Privacy notice

Data we store

Provider registration stores:

• the email address and account id returned by Google or GitHub
• a display name, if you set one in the provider console
• organization details you submit: name, headquarters country, website, public contact email, and short description
• listing text and revisions you submit, and the review record for those submissions
• membership, when you add a person who already has a marketplace account

API Community Tanzania staff accounts are separate. A staff account stores a username, an email address, and a password hash. The password itself is not stored.

The sign-in session can also hold the name, email, and profile image supplied by Google or GitHub. That session lasts about one hour. The profile image is not copied into the marketplace database.

Why we use it

We use this data to:

• open and keep your provider account
• review an organization and the listings it submits
• show accepted organization details and published listings to visitors
• let organization members manage the listings they are allowed to manage
• keep the site and the review record reliable

The public contact email is collected so visitors and API Community Tanzania can reach the organization. Submit it only if that person expects it to be published.

What visitors can see

A published listing and the accepted organization fields that belong on the public page are visible to anyone. Account emails used only for sign-in, staff records, unpublished drafts, and rejected submissions stay off the public directory.

Other processors

Google or GitHub processes the sign-in you choose. The website is hosted on Hostinger. The application and database run on Railway. Those services can process data outside Tanzania, and they do so to operate the marketplace. Personal data is not sold, and the marketplace does not build advertising profiles.

Cookies

A session cookie keeps you signed in. It expires with the session, after about one hour. The provider console and the admin console store a cookie that remembers whether the sidebar is open. That cookie is a display preference. The public directory does not set an analytics cookie.

How long we keep it

Account, organization, and listing records stay while the account, organization, or published listing exists. Hosting providers keep their own technical logs, which can include an IP address and browser details, for their operational period. You can ask us to delete a provider account. We delete the account data, and we say so if a published listing still needs a contact or if the law of Tanzania requires a record to be kept.

Your requests

You can ask for a copy of your personal data, a correction, or deletion, and you can object to a use that is not required to run your account or a published listing. Email support@apicon.or.tz. You can also complain to the Personal Data Protection Commission in Tanzania.

Provider registration is for people who are 18 or older. We do not open a provider account for a person we know is under 18.

Changes and contact

We may update this notice. The date at the top is the date of the current version. The Terms govern use of the directory.

API Community Tanzania, Tanzania. Email support@apicon.or.tz.