Privacy Policy
Last updated 17 October 2026
Who I am
SarafuPay is a hackathon project by Ezekiel Lemana (Dodoma, Tanzania), built for the PayPal AI Hackathon 2026. It helps groups run collections (michango) through a WhatsApp agent. All payments run on the PayPal sandbox: no real money moves. Contact: ezekielaugustino@gmail.com.
What I collect
- Your WhatsApp phone number and profile name, so the agent can reply to you.
- The messages and voice notes you send the agent, and its replies, kept as conversation history.
- The details you give: your name, collection titles, targets, pledges and an optional PayPal email for payouts.
- Payment references returned by PayPal (order and capture IDs, payer name and email). I never see or store card or bank details; checkout happens on PayPal.
How I use it
Only to run the service: creating collections, sending pay links, receipts, reminders and transparency updates, preparing payouts that the organiser confirms with a one-time code, and showing the organiser's private dashboard. The public collection page shows totals, the payout ledger and each supporter's first name and optional message, never amounts or emails (an email search there only matches a full, exact address). Full names and amounts are visible only to that collection's organiser.
Who processes it
- Meta (WhatsApp Cloud API), to deliver messages.
- Google (Gemini API), to understand messages and write replies.
- PayPal (sandbox), to process test payments and payouts.
- Render, which hosts the app and its database.
Retention and deletion
Data is kept for the duration of the hackathon and its judging, then deleted. You can ask me to delete your data at any time by emailing the address above; I will remove it within 7 days.
Security
Webhooks from Meta and PayPal are signature-verified, dashboards are protected by a private owner key, and money can only move after the organiser's own confirmation code.
Changes
If this policy changes I will update the date at the top of this page.