Data Processing terms
These terms form part of the Terms of Service. They explain how NGOsoftware handles the personal data your organisation puts into the portal.
1. Roles
Your organisation decides what personal data goes into the portal and why (you are the controller). NGOsoftware stores and processes it only to run the portal for you (we are the processor), and only on your instructions, unless the law requires otherwise.
2. Data concerned
Names, titles, emails and sign-in records of your staff; contacts of donors, partners and suppliers; and any beneficiary information you choose to enter. Counts and totals are preferred over names wherever possible.
3. Security
- Connections are encrypted (HTTPS) and passwords are stored only as secure hashes.
- Each organisation's data is separated at database level, so one customer cannot see another's.
- User roles (Admin, Edit, View) and per-person module access.
- An activity record of sign-ins and every change.
- Regular backups and prompt security updates.
4. Our staff and service providers
Only staff who need access to run the service may access customer data, and they are bound to confidentiality. We use a small number of service providers, such as our hosting and email providers; servers may be outside Somalia. We tell customers 30 days before adding or replacing one.
5. Data breaches
If a breach affects your data, we inform your Admin without undue delay and within 72 hours of becoming aware of it, with what we know and the steps taken.
6. Requests from individuals
If someone asks to see, correct or delete their data, we pass the request to you and help you respond.
7. Deletion and information
When the service ends, data is deleted as described in the Terms of Service. On request, we give you the information you need for donor due diligence, and confirm deletion in writing.
8. Law
These terms follow the law of the Terms of Service and applicable data protection law, including the data protection law of Somalia and, where a donor requires it, the rules that donor applies.