Privacy Policy

Dinovix Ltd operates Fursa and is the data controller responsible for the personal data described in this policy. For any privacy matter you can reach us at privacy@getfursa.com.

We collect the following categories of personal data:

• Account data — your email address, and, if you sign in with Google, the name and profile information Google shares with us. Passwords are handled by Firebase Authentication and are never visible to us.
• Eligibility inputs — the answers you provide about your background, education, work, language and finances so that we can assess routes and produce a score. You choose what to enter.
• Usage and device data — basic technical information such as your approximate region, browser type and interactions, used to operate and improve the service.
• Payment data — where you subscribe to a paid plan, transaction details processed by Korapay. We receive confirmation of payment; we do not receive or store your full card number or mobile-money PIN.

We use personal data to:

• authenticate you and keep your account secure;
• assess eligibility, generate your score, cost estimate and checklist;
• operate, maintain, secure and improve the service;
• process payments and manage subscriptions;
• communicate with you about your account and important changes;
• comply with legal obligations and prevent fraud or abuse.

We process your data where it is necessary to provide the service you have requested (performance of a contract), where you have given consent (which you may withdraw), where we have a legitimate interest in operating and securing Fursa, and where we must to comply with the law. Our handling of personal data is aligned with the applicable data-protection framework of the Republic of Cameroon, including Law No. 2010/012 of 21 December 2010 on cybersecurity and cybercriminality, and with recognised international standards.

We use a small number of strictly necessary cookies to sign you in and remember your language preference. We do not use advertising cookies. Full detail is in our Cookie Policy.

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, namely:

• Google Firebase — authentication, database (Cloud Firestore) and hosting infrastructure;
• Korapay — payment processing;
• our infrastructure and email providers, strictly to operate the service.

We may also disclose data where required by law, to enforce our terms, or to protect the rights and safety of our users.

Our providers may process data on servers located outside your country, including in the European Union. Where data is transferred internationally, we rely on providers that offer appropriate contractual and technical safeguards for its protection.

We keep personal data only as long as needed for the purposes above — for the life of your account and a reasonable period afterwards to meet legal, accounting and security obligations. You can ask us to delete your account and associated data at any time.

Access is protected by authentication and enforced by database security rules that scope every record to its owner. Sessions use an httpOnly cookie that page scripts cannot read. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

You have rights over your personal data, including access, correction, deletion, restriction, objection and portability, and the right to withdraw consent. See our Data Protection & Your Rights page for what each right means and how to exercise it.

Fursa is not directed at children and is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. We will change the date at the top and, for material changes, provide a more prominent notice.

For any question about your privacy, or to exercise a right, contact privacy@getfursa.com.