Privacy Policy

We collect: (a) Account data — name, email, phone number, company registration details; (b) Trade data — product listings, transaction records, contracts, communications; (c) Usage data — pages visited, searches performed, device type, IP address, browser; (d) Payment data — billing address and payment method details processed by our authorised payment processors (we do not store full card numbers); (e) Verification documents — business registration certificates, export licences, certifications uploaded for verification purposes.

Your data is used to: operate and improve the XCASHEW platform; verify your identity and business credentials; facilitate transactions and generate contracts; send transactional notifications (order updates, contract events, port alerts); provide AI matching recommendations; comply with legal obligations including anti-money-laundering regulations; and improve our services through aggregated, anonymised analytics. We do not sell your personal data to third parties.

We share data with: (a) Counterparties — when you enter a transaction, your business name and contact details are shared with the other party; (b) Payment processors — Stripe, Flutterwave, and local payment providers as required to process payments; (c) Cloud providers — our infrastructure runs on servers in the EU and Africa operated by providers bound by data processing agreements; (d) Regulators — when required by Tanzanian law or international trade compliance requirements. We do not share data with advertising networks.

Account data is retained for as long as your account is active and for 7 years after account closure to meet commercial and regulatory record-keeping requirements. Transaction records and contracts are retained for a minimum of 10 years in accordance with Tanzanian commercial law. You may request deletion of non-obligatory personal data by contacting us at info@xcashew.com.

We use essential cookies for authentication and session management. We use analytics cookies (with your consent) to understand how the platform is used and improve it. You can disable non-essential cookies in your browser settings. Disabling cookies may affect your ability to use some platform features.

We protect your data using: TLS encryption for all data in transit; encrypted storage for sensitive documents; role-based access controls limiting staff access to personal data; regular security audits; and two-factor authentication options for accounts. No internet-based system is 100% secure. In the event of a data breach affecting your personal data, we will notify you within 72 hours as required by applicable law.

You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of data we are not legally obligated to retain; restrict processing of your data in certain circumstances; receive your data in a portable format; and withdraw consent for optional processing at any time. To exercise these rights, contact: info@xcashew.com

XCASHEW is a B2B platform for business users. We do not knowingly collect data from individuals under 18 years of age. If we become aware that a minor has provided personal data, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email at least 14 days before they take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

For privacy questions or to exercise your rights, contact: info@xcashew.com or chimbonetwork@gmail.com. Phone: +255769444669. Address: CHIMBONETWORK GROUP, Dar es Salaam, Tanzania.