Privacy Policy
This Privacy Policy explains how Bohikor collects, uses, stores, shares, and protects personal data when organizations and employees use the Bohikor salary-backed lending platform. It is aligned with how the platform actually operates today.
1. Who we are
Bohikor operates a multi-tenant lending platform in which Bohikor is the lender and approved organizations sponsor employees. For privacy questions, contact Bohikor through the channels on bohikor.com.
2. Scope
This Policy covers personal data processed through:
- Employee, organization-admin, and platform-admin web applications
- Bohikor’s API and background jobs (disbursement reconciliation, settlement creation)
- Email OTP delivery and Mobile Money payout / collection integrations
Organization admins only see data for their own organization. Platform admins may access cross-organization operational data required to run lending, settlements, disputes, and audit.
3. Data we collect
3.1 Identity and account data
- Work email (globally unique for employees), password hashes for admins
- Organization affiliation, admin role, platform-admin role
- Authentication challenge metadata (purpose, expiry, attempt counters — codes are hashed)
- Session metadata (refresh token hashes, expiry, revocation, request metadata)
3.2 Organization and employment data
- Organization profile (name, type, size, registration/taxpayer numbers, address)
- Verified work-email domains
- Invitations, employment periods and status, cycle allowances
- Credit limit settings, salary-cycle calendars, change requests and decisions
3.3 Lending and financial data
- Loan quotes, confirmations, disbursement attempts, loans, and statuses
- Principals, fees, repayment totals, due dates, reservations, and ledger journals
- Settlements, payment references, receipts, allocations, unapplied funds
- Dispute and debt-recovery case materials where opened
3.4 Payout destination data
- Mobile Money provider and phone number
- OTP confirmation timing and activation / usable-after timing and revocation history
3.5 Consent and agreement evidence
- Published agreement metadata (key, version, title, content checksum)
- Acceptances by organization admins or employees (time, IP, user agent where recorded)
- Loan consent snapshots tying a confirmation to agreement versions
3.6 Technical and security data
- IP address, user agent, request identifiers
- Audit events for authentication, configuration, lending, settlement, and admin actions
- Document metadata for compliance or dispute evidence (checksums, scan state) when uploaded
3.7 Data we do not rely on in the current product
Employee PIN login and phone micro-withdrawal verification are legacy behaviours and are not part of the current authentication or destination-confirmation design. Email OTP is the primary verification mechanism for employees.
4. How we use data
- Authenticate users and protect accounts (OTP, sessions, CSRF, lockouts/throttles)
- Onboard organizations and employees; enforce tenancy isolation
- Calculate eligibility and capacity; create quotes; disburse loans; reconcile payouts
- Create and track settlements; verify payments; issue receipts; allocate funds
- Operate disputes, debt recovery, and platform operational queues
- Maintain double-entry ledger integrity and immutable audit trails
- Communicate service messages required for OTP and operational notices
- Comply with law and respond to lawful requests
5. Why we process data
Depending on the processing and applicable Cameroonian law, Bohikor relies on:
- Contract / pre-contract steps — providing lending, settlements, and admin tools
- Legitimate interests — security, fraud prevention, platform reliability, audit
- Legal obligations — financial record-keeping and regulatory duties where applicable
- Consent — where in-product acceptance of agreements is required
6. Sharing and processors
We share personal data only as needed to operate the service:
- Payment providers (for example Campay) — to disburse or collect Mobile Money
- Email delivery providers — to send OTPs and transactional email
- Organization admins — employee and lending data within their organization
- Platform admins / Bohikor operators — to run and secure the platform
- Professional advisors or authorities — when required by law or to establish/exercise legal claims
- Infrastructure providers — hosting, database, object storage for documents
Bohikor does not sell personal data.
7. Storage and transfers
Data is processed in systems used to host Bohikor (application servers, PostgreSQL, object storage). If processors store data outside Cameroon, Bohikor will use appropriate contractual and security safeguards available with those providers.
8. Retention
- Authentication challenges and sessions are retained only as needed for security and expiry/revocation.
- Lending, settlement, ledger, consent, and audit records are retained for operational, dispute, and legal retention needs. Posted ledger journals and audit events are immutable (corrections use compensating entries; they are not overwritten).
- When employment ends or an organization is suspended, access stops, but historical financial records remain as required for settlements and compliance.
9. Security
- Encrypted transport (HTTPS) in production
- Hashed passwords and hashed OTP codes
- Scoped multi-tenant isolation (organization data separated by company scope)
- Secure, HttpOnly session cookies and CSRF protection for browser state changes
- Purpose-bound OTPs with throttling and single-use consumption
- Append-only financial and audit evidence where the product requires immutability
No system is perfectly secure. Protect your email inbox, devices, passwords, and OTP codes.
10. Your rights and choices
Subject to applicable law, you may request to:
- Access personal data Bohikor holds about you
- Correct inaccurate account or profile data available in-product or via support
- Object to or restrict certain processing where the law allows
- Withdraw consent where processing is consent-based (withdrawal does not undo processing already completed, and may prevent further lending until requirements are met again)
Some records (for example posted ledger entries, settlement receipts, and audit events) cannot be deleted or altered because they are required for financial integrity. Employees and organization admins can update many details directly in the applications.
11. Children
Bohikor is a workplace lending platform for employed adults. It is not directed to children.
12. Changes
We may update this Privacy Policy by publishing a new version on this page with an updated effective date. Where changes are material, Bohikor may provide additional notice in-product or by email.
13. Contact
Privacy requests and questions: use the support channels on bohikor.com, or contact your Bohikor platform representative.