Privacy Policy

Clinq acts as a Data Controller within the meaning of the Kenya Data Protection Act, 2019, in respect of the personal and business information provided by founders and funders on our platform. This means Clinq determines the purposes and the means of processing that data — including how it is used to calculate Capital and Project Readiness Scores, generate readiness reports, and optimise investment returns for funders through mandate-based matching.

Clinq is committed to processing all personal data lawfully, fairly and transparently, and in accordance with the principles set out by the Office of the Data Protection Commissioner (ODPC) of Kenya.

Depending on how you use Clinq, we collect the following categories of data:

• Identity information — your name, email address, phone number, business role and login credentials.
• Business information — company name, registration details, sector, headquarters, revenue stage and team details.
• Business financials — financial models, management accounts, audited accounts, bank statements and related figures extracted from documents you upload.
• Pitch decks and supporting documents — legal documents, tax compliance certificates, cap tables and other materials you choose to share.
• Investor risk profiles — for funders: preferred sectors, ticket sizes, investment stages, instruments and geographic focus.
• Usage data — page visits, deal views, document access events and audit-trail records generated while using the platform.

We process your data for the following purposes:

• To provide business health insights — analysing your documents to show you exactly where your business stands and what to improve.
• To generate readiness reports — including your Capital or Project Readiness Score, improvement roadmap and borrowing-capacity estimates.
• To facilitate matching between founders and funders — surfacing businesses and projects to funders whose mandates and risk profiles align, and vice versa.
• To operate the platform — account management, transactional emails, payment processing, support and security monitoring.
• To meet our legal, regulatory and audit obligations.

Sensitive business documents are never shown to a funder without your explicit in-platform approval, and all access is audit-logged.

We implement robust technical and organisational measures to protect your data, including encryption in transit, access controls, NDA-gated data rooms, audit logging and bank-grade security practices across our infrastructure.

We do not sell your personal information to third parties. Data is shared only with your consent (for example, when you approve a funder's request for access), with service providers who help us operate the platform under strict confidentiality obligations, or where required by law.

In line with the Kenya Data Protection Act and ODPC guidelines, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectify — ask us to correct inaccurate or incomplete data.
• Delete — request erasure of your personal data, subject to any legal retention obligations.
• Object or restrict — object to certain processing or ask us to limit how your data is used.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact our Data Protection Officer using the details below. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

For any questions about this policy, your data, or to exercise your rights, contact our Data Protection Officer: