ANBU
··

Privacy Policy

Last updated: February 2026

Who We Are

ANBU (Archives Nationales du Burundi) is a digital archive platform operated by MBUYU, a US-registered 501(c)(3) nonprofit organization. Our mission is to digitize, preserve, and provide public access to Burundi's national archival heritage, in partnership with ABADBU (Association of Librarians, Archivists and Recordkeepers of Burundi).

Information We Collect

Information You Provide

  • Account registration: name, email address, and nationality/residency for citizen access verification.
  • Citizen applications: name, date of birth, province, ID document information for verification.
  • Payment information: processed by Stripe. ANBU does not store credit card numbers.
  • Correspondence: messages sent through contact forms or support requests.

Information Collected Automatically

  • IP address, browser type, device identifiers, operating system.
  • Pages visited, timestamps, referral URLs.
  • Search queries within the archive (anonymized for analytics).

How We Use Your Information

  • To provide and maintain the ANBU platform.
  • To verify eligibility for access tiers (citizen verification, researcher credentialing).
  • To process subscription payments for researcher access.
  • To communicate about your account or research requests.
  • To improve the platform through anonymized analytics.
  • To comply with US nonprofit reporting obligations.

We will never sell your personal information. We do not run advertisements.

Third-Party Services

ANBU uses the following third-party services to operate the platform:

  • Supabase — authentication and database hosting.
  • Stripe — payment processing (PCI-DSS compliant).
  • Backblaze B2 / Cloudflare — document image storage and content delivery.
  • Vercel — website hosting.

We do not sell, rent, or trade personal information to any third party.

Cookies

  • Essential cookies: authentication session, security tokens.
  • Functional cookies: language preference (English/French/Kirundi).

We do not use third-party advertising or tracking cookies.

Data Retention

  • Account data is retained while your account is active. Request deletion by contacting us.
  • Payment records are retained for 7 years per US nonprofit tax requirements.
  • Server logs are retained for 12 months, then anonymized or deleted.

Data Security

We protect your data with encryption in transit (TLS/HTTPS), encryption at rest, and role-based access controls. In the event of a confirmed data breach, we will notify affected users within 72 hours.

Your Rights

You may:

  • Request a copy of your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal retention obligations).
  • Withdraw consent for optional processing at any time.

Archival exception: Deletion requests do not apply to historical archival content. These are preserved for their cultural and historical value.

Children's Privacy

ANBU does not knowingly collect personal information from children under 13. Public access (watermarked previews, no account required) is available without any personal data collection.

International Users

ANBU is hosted in the United States. By using the platform, you consent to the transfer of data to the US. We apply equivalent privacy protections to all users regardless of location.

Changes to This Policy

Material changes will be communicated via email to registered users and posted on the platform. Continued use after changes constitutes acceptance.

Contact

For privacy inquiries, contact us at privacy@mbuyu.org.