Privacy Policy

Last updated: July 2026

This Privacy Policy explains how the e.sacco platform, operated by PledgePay Uganda Limited of Bunyonyi Drive, Nakawa, Kampala, Uganda, handles personal data. It applies to the SACCOs and organisations that use the Service and to the members whose records they keep.

Data controller / operator
PledgePay Uganda Limited
Bunyonyi Drive, Nakawa, Kampala, Uganda
Tel: +256 740 300 843 / +256 777 870 017
Support: esaccoug@gmail.com
Company: info@pledgecard.co
Company website: pledgepayug.com

Your SACCO is the controller of its members' data; e.sacco processes that data on the SACCO's behalf to provide the Service. This is a plain-language summary and not a substitute for legal advice.

1. Information we hold

Account information — SACCO name, staff names, usernames, email, phone, and hashed passwords.
Member records — the details your SACCO enters, such as names, contact details, national ID type, next of kin, photographs, savings, shares, and loan information.
Usage and security data — audit logs of significant actions, login attempts, and the IP address used, to keep accounts secure.

2. How we use it

We use this information only to provide and secure the Service: to authenticate users, keep your SACCO's records, produce statements and reports, prevent abuse, and provide support. We do not sell personal data, and we do not use your members' data for advertising.

3. Passwords and security

Passwords are stored only as one-way hashes and are never visible to us or to other users. Access between different SACCOs is strictly isolated. Sensitive server directories are protected from public access, and the Service is served over an encrypted (HTTPS) connection.

4. Sharing

We do not share your data with third parties except: (a) service providers strictly necessary to run the platform (such as hosting); (b) where you enable an integration, such as a payment provider, and only the data needed for it; or (c) where required by law. Each SACCO can only see its own data.

5. Retention

We keep data for as long as your workspace is active, and for a reasonable period afterwards to allow export and to meet legal obligations. Your SACCO can request deletion of its workspace, after which its data is removed subject to any legal retention requirements.

6. Members' rights

Members may ask their SACCO to access, correct, or delete their personal information. Because your SACCO controls its own records, such requests are handled by the SACCO; we assist the SACCO where needed.

7. Changes

We may update this Policy as the Service evolves. Significant changes will be notified through the platform. The "last updated" date above shows when this version took effect.

8. Contact

For privacy questions, contact your e.sacco operator at the support contact shown in your workspace.