Privacy Policy
Last updated: April 22, 2026
1. Introduction
ISPS Smart Advisor ("we", "our", or "the Service") is operated by Africa One ePortal Limited for the Informal Sector Pension Scheme of Uganda. This policy explains how we collect, use, disclose, and safeguard your information when you use ai.ispsug.org and office.ispsug.org.
2. Information we collect
2.1 Information you provide
- Account information: When you create an account, we collect your name, email address, and password.
- Chat messages: Questions you ask the Advisor. If you are signed in, these are stored so you can see your chat history.
- Feedback: Any ratings or feedback you give on AI responses.
2.2 Information collected automatically
- Usage data: Pages visited, features used, interaction patterns.
- Device information: Browser type, operating system, device type.
- IP address: Used for security and rate limiting.
3. How we use your information
- To provide and improve the Service.
- To save chat history when you are signed in.
- To improve the accuracy of answers using anonymised, aggregated data.
- To prevent abuse, fraud, and ensure platform security.
- To comply with URBRA and other legal obligations.
4. Anonymous use
You can use the Advisor without creating an account. In anonymous mode we do not store your chat messages or associate your queries with any identity — only minimal technical data (IP, device type) is collected for security and rate limiting.
5. Data sharing
We do not sell personal information. We may share data with:
- AI service providers: Your questions are processed by third-party AI models under data processing agreements.
- ISPS trustees and URBRA: Where required by law, regulation, or court order.
6. Data storage and security
Your data is stored on secure servers hosted in the EU, with industry-standard controls — HTTPS/TLS in transit, hashed passwords, and role-based access. No method is 100% secure, and we cannot guarantee absolute security.
7. Your rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data.
- Withdraw consent at any time.
- Export your data in a portable format.
To exercise these rights, contact privacy@ispsug.org.
8. Children
The Service is not directed at children under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. Material changes will be posted here with a revised "Last updated" date.