Privacy policy

1. Who we are

Atupa is a funding-readiness and credit-intelligence platform operated by GLI CONSULTS. In this policy, "we" and "Atupa" mean GLI CONSULTS and its operating units, GLI CONSULTS Advisory and GLI CAPITAL.

Data protection queries: hello@atupa.africa.

2. Information we collect

Account data: name, email address, password hash and the portal role assigned to your account.

Business data: the answers you provide in the FRICS assessment, business identifiers such as registration and tax numbers, uploaded verification evidence, and obligation or repayment records you enter.

Derived data: your FRICS score, pillar breakdown, readiness band, FRICS ID and the AI-generated action plan produced from your answers.

Technical data: log and security information generated when you use the platform.

3. How we use it

To calculate your FRICS score and produce your report and action plan.

To operate the FRICS ID registry and allow third parties to confirm that an ID exists and its public readiness band.

To deliver readiness support through GLI CONSULTS and, where you qualify and opt in, financier matching through GLI CAPITAL.

To respond to inquiries you send us and to keep the platform secure.

4. Funder access is consent-based

Funders see anonymised pipeline information by default: sector, country, score band and funding need, with no identifying business details.

A funder can only open your full file after you switch on consent for that funder in your SME workspace. You can withdraw consent at any time, and withdrawal takes effect immediately for future access.

We never sell your data and we do not share it with funders you have not approved.

5. Public verification

The public verification page discloses only the FRICS ID, business name, readiness band, score, sector, country and verification status. Assessment answers, uploaded documents and obligation details are never exposed publicly.

6. AI processing

Your assessment answers are sent to a third-party large-language-model provider to draft your narrative action plan. They are processed for that purpose only and are not used by us to train models.

7. Storage, security and retention

Data is stored in managed cloud infrastructure with row-level access controls, so each account can reach only its own records. Access by our staff is limited to administrators who need it for verification and support.

We keep assessment and registry records for as long as your account is active, and afterwards only as long as needed for legal, audit or dispute purposes. You can ask us to delete your account and associated records.

8. Your rights

You may request a copy of your data, correction of inaccurate data, deletion of your account, or withdrawal of any funder consent. Nigerian users have these rights under the Nigeria Data Protection Act; users elsewhere have equivalent rights under applicable local law.

Send requests to hello@atupa.africa. We respond within 1 business day and resolve requests within 30 days.

9. Cookies

We use only the cookies and local storage needed to keep you signed in and to keep the platform secure. We do not run advertising trackers.

10. Changes

If we materially change how we use your data we will update this page and notify account holders by email before the change takes effect.