Privacy Policy
Effective date: March 2026
This Privacy Policy explains how Korabit, operated by Imaradigital, collects, uses, and protects your personal information.
Your Privacy, Our Commitment
We do not sell your data. We collect only what is necessary to provide our services securely. KYC documents are stored with restricted access and deleted within 90 days of account closure.
1. Introduction
Welcome to Korabit ("we", "us", or "our"), a financial intelligence platform operated by Imaradigital, headquartered in Kampala, Uganda.
This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our platform at korabit.com. It applies to all users of the Korabit platform, including registered members and visitors.
By using Korabit, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the platform.
2. Information We Collect
📋 Account Information
- Full name and email address
- Password (stored as a bcrypt hash — we never store your plain password)
- Account preferences and settings
- Referral code and referral relationships
🪪 KYC / Identity Documents
- Government-issued ID (national ID, passport, or driver's license — front and back)
- Selfie or liveness photo (where required)
- Document type, submission date, and review status
KYC documents are stored securely with restricted access — only authorised Korabit staff may view them for verification purposes.
💰 Financial Data
- Investment Pool deposits, withdrawal requests, and yield history
- Crypto-backed loan applications, collateral details, and repayments
- Platform credit balance and transaction history
- Wallet addresses provided for withdrawals
🖥️ Device & Session Data
- IP address and approximate geolocation (city, country)
- Device fingerprint (browser, OS, device type)
- Session tokens and login timestamps
- Trusted device records
This data is used exclusively for security: detecting unauthorised logins and enforcing the 2-device session policy.
📊 Usage Data
- Pages visited and features used within the platform
- AI chat interactions (used to improve model accuracy and service quality)
- Price alerts configured and triggered
- Trading preferences and market targets
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide the platform: Create and manage your account, process investments and loans, and deliver platform features.
- Verify identity (KYC): Review your submitted documents to approve access to financial features such as loans and investment withdrawals.
- Send transactional emails: Account confirmations, KYC status updates, loan notifications, security alerts, and payment receipts. We do not send marketing emails unless you opt in.
- Detect fraud and ensure security: Monitor for suspicious login activity, enforce session limits, and protect your account from unauthorised access.
- Improve the platform: Analyse usage patterns to enhance features, fix bugs, and develop new capabilities.
- Legal compliance: Meet our obligations under applicable law, including financial regulations and anti-money-laundering requirements.
4. Data Sharing
✓ We do NOT sell, rent, or trade your personal data to third parties. Ever.
We share data only in the following limited circumstances:
- Email provider (Titan/Namecheap): We use Titan Mail (hosted by Namecheap) to deliver transactional emails. Your email address is transmitted to this provider solely to send you emails on our behalf.
- Payment processors: Where applicable, payment details may be shared with our payment processing partners to process deposits and withdrawals. We do not store full payment card data on our servers.
- Legal disclosure: We may disclose your information to law enforcement, government authorities, or regulators if required by applicable law, court order, or to protect our legal rights.
5. KYC Document Handling
Encrypted Storage
KYC document images are stored on our servers with restricted filesystem permissions. Access is limited to authorised Korabit staff performing identity verification reviews.
Admin-Only Access
Document images are served through admin-protected routes. Regular users cannot access other users' KYC documents. Images are not publicly indexed or accessible via direct URL without authentication.
Retention & Deletion
KYC documents are deleted within 90 days of account closure. If verification is rejected and you do not resubmit within 180 days, uploaded documents are purged automatically.
No Third-Party Processing
We do not share your identity documents with automated third-party KYC/AML services. All document review is performed manually by authorised Korabit staff.
6. Data Retention
Account & profile data
While active + 2 years after closure
Financial records (investments, loans)
While active + 5 years (regulatory requirement)
KYC documents (images)
90 days after account closure
Device & session logs
90 days rolling window
Email communications
3 years from date sent
7. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your account and associated data, subject to legal retention requirements.
- Objection: Object to processing of your data where we rely on legitimate interests as a legal basis.
To exercise any of these rights, please contact us at privacy@korabit.com. We will respond within 30 days.
Note: Some requests may be limited by legal obligations — for example, we are required to retain financial transaction records for a minimum period under applicable law.
8. Cookies & Tracking
Korabit uses only essential session cookies to maintain your authenticated session. We do not use:
- Third-party advertising or tracking cookies
- Analytics cookies from third parties (e.g., Google Analytics, Facebook Pixel)
- Persistent tracking identifiers shared with external parties
Our session cookies expire when you close your browser or sign out. Device fingerprint data used for security purposes is stored server-side and is not shared externally.
9. Security Measures
We take the security of your data seriously. Our technical measures include:
🔒 HTTPS Encryption
All data in transit is encrypted using TLS/HTTPS.
🔑 Password Hashing
Passwords are stored using bcrypt — never in plain text.
📱 Device Verification
New device logins require email confirmation.
🛡️ Session Management
Sessions are limited to 2 devices and can be revoked at any time.
🔐 Admin Access Controls
KYC documents and sensitive data are role-restricted.
📊 Activity Monitoring
Suspicious login patterns trigger automatic security alerts.
No system is 100% secure. While we implement industry-standard protections, we cannot guarantee absolute security against all threats. Please use a strong, unique password and enable trusted device verification.
10. Age Restriction
Korabit is strictly intended for users who are 18 years of age or older. We do not knowingly collect personal data from children or minors. If we become aware that a user under the age of 18 has registered, we will immediately terminate their account and delete any associated data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' prior notice via email to your registered address and/or a prominent notice on the platform.
The effective date at the top of this page will always reflect the most recent revision. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related questions, data access requests, or concerns about how we handle your information:
Privacy Requests
General Support
Registered Address
📍 Imaradigital, Kampala, Uganda
We aim to respond to all privacy-related enquiries within 14 business days.
© 2026 Korabit by Imaradigital. All rights reserved.