Privacy Policy

Last updated: March 2026

1. Introduction

Nammerha ("we", "our", "Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our OCDS-compliant reconstruction marketplace.

2. Information We Collect

Identity Data

Full name, email, role, and KYC documents (government ID, proof of address).

Location Data

GPS coordinates for spatial proofs and delivery verification.

Financial Data

Donation amounts, escrow transactions, and payment method metadata.

Device Data

Browser type, IP address, device metadata for fraud prevention.

3. How We Use Your Data

  • To verify your identity and prevent fraud (KYC compliance)
  • To process donations and manage escrow transactions
  • To verify material delivery through GPS-stamped photographic proofs
  • To publish transparent procurement data under OCDS standards
  • To generate audit trails for accountability and legal compliance

4. Data Security

We implement industry-standard security measures including:

TLS 1.3 Encryption

SHA-256 Image Hash

JWT Auth Tokens

Parameterized SQL

5. Data Retention

We retain your data for as long as your account is active and as required by applicable laws. Financial and audit trail data is retained permanently for OCDS compliance and accountability. You may request deletion of non-essential data by contacting us.

6. Your Rights

You have the right to access, correct, or delete your personal data. You may withdraw consent for data processing at any time, subject to legal and contractual obligations. Contact us at [email protected].

7. Cookies & Tracking Technologies

We use strictly functional cookies to operate the Platform. We do not use any third-party analytics, advertising, or tracking cookies.

Authentication Cookie

A secure, httpOnly session cookie that keeps you logged in. It cannot be read by JavaScript and is transmitted only over HTTPS.

CSRF Protection Cookie

A security token that prevents cross-site request forgery attacks on your account.

No Third-Party Tracking

We do not use Google Analytics, Facebook Pixel, or any third-party tracking services. Your browsing activity is never shared with advertisers.

Your data is protected by industry-standard encryption and is never sold to third parties.