Privacy Policy

1. Who controls your data

The Boga website at tryboga.com, the Boga waitlist and the future Boga service are operated by Boga Tanzania LTD (“Boga”, “we”, “us”). We are the controller of the personal data described in this policy.

Legal entity: Boga Tanzania LTD
Postal address: P.O. Box 3399
Address: Bagamoyo Road, Dar es Salaam, Tanzania
Phone: +255 718 101 874
Email: [email protected]
Website: tryboga.com

For privacy questions or requests, email [email protected].

2. Scope of this policy

This policy applies to:

the tryboga.com website and its pages;
the Boga waitlist and the emails we send to people on it;
the future Boga web application, once it launches;
support and contact conversations with us; and
connections between Boga and social platforms such as Instagram, Facebook, TikTok and YouTube, once they are available.

Social platforms you connect to Boga have their own privacy policies. We encourage you to read them.

3. Data we collect

Today, through the website and waitlist

Your name, email address and, if you choose to give it, your phone number.
Your business or brand name, role, country, the platforms you use, how many brands you manage, the plan you are interested in, your current scheduling approach and your main challenge, where you provide them.
Your consent choices, the version of the consent wording you accepted and when you accepted it.
Where you came from: the page you signed up on, the referring page and campaign (UTM) parameters, plus your browser language.
Messages you send us through the contact form or by email.
Technical data such as IP address, browser and device type, and security logs. IP addresses used for rate limiting are converted into keyed hashes and held briefly in memory.

In the future, when the Boga service launches

Account and profile details that connected platforms share with us when you authorize them, such as account name, ID, profile picture and account type.
OAuth access and refresh tokens issued by those platforms, stored encrypted.
Content you create or upload: captions, media, schedules, publication status and workspace activity.
Billing and transaction references. Card details will be handled by our payment provider and, where feasible, never stored by Boga.

4. How we collect data

Directly from you, when you join the waitlist, contact us or, later, use the service.
Automatically, when your browser talks to our servers (for example, IP address and request logs).
From platforms you authorize, once connections are available and only within the permissions you grant.

5. How we use data

To run the waitlist, confirm your signup and invite you to early access.
To send the product updates you asked for.
To provide the service, including publishing content to your connected accounts when and how you instruct us.
To answer support requests and other messages.
To keep Boga secure, prevent abuse and spam, and investigate problems.
To understand, in aggregate, how the website is used and improve it.
To meet legal, tax and accounting obligations.
To send general marketing, only if you separately opted in. You can opt out at any time.

6. Legal bases

Where the law requires a legal basis for processing, we rely on:

Consent — for waitlist updates, optional marketing and optional analytics. You can withdraw consent at any time.
Contract — to take steps you request, such as providing the service you sign up for.
Legitimate interests — to secure our systems, prevent fraud and improve Boga, balanced against your rights.
Legal obligation — where the law requires us to keep or disclose information.

Social account connections are not live yet. When they launch, these commitments will apply:

We will connect accounts only through each platform’s official authorization (OAuth) flow. Boga will never ask for or store your social media password.
We will request only the permissions needed for the features you use, and explain why before you are redirected.
Access tokens will be encrypted at rest and never placed in browser storage or logs.
We will use platform data only to provide the features you request, such as showing your connected account, publishing your scheduled content and reporting its status.
Connecting an account does not transfer ownership of that account, or its content, to Boga Tanzania LTD.
You will be able to disconnect an account in Boga, or revoke access in the platform’s own settings, at any time.
We will follow the developer policies of Meta, TikTok and Google.

Boga’s use and transfer of information received from Google APIs, including the YouTube API Services, will adhere to the Google API Services User Data Policy, including the Limited Use requirements. By connecting a YouTube account you will also be bound by the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.

8. Service providers

We share personal data only with providers that help us run Boga, and only as much as they need:

Cloud hosting (a virtual private server provider) for our website, application and database.
Cloudflare, for DNS, content delivery, security, and storage of encrypted backups.
An email delivery provider, to send confirmation and update emails.
A privacy-friendly analytics provider, only if analytics is enabled and you consent.
An error monitoring provider, if enabled, configured to remove personal data.
Payment providers, once paid plans launch.
Social platforms you connect, to publish content at your instruction.

We may also disclose data where required by law, to protect rights and safety, or as part of a merger or sale of our business, in which case this policy will continue to protect your data.

9. No sale of personal data

We do not sell personal data. We do not share it with third parties for their own advertising or for purposes unrelated to Boga.

10. International transfers

Boga is based in Tanzania, but some of our providers operate internationally. Your data may therefore be processed in other countries. Where required, we use appropriate safeguards, such as contractual protections, and choose providers with strong security practices.

11. How long we keep data

Waitlist data: until launch and then for up to 24 months of inactivity, or until you unsubscribe or ask us to delete it.
Support messages: up to 24 months after the conversation ends.
Security logs: up to 90 days.
Rate-limiting data: keyed hashes held in memory for no more than one hour.
Backups: encrypted backups roll off within 35 days.
Connected-account data (future): for as long as the account is connected, then deleted after disconnection or account deletion, except where we must keep records by law.

12. Security

We use encryption in transit (HTTPS), restricted and logged production access, encrypted secrets and tokens, encrypted backups and monitoring. No system is perfectly secure, but we work to protect your data and will tell you and the relevant authorities about a breach where the law requires. Read more on our Security page.

13. Your rights

Depending on where you live, you may have the right to:

access the personal data we hold about you;
correct inaccurate data;
delete your data;
object to or restrict certain processing;
receive your data in a portable format; and
withdraw consent at any time, without affecting earlier processing.

To use these rights, email [email protected]. We will verify your request without asking for passwords. Every waitlist email also has an unsubscribe link.

14. Deleting your data

Our Data Deletion page explains exactly how to ask us to delete your data. You can also email [email protected] directly.

15. Cookies and analytics

We keep cookies and tracking to a minimum. See our Cookie Policy for details, and use “Cookie preferences” in the website footer to change your choice at any time.

16. Children

Boga is designed for adults and businesses. You must be at least 18 to join the waitlist or create an account. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

17. Changes to this policy

We will update this policy as Boga develops. When we make material changes, we will update the date at the top and tell waitlist members and customers by email or in the product before the changes take effect.

18. Contact and complaints

Questions or concerns? Email [email protected], call +255 718 101 874, or write to Boga Tanzania LTD, P.O. Box 3399, Bagamoyo Road, Dar es Salaam, Tanzania.

If you are not satisfied with our response, you may have the right to complain to the data protection authority in your country. In Tanzania, this is the Personal Data Protection Commission.