Privacy notice
Version privacy-2026-10-13 · last updated 13 October 2026
In short
- We use what you tell Mansa to write your proposal and set up your workspace. Nothing else.
- We never sell your information or use it for advertising.
- Mansa reads only what you allow in part 8 of the interview, and you can change that later.
- We keep a record of the pages people open on Mansa, including the IP address, to keep the service safe.
- You can ask to see, correct or delete your information at any time: email deploy@africacen.org.
1. Who we are
AfCEN Deploy (“Deploy”, “we”, “us”) is run by AfCEN in Kenya. Mansa is the guide on this site that helps a business sign up for Deploy: it asks about how the business works, and the Deploy team uses the answers to write a proposal and set up a workspace.
This notice covers Mansa: signing up, the interview, your proposal and setting up your workspace. Once your workspace is running, the data inside it is covered by the founding-customer terms you accept in your proposal and by Deploy’s own privacy policy.
AfCEN decides how the information in this notice is used, so under Kenya’s Data Protection Act, 2019 we are the data controller for it. Questions: deploy@africacen.org.
2. What we collect
Your account
- Your first and last name, email address and, if you give it, your phone number.
- How you sign in: a code sent to your email, Google, or a password (we only keep a scrambled form of passwords, never the password itself).
- When you accepted these documents, and which version.
- Sign-in events: when you signed in and whether a sign-in failed.
Your interview
- Your answers: your business name and trade, what you sell, your customers, how orders reach you, the steps of an order, the records you keep and where, your team, and who decides what.
- Files you upload, such as a stock sheet or a photo of your notebook.
- Questions you ask Mansa while you answer.
- Your choices in part 8 about what Deploy may read, such as M-Pesa messages or your customer list.
Looking up your business
When you type your business name, Mansa searches the public web for it and shows you possible matches. We only keep a match if you confirm it.
Your proposal
- The proposal we write for you and every version of it.
- Your decision (accept or decline), the name and role you sign with, any reason you give for declining, and when you decided.
- The IP address and browser details of the device you decided on, and a fingerprint of the exact text you saw. Together these are our record that you agreed.
Your workspace
Once you accept, we draft your workspace settings from your answers: your order steps, the words you use for your work and your customers, and the chat channels you use. We pass these, with your name and email as the workspace owner, to Deploy so it can build your workspace.
Visits to Mansa
Every time someone opens a page on Mansa we record the time, the page, the IP address, the browser details, the page they came from and, if they are signed in, their account. We use this to see who visits Mansa and to spot misuse.
Emails
We keep a copy of the emails we send you, such as your proposal and the message that your workspace is ready.
3. Why we use it, and on what basis
| What we do | Why the law allows it |
|---|---|
| Create your account, remember your progress and let you sign in | To provide the service you asked for |
| Write your proposal and set up your workspace from your answers | Steps you asked us to take before an agreement, and then the agreement itself |
| Read the records you allow in part 8 | Your consent, which you can withdraw |
| Record your acceptance or decline | To show what was agreed, and our legal obligations |
| Keep the visit log and sign-in events | Our legitimate interest in keeping Mansa secure and knowing who uses it |
| Email you about your proposal and workspace | To provide the service you asked for |
4. AI and people
Mansa uses AI models to suggest answers in the interview, to answer your questions, and to draft your proposal and workspace settings. A person at AfCEN reads every proposal before it is sent to you and approves your workspace settings before your workspace is built. The AI does not make decisions about you on its own.
We do not use your answers to train general-purpose AI models.
5. Who else sees your information
We share only what each one needs to do its job, and each is bound to keep it confidential.
| Who | What for |
|---|---|
| Microsoft Azure | Hosting Mansa and storing its data |
| AI model providers, through our AI gateway | Reading your answers to make suggestions and draft your proposal and settings |
| Our email provider | Sending you sign-in codes and messages about your proposal and workspace |
| Signing you in, only if you choose “Continue with Google” | |
| Public web search | Looking up your business name, only the name |
| AfCEN Deploy | Building and running your workspace once you accept |
We do not sell your information and we do not share it for advertising. We share information with authorities only when the law requires it.
Some of these services store or process data outside Kenya. When they do, we use the safeguards the Data Protection Act, 2019 requires.
6. How long we keep it
- Your account, answers, files and proposal: while you are working with us. If you ask us to delete them, we do so within 30 days.
- The record of your acceptance or decline: for up to seven years, because it shows what was agreed. This is just the record, not your answers.
- Visit records: deleted automatically after 12 months.
- Copies of emails we sent: kept with your account and deleted with it.
If you go on to use Deploy, the data in your workspace follows your founding-customer terms: when you leave, you get a full export and we delete our copies.
7. Your rights
Under the Data Protection Act, 2019 you can:
- be told how your information is used (this notice);
- get a copy of the information we hold about you;
- have wrong information corrected;
- have your information deleted;
- object to how we use it, or withdraw a consent you gave, such as your part 8 choices;
- receive your information in a form you can take elsewhere.
Email deploy@africacen.org from the address on your account. We may ask you to confirm it is you. We aim to reply within 14 days.
If you are not happy with how we handle your information, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).
8. Cookies and browser storage
- Sign-in cookie (
nexa_session): keeps you signed in for up to 12 hours. - Google sign-in cookie: lasts a few minutes while you sign in with Google, to keep that sign-in safe.
- Browser tab storage: keeps you signed in while the tab is open.
- Theme choice: remembers if you picked light or dark.
We use no advertising or tracking cookies. The visit log in section 2 is kept on our servers, not in your browser.
9. Keeping it safe
Information travels over encrypted connections. Access inside AfCEN is limited to the people who need it to write proposals and set up workspaces. Deploy only ever reads the records you allow; it cannot change or delete them.
10. Who Mansa is for
Mansa is for people setting up a business. It is not meant for anyone under 18.
11. Changes
If we change this notice, we will update the date at the top and, for important changes, tell you by email or in Mansa before they apply.