Privacy Policy | Opportra

Effective Date: July 07, 2026·Last Updated: July 07, 2026

OPPORTRA is operated by its developer and platform operator (“we”, “our”, “us”), who is responsible for the collection, use, and processing of personal data as described in this Privacy Policy.

We act as the Data Controller of your personal data in accordance with applicable data protection laws, including the Kenya Data Protection Act, 2019, and we align our practices with internationally recognized standards, including principles reflected in the General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our platform.

We process personal data based on lawful grounds including consent, contractual necessity, legal obligations, and legitimate interests, depending on the context of your interaction with the platform.

1. Scope of This Policy

This Policy applies to all individuals interacting with OPPORTRA, including registered users, consultants, independent professionals, and visitors.

2. Data We Collect

We only collect personal data that is adequate, relevant, and limited to what is necessary for our platform operations:

  • Identity & Contact Information: Full name, email address, phone number, and official identification details where required for verified accounts.
  • Professional Profile Data: Employment history, education, professional and educational certifications, CV uploads, skillsets, and preferences.
  • User-Generated Content: Forum posts, comments, likes, public shares, and tracking of platform-internal application outcomes.
  • Consultant & Merchant Data: Professional biographies, offered services, pricing matrices, availability calendars, and statutory tax details where applicable.
  • Technical, Device & Usage Data: IP addresses, device/browser metadata, unique online identifiers, and detailed platform activity logs.
  • Transaction & Financial Data: Subscription tier records and payment verification tokens. Note: We do not store or process raw credit card or mobile money PIN details; these are handled directly by PCI-DSS compliant third-party processors.

3. How We Use Your Data

We use your data to:

  • Create and manage user accounts
  • Provide personalized opportunity matching
  • Enable consultant bookings and interactions
  • Facilitate community engagement
  • Process subscriptions and payments
  • Improve platform performance and user experience
  • Maintain platform security and prevent fraud

4. Lawful Bases for Processing

We process personal data under the following lawful bases:

  • Consent – where you explicitly agree
  • Contractual Necessity – to provide requested services
  • Legal Obligation – to comply with applicable laws
  • Legitimate Interests – for security, analytics, and service improvement

5. Children's Privacy

OPPORTRA is not intended for individuals under the age of 18.

We do not knowingly collect personal data from minors. If such data is identified, it will be deleted promptly.

If you believe a minor has provided personal data, contact us at app-opportra@thegrowthsphere.org

We may suspend accounts suspected to belong to underage users.

6. AI, Automated Processing & Profiling

OPPORTRA uses artificial intelligence to:

Recommend opportunities

Analyze profiles

Provide application insights

  • These outputs are informational only and do not constitute professional advice.
  • We do not intend for AI systems to make decisions that produce legal or similarly significant effects without human involvement.
  • You may request human review of automated outputs where applicable.

7. Data Visibility & User Content

If you choose public or consultant status, parts of your profile will be visible to other users.

You are responsible for the content you share. While you may delete content, we cannot control third-party copies made while it was public.

8. Data Sharing

We do not sell personal data.

We may share data with:

  • Service Providers (hosting, communications, analytics, payments)
  • Platform Users (e.g., consultant-client interactions)

9. Third-Party Services

Our platform may include links or integrations with third-party services (e.g., payment processors, APIs).

We do not control these services and are not responsible for their data practices.

Their respective privacy policies apply when you interact with them.

10. International Data Transfers

Your data may be processed outside Kenya.

Where this occurs, we ensure appropriate safeguards, including:

  • Standard contractual clauses
  • Secure infrastructure
  • Industry-standard data protection measures

11. Data Retention

We store your data only as long as your account remains active or as required by financial and statutory laws.

Accounts inactive for more than 24 consecutive months will be automatically flagged for archival review or anonymization.

Upon a valid request for erasure, your data will be permanently deleted or securely anonymized within thirty (30) days, subject to existing legal preservation orders.

12. Your Rights

Under applicable data protection laws, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability (where applicable)

13. Data Security & Breach Notification

We implement appropriate technical and organizational measures to protect your data.

In the event of a data breach posing risk to users:

  • We will notify relevant authorities within required timelines
  • Affected users will be informed without undue delay

14. Changes to This Policy

We may update this Privacy Policy periodically.

Material changes will be communicated through the platform and may require renewed user consent.

15. Contact Information

For any privacy-related inquiries or requests: info@thegrowthsphere.org

For any privacy-related inquiries or requests, contact us at info@thegrowthsphere.org.