Privacy Policy

The data controller is [À COMPLÉTER — raison sociale exacte], whose registered office is located at [À COMPLÉTER — adresse du siège social, Cotonou, Bénin].

For any question about your data, you may contact the data protection point of contact at [À COMPLÉTER — email protection des données / DPO].

Account and organisation data

• Identity: first and last name, email address, phone number.
• Authentication data: password (stored encrypted / hashed), two-factor authentication (MFA) factors.
• Business data: organisation name, tax identifiers (IFU), contact details, members’ roles and permissions.

Service usage data

• Commercial and point-of-sale data: products, categories, sales, orders, tables, register sessions, inventory, customers of the establishment.
• Tax data: invoices and receipts certified through the e-MECeF electronic invoicing system of the Directorate-General of Taxes (DGI).

Technical data

• Connection and security data: IP address, access logs, timestamps, device and browser type.
• Preferences: display language and theme.

We process your data for the following purposes, each resting on a legal basis provided by the Digital Code:

• Providing and administering the service (account creation, access, register and invoicing management) — performance of the contract.
• Ensuring certified electronic invoicing and tax compliance (e-MECeF / DGI) — legal obligation.
• Securing the service, preventing fraud and abuse, and logging access — performance of the contract and compliance with the security obligations incumbent on the data controller.
• Managing subscription billing and collection — performance of the contract.
• Responding to your support requests — performance of the contract.
• Improving the service and measuring traffic on our public pages — aggregated statistics, with no cookie and no identifier kept on your device. You may object to this measurement at any time; where you expressly accept it, it rests on your consent.

Your data is accessible to authorised staff of the publisher, within the limits of their duties. We rely on processors who act on our instructions and provide sufficient guarantees:

• Hosting: Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Allemagne).
• Sending of the service's e-mails (address verification, login codes, invitations, due-date reminders, password reset): Resend, Inc. (United States), which processes your e-mail address and the content of these messages.
• Directorate-General of Taxes (DGI) of Benin: transmission of invoicing data required by the e-MECeF system, under a legal obligation.
• Audience measurement: Umami (umami.is), for page-view counting on the public site. This measurement is on by default; it stops as soon as you object to it.

We do not sell your personal data and disclose it to third parties only in cases provided by law or with your consent.

As the hosting infrastructure is located in the European Union, some data is transferred outside Benin. These transfers are framed in accordance with the Digital Code: they rest on the performance of the contract between us and/or on the formalities required with the APDP, and are covered by a processing agreement requiring our host to provide appropriate security and confidentiality guarantees. They are limited to what is necessary to provide the service.

Audience measurement gives rise to a second, separate transfer: traffic data for the public site is processed by our provider Umami, outside Benin. It is limited to page-view counting: no cookie is set, no identifier is kept on your device, and you are not tracked across sites. This measurement is on by default. You may object to it at any time, from the cookie banner or the "Manage cookies" link in the footer: the transfer then stops immediately, and it does not happen at all if you have declined it.

Sending the service's e-mails gives rise to a third transfer: our provider Resend, a company established in the United States, processes your e-mail address and the content of the messages the service sends you on servers located outside Benin. This transfer is necessary for the performance of the contract — without it, neither the verification of your address nor the login codes can reach you — and it is framed like hosting: a processing agreement requiring the provider to provide appropriate security and confidentiality guarantees, and the formalities required with the APDP.

• Account and organisation data: for the duration of the contractual relationship, then deleted or anonymised within a reasonable period after the account is closed.
• Tax and accounting data: retained for the period required by applicable tax and accounting regulations in Benin.
• Security logs: retained for a limited period for evidence and security purposes.

We implement appropriate technical and organisational measures to protect your data: encryption of communications (HTTPS), password hashing, two-factor authentication (MFA), session token rotation, data isolation per organisation, access logging and permission control.

In accordance with the Digital Code, you have the following rights over your personal data:

• Right of access: obtain confirmation that data concerning you is processed and obtain a copy.
• Right of rectification: have inaccurate or incomplete data corrected.
• Right to object: object, on legitimate grounds, to a processing operation.
• Right to erasure: request deletion of your data, within the limits of legal retention obligations.
• Right to restriction of processing in the cases provided by law.
• Right to portability: receive the data you have provided in a structured, commonly used format.

To exercise these rights, write to [À COMPLÉTER — email protection des données / DPO] specifying your request. We respond as soon as possible and, in any event, within the period set by the regulation. Proof of identity may be requested.

If you consider that the processing of your data does not comply with the regulation, you have the right to lodge a complaint with the Autorité de Protection des Données Personnelles (APDP), the supervisory authority for data protection in Bénin.

Address

01 BP 04837 Cotonou, République du Bénin

Phone

(+229) 21 32 57 88

Email

contact@apdp.bj

Websites

https://www.apdp.bj — https://service.apdp.bj

The processing carried out is subject to the formalities required with the APDP. Reference: [À COMPLÉTER — n° de récépissé APDP, ou « déclaration en cours »].

The service is intended for professionals and is not aimed at minors. We do not knowingly collect data concerning minors.

This policy may be updated to reflect legal or service changes. The last-updated date appears at the top of the page. In the event of a substantial change, we will inform you by an appropriate means.