Legal

Privacy Policy

Last updated: May 1, 2026

This Privacy Policy explains how Pinch Africa ("we") collects, uses, and protects information when you use GetItDone (the "Service"). We follow the principles of the Kenya Data Protection Act, 2019 and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Information we collect

• Account info. Name, email, password (hashed), profile photo, role, workspace.
• Customer Data. Tasks, comments, files, documents, and other content you create in the Service.
• Billing info. Plan, subscription status, invoices, last 4 digits of card. Card numbers are stored by our payment processor (Paystack), not by us.
• Usage data. IP address, browser, device, pages visited, actions taken — used to improve the product and detect abuse.
• Cookies. See "Cookies" below.

2. How we use information

• To provide and operate the Service.
• To process payments and send billing receipts.
• To send transactional email (invitations, password resets, mentions, due-date reminders).
• To send product updates if you have opted in.
• To prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

3. Sharing

We do not sell personal data. We share data only with:

• Service providers who help us run GetItDone (hosting, email delivery, payments). They are bound by contract to use data only on our instructions.
• Authorities if required by law, court order, or to protect rights and safety.
• In a business transfer (e.g. merger or acquisition), with notice to you.

4. Data retention

We keep account and Customer Data for as long as your account is active. After termination, data is retained for up to 30 days then permanently deleted, except where we are required to retain it longer (e.g. tax records).

5. Security

We use TLS encryption in transit, at-rest encryption for backups, hashed passwords, role-based access controls, and regular security reviews. No system is 100% secure; we will notify affected users of any data breach in line with applicable law.

6. Your rights

Subject to applicable law, you have the right to: access your personal data, correct inaccuracies, request deletion, object to processing, and request a portable copy. To exercise these rights, email getitdone@getitdone.pinch.africa.

7. International transfers

GetItDone is hosted in Kenya. If you are outside Kenya, your data will be transferred to and processed in Kenya, which may have different data protection laws than your country.

8. Cookies

We use a small number of cookies and similar technologies:

• Essential cookies — required for the Service to function (session, CSRF). These cannot be disabled.
• Analytics cookies — help us understand how the Service is used. You can decline these via the cookie banner.

9. Children

GetItDone is not intended for users under 18. We do not knowingly collect data from children.

10. Changes

We may update this Policy. Material changes will be communicated by email or in-app notice. The "Last updated" date above always reflects the current version.

11. Contact

Data protection questions or requests: getitdone@getitdone.pinch.africa.