Privacy Policy

We process account identifiers, verified contact details, tenant and membership information, service activity, device and security data, support communications, and the operational records submitted through the service.

Information is used to authenticate users, provide tenant-scoped features, process authorized instructions, maintain reliable records, prevent abuse, investigate incidents, support users, and improve service performance.

Tenant data is isolated by organization. Users may access only information allowed by their active membership, role, and server-enforced permissions. Platform operations use narrow, auditable roles rather than universal access.

We may use carefully selected infrastructure, communications, monitoring, and support providers to operate the service. Providers receive only the information needed for their assigned function and are subject to appropriate safeguards.

Information is retained for as long as needed to provide the service, preserve authorized financial and audit records, meet security needs, resolve disputes, and satisfy applicable obligations. Retention periods vary by data type.

We use layered safeguards including authenticated APIs, tenant isolation, role-based permissions, audit records, rate limits, and protected storage. No system is completely risk-free, so suspected unauthorized activity should be reported promptly.

Depending on your relationship with an organization and applicable requirements, you may request access, correction, or deletion of certain information. Some records must be retained for security, audit, or operational integrity.

We may update this policy when our practices or services change. Material changes will be communicated through an appropriate service channel, and the effective date above will be updated.

Imara Core handles privacy requests at info@imaracore.co.tz. Identify your account and the request, without sending a password or verification code. We may verify your identity and coordinate with your organization where it controls the record.

Subject to applicable law, you can request access, correction, erasure, restriction or portability of your personal data, object to processing, or withdraw consent where consent is the basis for processing. Some records must remain available to satisfy lawful retention obligations; we will explain any applicable limit.

You may raise a complaint with Tanzania’s Personal Data Protection Commission. See its data subject rights guidance.

This notice is administered by Imara Core in Tanzania and is subject to applicable Tanzanian data protection law, including the Personal Data Protection Act, 2022, where it applies. Contact info@imaracore.co.tz for privacy questions.