Privacy Policy

1. Who we are and what this policy covers

LoanTabs is operated by Powersoft Company Ltd (“Powersoft”, “we”, “us”, “our”), a company registered in Uganda, with its address at Ntinda, Kampala, Uganda.

This Privacy Policy explains how we handle personal information when you visit our websites at loantabs.com and loantabs.co.uk, including their subdomains (for example www, ai, platform and app), contact us, book a demo, or create and use a LoanTabs account. We refer to these together as the “Services”.

For personal information about visitors, prospective customers and our customers’ own staff and billing contacts, Powersoft Company Ltd is the controller (the organisation that decides why and how the information is used). For borrower, member, guarantor, savings and loan records that a lending institution enters into LoanTabs, the institution is the controller and we act as its processor — see section 12 and our Data Processing Terms.

2. Information we collect

We collect only what we need to run the Services. Depending on how you use them, this includes:

We do not knowingly collect special categories of personal data (such as health, religion or biometric data) through our own websites, and we ask you not to send them to us. Institutions decide what they store in their workspaces and are responsible for having a lawful basis to do so.

3. How we use information and our legal bases

Where the EU GDPR, the UK GDPR or a similar law applies, we rely on the following legal bases:

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it to make decisions that have legal or similarly significant effects on you through solely automated means.

4. Cookies and similar technologies

We use a small amount of essential browser storage and, only with your permission, Google Analytics and third-party services that may set cookies. We switch off Google’s advertising features for our analytics tag, and we do not use advertising or cross-site tracking cookies. Details, including a complete list, are in our Cookie Policy. You can change your choices at any time using Cookie settings or the link in the footer of every page. We also honour the Global Privacy Control browser signal as a request to reject non-essential services.

5. Who we share information with

We share personal information only as needed to provide the Services and only with:

• Service providers (sub-processors) that host our websites and platform, deliver email, provide scheduling, spam protection, website analytics (Google Analytics, only if you allow it), payment and mobile-money processing, customer support and AI model processing. They may use the information only on our instructions and under written data-protection terms.
• Your institution, if you are a staff member, borrower or member of an institution that uses LoanTabs; its administrators can see the records and activity logs in its workspace.
• Professional advisers, auditors and insurers bound by confidentiality.
• Authorities and other parties where we are legally required to, to enforce our terms, or to protect rights, safety and security.
• A successor if we are involved in a merger, acquisition, financing or sale of assets. We will tell you and the protections in this policy will continue to apply.

The current list of sub-processors used for the platform is available on request from support@loantabs.com.

6. International transfers

We are based in Uganda, and our providers operate in several countries, including the United States and countries in Europe. Your information may therefore be processed outside the country where you live.

Where the law of your country restricts such transfers (for example the EU GDPR, UK GDPR, Swiss FADP, Uganda’s Data Protection and Privacy Act, 2019, Kenya’s Data Protection Act, 2019, Nigeria’s Data Protection Act, 2023 or South Africa’s POPIA), we rely on an appropriate safeguard, such as an adequacy decision, the European Commission’s Standard Contractual Clauses (with the UK Addendum or UK International Data Transfer Agreement for UK data), or another mechanism the law permits. You can request a copy of the relevant safeguards by emailing us.

7. How long we keep information

We keep personal information only as long as needed for the purposes above:

• Contact-form and email enquiries: up to 24 months after our last interaction, unless you become a customer.
• Account and workspace data: for as long as the subscription is active and afterwards for the period set out in our Terms and Data Processing Terms, after which it is deleted or anonymised.
• Billing and accounting records: for the period required by tax and company law, generally up to seven years.
• Server and security logs: typically up to 12 months.
• Cookie-consent record: up to 12 months, after which we ask again.
• Google Analytics cookies in your browser: up to 2 years, or until you turn Analytics off or delete them.

Backups are overwritten on a rolling cycle. Where information must be kept longer to meet a legal obligation or resolve a dispute, we restrict its use to that purpose.

8. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, logical isolation between customer workspaces, role-based access controls, audit logging and access limited to staff who need it. See our Security & Compliance page. No system is perfectly secure; if a breach affecting your personal information occurs we will notify you and the relevant authorities as the law requires.

9. Your rights and choices

Depending on where you live, you may have the right to:

• know what personal information we hold about you and receive a copy (access);
• correct inaccurate or incomplete information;
• have your information deleted;
• restrict or object to certain processing, including processing based on legitimate interests and direct marketing;
• receive your information in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• opt out of the sale or sharing of personal information and of targeted advertising (we do neither);
• not be discriminated against for exercising your rights; and
• lodge a complaint with a data-protection authority.

To exercise a right, email support@loantabs.com or follow the steps on our Your Privacy Rights page. We may need to verify your identity first, and we respond within the time set by applicable law (generally within 30 days, or 45 days in some US states). If your information sits in a lending institution’s workspace, we will pass your request to that institution, which controls the data.

10. Additional information for certain regions

European Economic Area, United Kingdom and Switzerland

You have the rights in section 9 under the GDPR, the UK GDPR and the Swiss FADP. You may complain to your local supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk) — though we would appreciate the chance to resolve your concern first.

United States

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana or another US state with a comprehensive privacy law, you may have the rights to know, access, correct, delete and port your personal information, and to opt out of sale, sharing, targeted advertising and profiling. In the past 12 months we have not sold or shared personal information, and we do not knowingly sell or share the personal information of anyone under 16. The categories we collect are identifiers, commercial information, internet activity, and inferences limited to what is needed to operate the Services, obtained and disclosed as described in sections 2 and 5. We do not use or disclose sensitive personal information for purposes beyond those permitted by law. You may use an authorised agent to make a request, and you may appeal a refusal by replying to our decision email. We honour Global Privacy Control signals.

Uganda, Kenya, Nigeria, South Africa and other African jurisdictions

We handle personal data in line with Uganda’s Data Protection and Privacy Act, 2019, and, where they apply, Kenya’s Data Protection Act, 2019, Nigeria’s Data Protection Act, 2023 and South Africa’s Protection of Personal Information Act (POPIA). You may contact the relevant authority, such as Uganda’s Personal Data Protection Office, if you are not satisfied with our response.

Brazil, Canada, Australia and elsewhere

Residents of Brazil (LGPD), Canada (PIPEDA and provincial laws), Australia (Privacy Act 1988) and other countries have the rights their local law provides. The rights in section 9 and the contact details below apply to you, and you may also complain to your local regulator.

11. Children

The Services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children through our websites. If you believe a child has given us personal information, email us and we will delete it.

12. Customer data and the AI Portfolio Assistant

When a lending institution uses LoanTabs, it decides which borrower, member and loan information to record. We process that information only on the institution’s documented instructions to provide the platform, and we do not use it for our own marketing or sell it. If you are a borrower or member and want to access, correct or delete your records, please contact your lender directly; we will help them respond.

The AI Portfolio Assistant processes the questions you enter and the workspace data needed to answer them using AI model providers that act as our sub-processors. We do not use customer data to train general-purpose AI models and we do not allow our providers to do so. Assistant answers are generated automatically and should be checked before you rely on them for lending decisions.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new “Last updated” date and, for material changes, notify account holders by email or in the product. Where the law requires your consent to a change, we will ask for it.

14. Contact us

For any privacy question, request or complaint, contact our privacy team:

Powersoft Company Ltd
Ntinda, Kampala, Uganda
Email: support@loantabs.com

This policy applies to loantabs.com and loantabs.co.uk and their subdomains.