may exercise the rights above and may contact the Nigeria Data Protection Commission about applicable rights.

EU/EEA & United Kingdom — GDPR / UK GDPR: If you are in the EU, EEA, or UK, we honour the GDPR data-subject rights — access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent — through the same Data Request tool. You also have the right to lodge a complaint with your local supervisory authority. AfroTools is operated from outside the EU/EEA/UK and does not currently maintain an Article 27 EU/UK representative; direct all requests to privacy@afrotools.com.

Legal bases for processing (where GDPR applies):

  • Consent — analytics cookies, optional AI assist, and marketing email are processed only after you opt in, and you can withdraw consent at any time.
  • Contract — account creation, Pro subscriptions, and payment confirmation are processed to deliver a service you requested.
  • Legitimate interests — security, abuse prevention, rate limiting, and core functional storage, balanced against your rights.
  • Legal obligation — retention of limited billing records where required by law.

International data transfers: AfroTools uses global processors (see Section 06) such as Supabase, Netlify, Paystack, Stripe, Resend, Anthropic, Google, and Microsoft. Where your data is transferred across borders, we rely on the processor's own safeguards, which may include Standard Contractual Clauses or equivalent mechanisms. We limit each transfer to the data disclosed for that workflow.

For users in other African jurisdictions and elsewhere, we aim to respect applicable privacy rights and keep data collection limited to the workflow being used.

🔐
Section 10

Data Security

We implement a range of security measures to maintain the safety of your personal information:

  • All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS)
  • Supabase Auth manages account credentials; AfroTools application code is not intended to receive plaintext passwords
  • Full payment credentials are entered and processed on the configured payment-provider flow
  • Access to user data is restricted to authorised personnel only
  • Named local calculator and document operations avoid server upload; AI, sync, email, payment, analytics, TTS, lookup, and vault actions are separate disclosed network flows

No internet transmission or electronic storage method is completely secure. Security controls reduce risk but do not guarantee an outcome.

👤
Section 11

Children's Privacy

AfroTools is a general-purpose financial tools platform and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible. If you believe a child under 13 has provided us with personal data, please contact us at privacy@afrotools.com.

📝
Section 12

Changes to This Policy

We may update this Privacy Policy as AfroTools grows and adds new features. Material changes — such as collecting new types of data, sharing data with new third parties, or modifying your rights — will be noted prominently at the top of this page with an updated date.

Material changes may be shown on this page or communicated through available account or email channels. We encourage you to review this page periodically for the latest information on our privacy practices.

✉️
Section 13

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your information is handled, please contact us:

Privacy enquiries: privacy@afrotools.com

General contact: hello@afrotools.com

Or use our contact form.

We will acknowledge privacy enquiries and explain the applicable request process.