Privacy Protocol & Data Stewardship Policy
Her Scale Lab is a confidential executive sanctuary and commercial scaling ecosystem. We treat founder data, company operational telemetry, revenue benchmarks, and strategic disclosures with institutional custody, sovereign confidentiality, and uncompromising rigor.
100% Sovereign
Zero third-party data brokerage or advertising
KDPA & GDPR
Direct enforceability across African & Global boundaries
House
Absolute non-attribution in executive scale-pods
256-Bit REST
Tokenized PCI-DSS Level 1 payment custody
Core Stewardship Principles
Her Scale Lab functions as an executive peer collective, advisory ecosystem, and commercial launchpad for visionary female founders across the African continent and diaspora. Unlike traditional technology software or ad-driven professional networks, our operating model is predicated on data austerity, explicit purpose-binding, and bilateral trust.
Zero Data Monetization
We never sell, rent, license, or monetize your company financial metrics, investor dialogues, or personal coordinates to recruiters, market researchers, or advertisers.
Absolute ProhibitionBilateral NDA Standard
Every ecosystem tier, diagnostic workshop, and Scale Pod operates beneath a contractual bilateral non-disclosure obligation enforced under the laws of Kenya.
Legally BindingSovereignty & Purge
Founders retain absolute sovereignty over their submitted materials. You may revoke consents, retrieve complete archives, and enforce irrevocable data scrubbing on demand.
Permanent Purge GuaranteeWhat Information We Collect & Maintain
In order to curate bespoke peer pods, facilitate capital readiness evaluations, and provide institutional diagnostic advisory, Her Scale Lab processes three explicit tiers of telemetry:
A · Personal & Executive Coordinates
Encrypted PIIData Attributes in Scope
- Full legal name, executive bio, and verified corporate title
- Official corporate email address, WhatsApp/direct voice line
- Geographical jurisdiction of residence and executive headquarters
- Government-issued identification (only for regulatory KYC and escrow deal participation)
Lawful Processing Basis
- Performance of executive membership agreement
- KDPA Section 30(1)(b) & GDPR Article 6(1)(b)
- Statutory compliance for anti-fraud protocols
B · Operational & Scaling Telemetry
Commercial BenchmarkingData Attributes in Scope
- Annual Recurring Revenue (ARR) brackets and Gross Merchandise Value (GMV)
- Monthly burn dynamics, runway projections, and headcount tiers
- Target growth vector, sectoral alignment (Fintech, Agri, Logistics, Climate, HealthTech)
- Key organizational blockers (talent retention, cross-border expansion, compliance)
Lawful Processing Basis
- Explicit founder consent for advisory triage, cohort matching algorithms, and aggregate non-identifiable industry outcome reports
C · Confidential Dealflow & Cap Table Telemetry
Maximum AirgapData Attributes in Scope
- Pitch decks, financial models, cap table structures, and debt instruments
- Bespoke term sheet offers, lead investor agreements, and allocation targets
- Commercial procurement contracts, pilot terms, and enterprise LOIs
Lawful Processing Basis
- Opt-in founder authorization for bilateral investor introductions
- Released only upon counter-signed Institutional Non-Disclosure commitments
Purpose of Processing & The House Protocol
Executive leadership can be an isolating journey. Her Scale Lab was conceived to furnish an uncompromised emotional and strategic space where founders can analyze operational crises, fundraising challenges, and governance vulnerability without reputational exposure.
◎ The House Sovereign Sanctuary Rule
When participating in HSL Scale Pods, Masterminds, or Diagnostic Clinics, participants are free to use the information received, but neither the identity nor the affiliation of the speaker(s), nor that of any other participant, may be revealed outside the sanctuary session.
Legitimate Processing Activities
- 1 Curated Cohort Matching: Applying operational heuristics to pair founders with non-competing peers of compatible scale ($500K–$5M+ ARR) for maximum psychological safety.
- 2 Advisory Telemetry Triage: Reviewing financial ratios and unit economics strictly to prepare bespoke executive playbooks and strategy sessions with designated EIRs (Executives in Residence).
- 3 Consensual Institutional Dealflow: Presenting anonymized company one-pagers to vetted debt funds, impact allocators, and venture syndicates exclusively after founder countersignature.
Storage, Cryptographic Architecture & Custody
Our data sovereignty architecture utilizes zero-trust boundaries, localized residency protocols, and audited encryption frameworks to protect high-stakes proprietary documentation.
💳 Tokenized Payment Custody
Her Scale Lab uses Paystack for card, bank transfer, and mobile money transactions. HSL servers never intercept, record, or store raw credit/debit card numbers or bank account credentials. All financial authorizations are processed under certified PCI-DSS Level 1 tokenized standards.
PCI-DSS Level 1 Service Provider🌍 Sovereign Data Residency
All relational databases and encrypted document vaults reside within Amazon Web Services (AWS) af-south-1 (Cape Town) and eu-west-1 (Ireland) regional nodes, fulfilling the strict cross-border localization thresholds specified by the Kenya Data Protection Commissioner (ODPC).
AWS African Sovereign Cluster🔐 Cryptographic Isolation
All data in transit is guarded by TLS 1.3 cryptographic transport (256-bit SSL). Telemetry at rest—including cap tables and diagnostic submissions—is protected with AES-256 multi-tenant encryption keys with segregated operational partition schemes.
AES-256 At-Rest Standards👤 Role-Based Access (RBAC)
Only credentialed Sanctuary Stewards bound by personal non-disclosure agreements have scoped access to operational databases. Zero general team members or cohort peers possess unilateral access to your financial archives.
Zero-Trust Internal CustodyThird-Party Integrations & Sub-processors
Her Scale Lab works with a curated list of vetted enterprise sub-processors under rigorous Data Processing Addenda (DPAs). Each provider is audited for security alignment:
| Sub-processor | Function | Data Residency | Compliance Shield |
|---|---|---|---|
| Paystack Payments Ltd | Payment settlement & billing recurring tokens | Lagos, NG / Nairobi, KE | PCI-DSS Tier 1 |
| Amazon Web Services (AWS) | Encrypted cloud compute, vaults, & back-ups | Cape Town, ZA (af-south-1) | ISO 27001 |
| Airtable / Institutional CRM | Member admissions indexing & Pod directories | United States (Standard Contractual Clauses) | SOC 2 Type II |
| Google Workspace / Meet | Concierge advisory sessions & communications | Global Distributed (B2E TLS) | FedRAMP |
Founder Rights under KDPA (2019) & GDPR
As an executive participating in the Her Scale Lab ecosystem, you maintain direct statutory rights regarding the governance of your telemetry:
↓ Right to Portability & Access
You may request a machine-readable export (JSON/CSV) of all financial benchmarks, founder diagnostics, and personal coordinates stored in your record within 14 calendar days.
⊘ Right to Irrevocable Purge
Upon program completion or departure, you may invoke the “Right to Erasure.” All pitch assets, financial metrics, and operational triage notes will be wiped within 30 days.
✎ Right to Rectification
Update quarterly revenue numbers, new capitalization rounds, changes in executive title, or board appointments at any point through the executive concierge portal.
⊘ Right to Restrict Processing
Pause dealflow matching or withdraw your profile from external allocator visibility immediately without terminating your base Scale Pod membership.
Direct Data Protection Officer (DPO) Contact
In compliance with Part IV of the Kenya Data Protection Act and Section 4 of the General Data Protection Regulation, Her Scale Lab has designated a certified Data Protection Officer for direct sovereign escalation.
Office of Data Stewardship
Her Scale Lab Sovereign Legal Counsel
Executive Sanctuary, Riverside Green Suites, Nairobi, Kenya
Registered with Office of the Data Protection Commissioner (ODPC)
Direct Concierge Inquiries
To request a full archive audit or execute a right-to-purge instruction under KDPA Section 40, transmit your verified executive email address to our DPO desk.
Average concierge response time: Under 4 business hours.
Initiate AuditHave questions regarding institutional telemetry or wish to request data purging?
Our DPO and legal stewardship council are on standby to execute formal confidentiality amendments, NDA bilateral executions, or data eradication orders.