Privacy Policy

Kambeng is a crowdfunding platform operated by HexAI, a technology company incorporated in The Gambia. We connect campaign creators with donors to fund charitable, personal, and community projects. References to “Kambeng”, “we”, “us”, or “our” in this policy refer to HexAI and its Kambeng platform. Our registered contact email is legal@hexai.gm.

We collect information you provide directly to us, including:

• Account data: full name, email address, and Wave Mobile Money number when you register.
• Identity documents (KYC): government-issued ID and supporting documents submitted for campaign creator verification.
• Campaign content: titles, descriptions, images, and updates you post.
• Payment information: Wave transaction references and donation amounts. We do not store card numbers or Wave PINs.
• Communications: messages you send to our support team.

We also collect data automatically when you use the platform, including IP address, browser type, pages visited, and referral source for security and analytics purposes.

We use the information we collect to:

• Create and maintain your account and verify your identity.
• Process donations and campaign payouts via Wave Mobile Money.
• Send transactional emails such as donation confirmations, payout notices, and KYC decisions.
• Display campaign pages and updates to donors.
• Detect and prevent fraud, abuse, and violations of our Terms.
• Respond to your support requests and legal inquiries.
• Improve the platform through aggregate analytics (no personally identifiable information is shared externally).

We do not sell your personal data. We share information only in the following circumstances:

• Payment processing: Wave Mobile Money receives your Wave number to process payouts.
• Email delivery: We use Resend to deliver transactional emails.
• Legal obligations: We may disclose information if required by Gambian law or a valid court order.
• Campaign pages: Your display name and campaign content are visible to the public.

Your KYC documents are stored securely and are never shared with other users or third parties except where required by law.

Your data is stored on servers located within the European Economic Area (EEA) and replicated to secure object storage. We apply industry-standard security measures including encryption in transit (TLS), hashed passwords, and access controls. KYC documents are encrypted at rest and accessible only to authorised Kambeng staff for verification purposes. No system is 100% secure; if you believe your account has been compromised, contact us immediately at security@hexai.gm.

We retain your account data for as long as your account is active. If you close your account, we retain transaction records for 7 years for financial and legal compliance. KYC documents are retained for 5 years following your last campaign activity to comply with anti-money laundering (AML) obligations. You may request deletion of other personal data by contacting us.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention requirements).
• Object to processing of your data for marketing purposes.
• Export your data in a portable format.

To exercise any of these rights, email legal@hexai.gm with your request and we will respond within 30 days.

We use cookies and similar technologies to keep you logged in, remember your preferences, and gather analytics. For full details, see our Cookie Policy.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify registered users by email and update the “Last updated” date at the top of this page. Continued use of Kambeng after changes take effect constitutes your acceptance of the updated policy.