Privacy Policy

Who we are

AfriLoop.ai, Harare, Zimbabwe, operates afriloop.ai and the AfriLoop WhatsApp Ops MCP plugin at mcp.afriloop.ai. We follow Zimbabwe's Cyber and Data Protection Act and, where relevant, South Africa's POPIA.

The website

The public site has no sign-up forms and no advertising trackers. It stores two preferences in your browser (theme and language). Our host, Netlify, keeps standard server logs (IP address, time, page) for security and reliability. If we add Google Analytics, we will update this page first.

The admin area

/admin is private to AfriLoop staff. Sign-in uses Supabase Auth with two-factor authentication. We keep the account email and security logs.

The WhatsApp Ops plugin (beta)

The plugin is in beta and runs on synthetic sample data only (a made-up "demo-mining" tenant). It does not connect to WhatsApp, does not read real chats and never sends messages; it only drafts text for a person to review. Reports you log through its tools are held in temporary server memory and are lost when the server restarts. Do not enter real personal data during the beta. Access needs an API key issued by us.

AI processing

Some AfriLoop features use xAI models. We send only what a feature needs, use a hashed user identifier for abuse prevention, and do not sell data. The beta plugin makes no AI calls.

Sharing, retention and your rights

We do not sell personal data. We share it only with the processors above (Netlify, Supabase, xAI) to run the service. Logs are kept for as long as our providers need for security. You can ask to see, correct or delete your data by emailing us.