1. Who we are
Unbrdn is operated by Valr Capital Limited, 10th Floor ABC Place, P.O. Box 1184, 00606 Nairobi, Kenya. For privacy questions, access requests, or deletion requests, contact help@unbrdncapital.co.
2. Information we process
- Account and workspace information, including names, business email addresses, roles, authentication records, and audit events.
- Customer-provided lending, borrower, business, collections, and portfolio data that authorised users upload or connect.
- Technical and security information such as device, browser, IP address, request logs, and service diagnostics.
- Configuration and credentials for integrations, stored separately from ordinary application records and protected using encrypted cloud configuration or secret storage.
3. Google API data
When a user connects a Google workbook, Unbrdn requests access to the specific files they select using Google's file picker (the drive.file permission). This permission allows an app to manage selected files; Unbrdn uses it only to read the selected Google Sheet, XLSX workbook, or CSV file, validate access, preview its structure, and import it into the chosen Unbrdn workspace and review stage. Scheduled imports read the same selected file until the connection is disabled or access is revoked.
- Unbrdn does not modify or delete files in Google Drive.
- Google access tokens and refresh tokens are used only to provide the connected import feature.
- Google user data is not sold, used for advertising, or used to train a general-purpose or non-personalised AI model.
- Imported content may be processed to provide the customer-requested lending analysis and workflow features visible in that customer's workspace.
- We disclose Google user data only to the customer's authorised users and service providers needed to operate and secure Unbrdn, or where required by law.
Unbrdn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Why we process information
We process information to provide and secure the platform, perform customer-requested imports and analysis, support users, meet contractual and legal obligations, prevent abuse, and maintain reliable audit records. Where required, the lawful basis is consent, performance of a contract, compliance with law, or legitimate interests that do not override individual rights.
5. Storage, security, and retention
We use access controls, tenant isolation, encryption in transit and at rest, secret storage, logging, and review controls appropriate to the sensitivity of lending data. Customer data is retained for the active service relationship and applicable contractual, legal, backup, and audit periods. On termination, customers may export their data during the period stated in their agreement, after which data is deleted or de-identified subject to legal and backup obligations.
6. Service providers and international processing
We use vetted infrastructure, security, communications, and analytics providers to operate Unbrdn. Data may be processed outside a user's country where necessary to provide the service, subject to contractual and legal safeguards. Customer-specific deployment and data-residency commitments remain governed by the applicable order form and Data Processing Addendum.
7. Your controls and rights
- Disconnect or delete a Google connector in Unbrdn to stop future imports.
- Revoke Unbrdn's Google access at Google Account permissions.
- Ask us to access, correct, export, restrict, object to, or delete personal data, subject to applicable law and the customer's role as data controller.
- Contact the relevant data-protection authority, including Kenya's Office of the Data Protection Commissioner, where applicable.
8. Changes
We may update this policy as the platform, law, or our processing practices change. We will publish the current version here and provide additional notice for material changes where required.