Privacy Policy

How Space in Africa handles personal data on the Data Hub. Last updated 8 November 2026.

Who we are

The Space in Africa Data Hub is run by Space in Africa, which decides how the personal data described here is used. For anything about your data, write to info@spaceinafrica.com.

You can read the Data Hub without giving us any personal data. We don't use advertising or tracking cookies, and no third-party scripts run on its pages.

What we collect, and why

Premium membership. When you join, we ask for your name, work email, phone number, job title, organisation, organisation type, country and, if you choose, your website. We use these to set up and manage your membership, send your receipt and sign-in codes, remind you before it ends and answer your questions. We rely on our contract with you to do this.
Payment. Card payments are taken by Stripe on its own secure page. We never see or store your card number. Stripe tells us the payment went through, the amount and a payment reference, which we keep for our accounts.
Signing in. A 6-digit code is emailed when you sign in on a new device. Once you're in, a cookie on that device keeps you signed in. It holds a signed reference to your membership, nothing else.
Abuse protection. To stop people guessing codes or flooding forms, we count attempts per email address and network address. These are stored only as one-way fingerprints, never as the address itself, and deleted within a day.
On your device. Your light or dark theme choice is saved in your browser. Pages you've read may be saved so they open when you're offline; pages shown to a signed-in member are never saved.
Staff accounts. For Space in Africa staff who use the admin workspace, we keep their name, email, role and a log of the changes they make, to keep the data accurate and secure.

Who else handles it

We share personal data only with the services that run the Data Hub for us, and only what each needs:

Stripe takes payments.
Supabase stores the membership records and the Data Hub's database.
Vercel hosts the website.
Google delivers our emails through Google Workspace.

Some of these services store data outside your country, including in the United States and the European Union. Where that happens, they protect it with the safeguards data protection law requires, such as standard contractual clauses. We don't sell personal data, and we don't share it for marketing.

How long we keep it

Forms left without paying are deleted after 7 days.
Membership records are kept while your membership runs, and then as long as tax and accounting law requires, normally six years from the payment.
Abuse-protection counts are deleted within a day.
Staff activity logs are kept while they're useful for security and accuracy.

Your rights

Depending on where you live, including under the UK and EU GDPR, Nigeria's Data Protection Act, South Africa's POPIA and Kenya's Data Protection Act, you can ask us to:

give you a copy of the personal data we hold about you;
correct anything that's wrong;
delete your data, where we don't need to keep it by law;
stop or limit how we use it, or object to a use.

Write to info@spaceinafrica.com and we'll reply within one month. If you're unhappy with how we've handled your data, you can also complain to your national data protection authority.

Changes to this policy

If we change how we use personal data, we'll update this page and its date, and tell members by email when the change matters to them. The membership terms cover the rest of your agreement with us.