Privacy notice
Last updated 15 November 2026
Token Africa Inc ("we") runs Token Africa Investor Academy and is the controller of the personal data described here: we decide why and how it is used.
What we collect and why
- Account details (name, email, sign-in details): to create and secure your account. Basis: contract.
- Learning activity (lessons completed, quiz answers and scores, certificates, Practice Lab entries): to provide the course and track progress. Basis: contract.
- Lesson helper questions: to answer them in context. Basis: contract.
- Contact messages: to reply and give support. Basis: legitimate interests.
- Technical data (IP address, device and browser info, basic usage logs): for security, fraud and spam prevention and to keep the service working. Basis: legitimate interests.
- Purchase records (order reference, amount, date): to unlock full access and keep accounts. Basis: contract and legal obligation.
Who we share it with
- Service providers who host and run the Academy, including the AI provider behind the lesson helper.
- Paddle, our Merchant of Record, for selling full access, payments, tax compliance and invoicing. Paddle handles your card details; we never see them.
- Professional advisers (legal, accounting) when needed.
- Authorities, where the law requires it.
We do not sell your personal data. Some providers may process data outside your country; we use providers with appropriate safeguards.
How long we keep it
We keep account and learning data while your account is open, and purchase records as long as tax and accounting law requires. After that we delete or anonymise it.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent. You can also complain to your local data protection authority. Email invest@tokenafrica.io and we'll respond within one month.
Security
We use encryption in transit, access controls and least-privilege permissions to protect your data.
Cookies and browser storage
We use only essential browser storage to keep you signed in. We do not use advertising cookies or ad pixels.
Visitor analytics
We use Lovable's visitor analytics to understand how the Academy is used. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify you. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.
It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, which buttons and links are clicked, and a few in-app events (such as use of the dashboard summary). This is recorded for every visitor. Detailed data is kept for 90 days and daily summaries for a year.
Other services the site uses
- Google sign-in (if you choose it): Google receives your sign-in request and shares your name and email with us.
- Google Fonts: your browser loads our typeface from Google, which receives your IP address and browser details.
- Paddle checkout: when you buy full access, Paddle's checkout loads and handles your payment details directly.