Privacy policy

1. Introduction and data controller

This Privacy policy explains how Kiyanza, whose registered office is located in Douala, Cameroon, reachable at 696370479 (“KIYANZA”, “we”), as data controller, collects, uses and protects the personal data of users (“you”) of the KIYANZA platform.

It applies to anyone who creates an account or uses the Service, whether they signed up by email or through Google/Facebook.

2. Data we collect

Account data

First name, last name, email address, phone number (optional), password (stored in encrypted form, never in plain text) and, for accounts created through Google or Facebook, the identifier provided by that service.

Company data

When your account is attached to a company: company name, billing information, and the role and access level of associated users.

Campaign data and content

Marketing campaign information, distribution channels, uploaded media and visuals, proof of execution of field services, and conversations with the intelligent assistant.

Connected social account data

If you link a Facebook/Instagram account to run digital campaigns, we keep (in encrypted form) the access tokens required for this integration, as well as the identifiers of the linked pages/accounts.

Technical data

IP address, connection and activity logs, device and browser type, for security purposes and to keep the Service running properly.

3. How we collect this data

• directly, when you create an account, fill in a form or use the Service;
• through Google or Facebook, when you choose to sign in with one of these accounts — we only receive the information you authorise (identifier, email, name) and never receive your Google/Facebook password;
• automatically, as you browse the Service (technical data, cookies — see the dedicated section).

4. Why we use your data

• to provide, operate and secure the Service;
• to create and authenticate your account, including through Google/Facebook;
• to manage your marketing campaigns and publish them on your connected social accounts;
• to send you service-related communications (password reset emails, notifications, task reminders);
• to generate recommendations and simulations through our intelligent assistant;
• to keep the Service secure and prevent fraud or abuse;
• to meet our legal and regulatory obligations.

5. Legal basis for processing

Depending on the case, our processing is based on:

• the performance of the contract between us (providing the Service you signed up for);
• our legitimate interest (security, improving the Service, fraud prevention);
• your consent, in particular for signing in with Google/Facebook and for non-essential communications (e.g. newsletter);
• compliance with a legal obligation applicable to KIYANZA.

6. Who we share your data with

We never sell your personal data. It may be shared, only to the extent strictly necessary, with:

• our technical processors: application and database hosting provider, media storage provider, transactional email provider;
• Google and Meta (Facebook/Instagram), strictly for authentication and, if you enable it, for running your digital campaigns on your own accounts;
• other users in your company, within the limits of their role and access level;
• any competent authority, where required by law.

7. Data transfers outside your country

Some of our providers (hosting, storage, email delivery, Google/Meta authentication providers) may process data outside your country of residence. Where this is the case, we ensure that such transfers are covered by appropriate safeguards (standard contractual clauses or equivalent).

8. Retention period

Your account data is kept for as long as your account is active, then archived or deleted within a reasonable period after it is closed, subject to retention periods required by law (for example for accounting purposes). Technical logs are kept for a limited period necessary for the security of the Service.

9. Security of your data

We implement appropriate technical and organisational measures to protect your data: passwords never stored in plain text, encryption of access tokens for connected social accounts, encrypted communications (HTTPS), and internal access restricted on a least-privilege basis.

10. Cookies and trackers

The Service uses cookies that are strictly necessary for it to work (keeping you signed in, security). Audience measurement or personalisation cookies may be used with your consent, which you can withdraw at any time. For more details, see our Cookies page once it is available, or contact us.

11. Your rights

In accordance with applicable data protection regulations (including the GDPR if you live in the European Union), you have the following rights:

• the right to access your data;
• the right to rectify inaccurate data;
• the right to erasure (“right to be forgotten”);
• the right to data portability;
• the right to object to and restrict certain processing;
• the right to withdraw your consent at any time, where processing is based on it.

To exercise these rights, contact us at the address given in the “Contact” section. You also have the right to lodge a complaint with the competent data protection authority (competent supervisory authority — APDP).

12. Minors

The Service is intended for professionals and is not intended for minors. We do not knowingly collect data about minors.

13. Changes to this policy

We may update this Privacy policy, in particular to reflect changes to the Service or to regulations. Any material change will be notified to you before it takes effect.

14. Contact and complaints

For any question about this Policy or to exercise your rights, contact us at: contact@kiyanza.com.