Last updated 15 November 2026.
1. Who is responsible
AffordEnterprise ("AE", "we") decides how personal data is used to run AE and this website. When you put other people's personal data into your organisation's workspace or apps (for example customers, staff or candidates), your organisation decides why it is used and we process it for you.
2. What we collect
Account data: your name, work email address, password or sign-in method, language and time zone, and the organisations and roles you belong to.
Organisation and billing data: organisation name, plan, billing contacts, invoices and payment status. We do not store full card numbers; payments are handled by payment and mobile-money providers.
Content you create: documents, records, messages, files and settings you store in AE and in the apps you use.
Usage and security data: sign-in events, the audit log, error and performance logs, IP address and device type. We use these to keep AE secure and working.
This website: it sets no tracking cookies and loads no third-party scripts. If you use the trial or contact forms we receive only what you type, such as your email and organisation name.
3. Why we use it, and on what basis
To provide AE and the features you use (our contract with you or your organisation); to keep AE secure, prevent abuse and fix problems (our legitimate interest); to bill and meet tax and accounting duties (legal obligation and contract); to send service messages such as verification, security and billing emails (contract and legitimate interest); and to send product news only where you have agreed or the law allows, with an unsubscribe option.
We do not sell personal data. We do not use the content of your organisation to train AI models.
4. Who sees it
People in your organisation, according to the roles your organisation sets. A small number of AE staff, only as needed to run, secure and support the service, with access recorded.
Service providers that help us run AE, bound by contract: for example email delivery, payment and mobile-money processing, hosting, and AI model providers when you use AffordAI. We give a current list on request.
Authorities, only where the law requires it.
5. Where it is stored and how long
Your data is kept on servers we operate or rent for AE. The data region of your organisation is shown in Identity. If a provider is outside your country we use contracts and safeguards so that the data stays protected.
We keep personal data while your organisation uses AE and for a limited time after, to meet legal, accounting and security needs. The audit log is kept 90 days on Team and 1 year on Business. When an organisation is closed we delete its data within a reasonable period, except what the law says we must keep.
6. Security
AE uses encrypted connections, hashed credentials, role-based access, an audit log, separated environments and file scanning for uploads. No system is perfectly secure; if a breach affects your personal data we will tell you and the authority as the law requires.
7. Your rights
Under the data protection law that applies to you, including Tanzania's Personal Data Protection Act, 2022 where it applies, you can ask to see your personal data, correct it, delete it, restrict or object to its use, receive a copy, and withdraw consent you gave. If your data is in a workspace owned by an organisation, ask that organisation first; we will help it respond.
To use these rights, write to support@affordenterprise.com. You can also complain to the data protection authority in your country.
8. Children
AE is for businesses and is not directed at children. We do not knowingly collect personal data from children.
9. Changes
We will post changes here with the date, and tell organisation owners about changes that matter.