Cookie Policy

This Cookie Policy ("Policy") explains how Equa Finance Ltd. ("Equa Finance", "we", "us", "our") uses cookies and similar tracking technologies on the EQUA Finance platform (the "Platform"). This Policy should be read alongside our Privacy Policy.

By continuing to use the Platform, you consent to the use of cookies as described in this Policy, except where we rely on strictly necessary cookies which do not require consent. You can manage your cookie preferences at any time as described in Section 5.

1. What Are Cookies?

1.1 Definition

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website or use a web application. Cookies are widely used to make websites and applications function properly, improve performance, provide a better user experience, and provide information to the site owners.

1.2 Types of Cookies by Duration

• Session Cookies: Temporary cookies that are stored in your browser's memory only during your browsing session. They are automatically deleted when you close your browser. Session cookies are essential for the Platform to function correctly, such as maintaining your login state as you navigate between pages.
• Persistent Cookies: Cookies that remain on your device for a specified period or until you manually delete them. These cookies are used to remember your preferences and settings across sessions, so you don't have to reconfigure them each time you visit the Platform.

1.3 Types of Cookies by Source

• First-Party Cookies: Cookies set directly by Equa Finance (the domain you are visiting). All cookies described in this Policy are first-party cookies unless otherwise noted.
• Third-Party Cookies: Cookies set by a domain other than the one you are visiting. The Platform uses minimal third-party cookies, limited to those set by trusted service providers as described in Section 3.

2. Cookies We Use

2.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. Without these cookies, the Platform would not work properly. They do not require your consent under applicable data protection law.

Cookie Name	Purpose	Duration	Type
sessionid	Maintains your authenticated session after login. Contains a unique session identifier that links your browser to your server-side session data. Does not contain any personal information directly.	Session (expires on browser close) or up to 2 weeks if "Remember Me" is selected	First-party, HttpOnly, Secure
csrftoken	Cross-Site Request Forgery (CSRF) protection token. Prevents unauthorized third-party websites from performing actions on your behalf. This is a critical security mechanism mandated by Django's security framework.	1 year	First-party, Secure
messages	Stores temporary notification messages (e.g., "Invoice created successfully", "Settings saved") that are displayed to you after an action and then cleared. Part of Django's messaging framework.	Session	First-party, HttpOnly

2.2 Functional / Preference Cookies

These cookies enable the Platform to remember choices you make and provide enhanced, personalized features. While the Platform will function without these cookies, your experience may be degraded.

Cookie / Storage Key	Purpose	Duration	Type
equa-theme	Stores your display theme preference (light or dark mode). Used to apply your selected theme immediately on page load before the full page renders, preventing a "flash" of the wrong theme.	Persistent (until manually changed)	localStorage (first-party)
equa-sidebar	Remembers whether the sidebar navigation panel is expanded or collapsed, so your layout preference persists across page loads.	Persistent (until manually changed)	localStorage (first-party)
equa-table-page-size	Remembers your preferred number of rows displayed in data tables (e.g., 10, 25, 50, 100 rows per page).	Persistent (until manually changed)	localStorage (first-party)
equa-last-org	Stores the slug of the last Organization workspace you accessed, enabling automatic redirection to your most recent workspace on login.	Persistent (until manually changed)	localStorage (first-party)
equa-dashboard-layout	Remembers your dashboard widget arrangement and layout preferences.	Persistent (until manually changed)	localStorage (first-party)

2.3 Performance / Analytics Cookies

These cookies help us understand how the Platform is being used so we can improve its performance and functionality. They collect aggregated, anonymized information about usage patterns.

Cookie / Mechanism	Purpose	Duration	Type
Server-side analytics	We collect anonymous usage analytics on the server side (e.g., page views, feature usage, error rates) without placing additional cookies on your device. This data is used to monitor Platform health, identify performance issues, and understand feature adoption.	Aggregated data retained for 12 months	Server-side (no client cookie)

Note: Equa Finance currently does not use third-party analytics services (such as Google Analytics) that place tracking cookies on your device. If we introduce third-party analytics in the future, this Policy will be updated and your consent will be requested.

2.4 Marketing Cookies

Equa Finance does not currently use marketing or advertising cookies. We do not track you across other websites, build advertising profiles, or serve targeted advertisements. If this changes in the future, this Policy will be updated and your explicit consent will be obtained before any marketing cookies are placed.

3. Third-Party Cookies

3.1 Payment Processor (Paystack)

When you access the billing and payment pages or complete a payment transaction, Paystack (our payment processor) may set cookies on your device to facilitate the payment process, prevent fraud, and comply with payment card industry (PCI) security requirements. These cookies are governed by Paystack's own cookie and privacy policies.

3.2 Font and Icon Providers

The Platform loads fonts and icons from Google Fonts (Material Symbols). When these resources are loaded, Google may receive your IP address and browser information. Google's use of data collected through font serving is governed by Google's Privacy Policy. No tracking cookies are set by this service.

3.3 AI Service Providers

When you use the AI Assistant feature, requests are sent to the configured AI provider (Groq, Google Gemini, OpenAI, or Anthropic). These providers do not set cookies on your device through the Platform. Communication occurs entirely through server-side API calls.

4. Other Tracking Technologies

4.1 Local Storage

In addition to cookies, the Platform uses your browser's localStorage to store certain preferences (as listed in Section 2.2). Unlike cookies, localStorage data is not automatically sent to the server with each request — it is only accessed by JavaScript running on the Platform. localStorage data persists until explicitly cleared by you or by the application.

4.2 Session Storage

The Platform may use sessionStorage to temporarily store data needed during a single browser session (e.g., multi-step form progress, unsaved draft data). sessionStorage is automatically cleared when the browser tab is closed.

4.3 What We Do NOT Use

Equa Finance does not use:

• Web beacons (tracking pixels) for user tracking;
• Browser fingerprinting techniques;
• Flash cookies (Local Shared Objects);
• ETags or cache-based tracking;
• Cross-device tracking;
• Social media tracking plugins;
• Advertising network pixels or tags.

5. Managing Cookies

5.1 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically configure your browser to:

• Block all cookies;
• Block only third-party cookies;
• Delete all cookies when you close the browser;
• Accept all cookies;
• Be notified before a cookie is set.

Common browser cookie settings:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data
• Safari: Preferences > Privacy > Manage Website Data

5.2 Impact of Disabling Cookies

Important: If you disable strictly necessary cookies (particularly sessionid and csrftoken), the Platform will not function. You will be unable to log in, submit forms, or use any authenticated features. If you disable functional cookies or clear localStorage, your display preferences (theme, layout, pagination) will be reset to defaults.

5.3 Clearing Local Storage

To clear Platform preferences stored in localStorage:

• Open your browser's Developer Tools (usually F12 or Ctrl+Shift+I);
• Navigate to the Application or Storage tab;
• Select "Local Storage" and the Platform's domain;
• Delete individual entries or clear all localStorage for the domain.

Alternatively, most browsers allow you to clear all site data (cookies + localStorage + cache) through Settings > Privacy > Clear browsing data.

6. Legal Basis for Cookies

Cookie Category	Legal Basis	Consent Required?
Strictly Necessary	Legitimate interest (Platform operation and security)	No — exempt under NDPA and ePrivacy
Functional / Preference	Consent; Legitimate interest (enhanced user experience)	Recommended but not strictly required (user-initiated preferences)
Performance / Analytics	Consent; Legitimate interest (Platform improvement)	Yes, for third-party analytics (currently not used)
Marketing	Consent	Yes (currently not used)

7. Data Collected via Cookies

7.1 What Cookie Data Contains

Cookies set by the Platform contain only technical identifiers (session IDs, CSRF tokens) and do not contain your name, email address, financial data, or other personal information in readable form. Session data associated with the sessionid cookie is stored securely on the server side, not in the cookie itself.

7.2 Data Sharing via Cookies

Cookie data set by Equa Finance is not shared with third parties. First-party cookies are only sent to Equa Finance's servers. Third-party cookies (limited to payment processing) are only sent to their respective domains.

7.3 Data Retention

Cookie data is retained according to the durations specified in Section 2. Server-side session data associated with expired session cookies is automatically purged within 24 hours of session expiration.

8. Cookie Policy for Mobile Access

When accessing the Platform through a mobile browser, the same cookies described in this Policy apply. Cookie management on mobile devices varies by browser and operating system. Refer to your mobile browser's documentation for instructions on managing cookies.

9. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or applicable law. When we make material changes (such as introducing new cookie categories or third-party cookies), we will:

• Update the "Last Updated" date at the top of this Policy;
• Provide notice via the Platform (e.g., a banner or notification);
• Where required, request your renewed consent for non-essential cookies.

10. Contact Us

If you have questions about our use of cookies or this Cookie Policy, please contact us at:

Equa Finance Ltd.
Email: privacy@equafinance.com
Data Protection Officer: dpo@equafinance.com
Lagos, Nigeria