Privacy Policy

Basira is a donor-intelligence platform operated by Sekna (“we”, “us”) for invited partner organizations. This policy explains what data the platform touches and how it is protected.

The most important thing

Donor data stays in the partner organization's own data warehouse.Basira computes scores and audiences inside infrastructure the partner owns. Donor personally identifiable information (PII) is not stored on Basira's servers; our own database holds only platform metadata — segment definitions, export history, and audit logs.

Data we process on behalf of partners

• Donation transaction records supplied by the partner from their CRM (amounts, dates, campaigns, contact details).
• Derived scores computed from those records (segments, churn risk, lifetime value, predictions).
• Audience export files, generated on demand and hashed (SHA-256) where the destination platform requires it.

Sekna acts as a processor of this data under the partner's instructions; the partner organization remains the data controller for its donors.

Data we collect from platform users

• Sign-in: your Google account email and name, used solely to authenticate you against the partner's access list.
• Session cookies: strictly necessary cookies that keep you signed in. We use no advertising or third-party analytics cookies.
• Audit records: actions such as exports and donor-profile views are logged with your account for the partner's accountability.

Sharing

We do not sell or share personal data. Audience files are generated for the partner's own upload to advertising platforms (e.g. Meta, Google) under the partner's agreements with those platforms, and are hashed to each platform's specification where supported.

Security

• Access is invitation-only, enforced by Google sign-in against an explicit email allowlist.
• All traffic is encrypted in transit (HTTPS).
• Warehouse credentials are held server-side only and never exposed to the browser.
• Every data export is recorded in an immutable audit log.

Retention & your rights

Donor data retention is governed by the partner organization's own policies, since the data lives in their systems. Platform users may request deletion of their sign-in records at any time. Donors wishing to exercise data-protection rights (access, correction, erasure under UK GDPR/GDPR) should contact the charity they donated to; we support partners in fulfilling such requests.

Changes

We will post any changes to this policy on this page with an updated date.