Privacy Policy
Last updated: 6 October 2026
Optiflow Holdings Limited (“we”) operates wakati.work, a tool for creating, signing and sharing business documents, for businesses in Uganda and East Africa. We follow the Uganda Data Protection and Privacy Act, 2019, and comparable laws in Kenya, Tanzania and Rwanda.
What we collect, and why
- Account: email address and password (or Google sign-in), plus your 18+ confirmation and the date you accepted these policies.
- Documents you create: company and recipient details, line items, clauses, logos, signatures and version history, so you can save and reopen your work.
- Client portal: the recipient email on a document, so that client can see documents addressed to them.
- Technical: IP address and browser information in server logs, for security.
We do not ask for your phone number, ID number, date of birth or location. We do not sell your data or use it for advertising.
Third-party services
| Service | Data it receives |
|---|---|
| Lovable Cloud (hosting, database, sign-in) | Your email, password hash, saved documents, versions, signatures and IP address, to run the service. |
| Google sign-in (optional) | Only if you choose Continue with Google: Google shares your name and email with us and learns that you signed in. |
| AI model provider via the Lovable AI Gateway (optional) | Only when you click Draft with AI: your description, chosen country, document type and field labels. Requests are sent with storage disabled. |
| Google Fonts (typefaces) | Your browser's IP address and user agent when it downloads fonts. No cookies are set. |
| PDF creation | None. PDFs are generated inside your browser; no document leaves your device to make them. |
| Analytics and advertising | None. We do not use analytics, tracking pixels or advertising cookies. |
Some of these providers process data outside East Africa. They are bound by contract to protect it.
Payments
Paid plans are sold through Paddle.com, our Merchant of Record. Paddle receives your name, email, billing address and payment details to sell the subscription, manage billing, handle tax and issue invoices. We never see your full card details. We may also share data with professional advisers (legal, accounting) and with authorities where the law requires it.
Our role and legal basis
Optiflow Holdings Limited is the data controller for your account data. We process account, document and billing data to perform our contract with you; technical and security data on the basis of our legitimate interest in keeping the service safe; optional cookies and any marketing only with your consent; and records we must keep to meet legal obligations. We protect data with encryption, access controls and limited staff access.
Sharing with your clients
Anyone with a document's share link can view, sign and download that document. Only send links to the intended recipient.
AI drafting
AI suggestions and templates are general drafts and are not legal, tax or financial advice. Check them, or have them checked by a professional, before you use them.
Retention
We keep your documents until you delete them or delete your account. Server logs are kept for a short time for security.
Your rights
You can access, correct, export or delete your data. Signed in, go to Profile to Download my data or Delete my account. You may also complain to Uganda's Personal Data Protection Office.
Cookies and email
We only use essential storage. See the Cookie Policy. We do not send marketing emails. If we ever do, they will only go to people who opted in, and every one will have an unsubscribe link.
Contact
See our contact page.
This page is a plain-language summary provided by the operator of wakati.work. It is not legal advice; have it reviewed by a qualified advocate before relying on it.