Last updated: June 21, 2026
Thinqr-Org, LLC, a Delaware limited liability company, is the data controller for personal data processed through the Walled platform. Registered address: 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA.
Contact for privacy matters: team@thinqr.org
Account data: name, email address, Clerk user ID, account role, profile photo, and authentication metadata.
Identity and KYC data: government-issued ID information collected during identity verification (processed by Didit). This data is required before your first payout.
Transaction data: payment amounts, currencies, Stripe payment identifiers, buyer email when provided at checkout, payout amounts, exchange rates applied, and payout records.
Payout details: mobile wallet phone numbers (M-Pesa, eMola, mKesh) or bank account information you provide for receiving payouts.
Technical data: server logs, IP addresses on certain endpoints, and audit records of admin actions.
To provide the Walled service: creating accounts, processing payments, managing payouts, moderating products, and delivering purchased digital content.
To prevent fraud and comply with legal obligations: KYC verification, transaction monitoring, sanctions screening, and maintaining financial records as required by applicable law.
To operate and improve the platform: security monitoring, technical maintenance, and aggregate usage analytics.
To communicate with you: account notifications, payout status updates, and platform announcements.
Clerk (auth.clerk.com): Handles account authentication and session management. Your email and profile data are stored with Clerk.
Stripe, Inc.: Processes all payments. Buyer payment data is governed by Stripe's Privacy Policy. Stripe is PCI-DSS compliant.
Didit: Performs identity verification (KYC) for sellers before their first payout. Identity documents are processed per Didit's own privacy policy.
Open Exchange Rates (open.er-api.com): Provides the USD/MZN exchange rate used at payout time. No personal data is shared with this service.
Cloud infrastructure: Our database and application servers are hosted with appropriate security controls. Data is not sold to third parties.
Financial and transaction records are retained for 5 years from the date of the transaction, as required for tax and accounting purposes.
Account data is retained for as long as your account is active. If you close your account, account data is deleted within 90 days, except where retention is required by law.
KYC documents are retained for 5 years after the last transaction associated with your account, in compliance with anti-money-laundering obligations.
After the applicable retention period, data is securely deleted or anonymised.
You have the right to access, correct, or request deletion of your personal data. You may also request restriction of processing or portability of your data in machine-readable format.
To exercise any of these rights, contact us at team@thinqr.org. We will respond within 30 days. In some cases, legal obligations may prevent us from deleting certain records.
If you believe we have mishandled your personal data, you may lodge a complaint with the appropriate data protection authority in your country of residence.
We implement technical and organisational measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews. No internet transmission is 100% secure. If you believe your account has been compromised, contact us immediately at team@thinqr.org.
We may update this Privacy Policy from time to time. Material changes will be communicated by email or notice on the platform before they take effect. Continued use after the effective date constitutes acceptance.
Thinqr-Org, LLC, 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA
Email: team@thinqr.org | WhatsApp: +258 849 448 994