Privacy policy

What we collect

Account: your name, @handle, email or phone number, country, language and main currency, and a salted hash of your password (never the password itself).

Money: the payments, contributions, transfers, requests and fundraisers you take part in, and their receipts.

Security: the devices you're signed in on (browser and system, from the user agent), sign-in times, IP addresses in the security log, and your authenticator secret if you turn on two-step sign-in.

We don't collect card numbers: in live mode cards are entered on our payment partners' pages, never on CafonaPay.

Why we use it

To run your account, move money between members, release circle pots, show you and your circle the same records, send reminders, protect accounts against fraud, and meet legal obligations once payments are live.

We don't sell your data and we don't use it for advertising.

Who sees what

Circle members see each other's names and payment status for that circle. Fundraisers show contributors' names unless they give anonymously. Public receipts and certificates show only a first name and last initial, never emails, phone numbers or handles.

Our service providers process data for us: Cloudflare (hosting and database) and, once payments are live, licensed payment partners such as Stripe and CinetPay.

How long we keep it

Account data is kept while your account is open. Financial records and receipts are kept permanently in an append-only ledger so that they can be verified; when payments are live, the law requires us to keep them for at least five years. The security log is append-only.

Your rights

You can see and correct your profile in the app, see your devices and security log, and sign out other devices. You can ask us for a copy of your data, to correct it, or to close your account, at business@cafona.ca. Canadian residents have rights under PIPEDA and, in Québec, Law 25; you can also complain to the Office of the Privacy Commissioner of Canada.

Security

Connections are encrypted (HTTPS with HSTS). Sessions use an HttpOnly cookie whose value is stored only as a SHA-256 hash. Passwords are hashed with PBKDF2. You can turn on two-step sign-in with an authenticator app.

Contact

Privacy questions: business@cafona.ca.