Privacy Policy
Introduction & Data Controller
Ayiti Home Link (AHL), operated by Buzz INCC, based in Port-au-Prince, is responsible (data controller) for user data. This document explains how we collect, why, who we share with, how long we keep it, and how to delete it.
Data We Collect
- Identity: name, date of birth, sex, nationality, contact (email, phone, WhatsApp).
- Return: country of origin, return date, destination, household members.
- Needs: work, housing, food, education, capital, legal support, documents.
- Health (optional): only with your consent, kept separate and confidential.
- Documents: copies of your papers (ID, diplomas) when you choose to upload them.
- Technical: how you use the app (to improve it).
Why & Legal Basis
- Consent: to create a reintegration plan, match with jobs and resources — only when you say yes.
- Legal obligation: when the law requires it (e.g. a court order).
- Legitimate interest: protection, fraud prevention, and user safety.
Who We Share With
- Your case team: authorized people in the organization helping you.
- Verified employers and providers: only the fields you consent to share, and only when you say yes.
- Our processors (hosting, email, AI): under security contract.
- Legal authorities: only if the law or a court forces us.
- We never sell user data.
How Long We Keep It (Retention)
- Active case: while the case is open, and up to 7 years after closure, for accountability.
- Documents: as long as the law requires, or until you request deletion.
- Health: erased when you withdraw consent.
Lakay AI Conversations
Your Lakay AI conversations may be saved as internal notes on your case file. Only your assigned caseworker and authorized Ayiti Home Link administrators can see them — never employers or partner organizations. They are kept for as long as your case is open and up to 7 years after it closes. You can request deletion at any time through the Data Subject Rights page or by writing to dpo@ayitihomelink.com.
How to Delete It
You can request deletion at any time (see "Data Subject Rights"). We erase it, unless a legal obligation requires us to keep part. We recall what was shared with others where possible.
Your Rights
Access, rectify, erase, restrict, port, object, and withdraw consent. See the "Data Subject Rights" page for details and how to request.
Security
We use encryption in transit and at rest. Access to health and case data is role-restricted. All access is logged. We do not sell data.
Health & Sensitive Data
Health data is optional, confidential, and shared only with authorized providers when you consent. AHL does not automatically claim HIPAA compliance; the system is structured for legal and technical review.
Children & Vulnerable People
For children, we ask a parent or guardian's consent. We take special care with vulnerable people and keep protection data separate.
Changes & Contact
We may update this policy. Continued use means you accept. Data contact: dpo@ayitihomelink.com · +509 4230 3876. Safeguarding channel: safeguarding@ayitihomelink.com.