Privacy Policy
Last updated 19 September 2026
This policy explains what data Polimath Labs Ltd ("we", "us") collects through LoanStack, why, and what happens to it. The short version: we don't sell your data, we don't run ads, and we don't track you around the web. We collect what the platform needs to work, and that's it.
Data we collect
- Account data. Your name, email address, a hashed version of your password, and your role in your organization.
- Organization data. What your organization enters to run lending: client details, loan terms, payment records, penalties, guarantors, and collateral.
- Files. Documents your organization uploads, such as identification documents and collateral photos.
- Records. An audit trail of key actions, including who performed them, so organizations can account for what happened.
- Technical data. Standard server logs, such as IP address and timestamps, kept for security and reliability.
If you're a borrower or guarantor
If a lender uses LoanStack, they enter your information themselves. We receive it as part of running the platform for them, and they remain in control of it. To see, correct, or delete your data, contact the lender you do business with. We'll help them act on your request where needed, and you can always reach us at team@polimath.dev.
How we use data
- To operate LoanStack: store your records, keep accounts working, and let organizations collaborate.
- To keep the service secure: detect abuse, protect accounts, and investigate problems.
- To support you: respond to questions and fix issues you report.
We don't sell personal data, we don't share it with advertisers, and we don't build profiles of borrowers.
Who we share data with
Only the service providers that host and run parts of LoanStack, and only to the extent they need it. These providers process data on our instructions, and not for their own purposes. We may also disclose data if the law requires it or to protect the rights and safety of our users, and we notify affected organizations where the law allows.
Retention and deletion
We keep data while your organization uses LoanStack. When an organization or account is deleted, we delete its data.
Security
Data travels over encrypted connections. Access to production data is limited to the people on our team who need it to run and support the service, and the audit trail records key actions in the platform. No system is perfect, so if you experience a security issue, please tell us at team@polimath.dev and we'll take it seriously.
Your rights
Under Rwanda's Law No. 058/2021 on the protection of personal data and privacy, you can ask to access your personal data, correct it, delete it, or object to its processing. Email team@polimath.dev with "privacy" in the subject line. If you're a borrower or guarantor, begin by contacting your lender, as described above.
International transfers
Our providers may process data outside Rwanda. We rely on their contractual and technical safeguards when that happens.
Changes to this policy
We update this page when our practices change and adjust the date above. If a change is material, we'll tell you in the app or by email before it takes effect.
Contact
Polimath Labs Ltd, Kigali, Rwanda. Reach us at team@polimath.dev.
These terms also apply: read our Terms of Service.