Privacy policy

What data is processed, for what purposes, with whom it is shared and how to exercise your rights.

Last updated: [TO FILL — publication date]

1.Who processes your data, and in what capacity

This policy describes how Pilotafrik processes personal data in connection with the service.

Two situations must be distinguished, because responsibilities differ:

Merchant account data (email, name, store, subscription): [TO FILL — registered company name] acts as data controller.
Data of the merchant's end customers, imported into the service (name, phone, address, orders): the merchant is the data controller, and Pilotafrik acts merely as a processor, on the merchant's instructions and solely for the purposes of the service.

2.Data processed

The service processes the following categories of data.

Account and identification: email, first and last name, username, password (stored in hashed form), date of last sign-in.
Team: role (manager, closer, courier), assigned country, closing fee per order, activity status.
Imported orders: order number, end customer's name, phone and email, country, city, product and variant, quantity, amount and currency.
Notifications: Telegram conversation identifier, WhatsApp number and notification-service API key, where the member configures them.
Security: sign-in attempts and associated technical fingerprints, used only to limit brute-force attacks.
Billing: subscribed plan, expiry date and subscription status.

3.Purposes and legal bases

Data is processed to provide the service and operate it securely.

Performance of the contract: creating and managing accounts, displaying orders, managing the team, billing.
Legitimate interest: platform security, prevention of fraudulent access, limiting abusive sign-in attempts.
Consent: sending Telegram and WhatsApp notifications, which each member enables and can disable at any time.
Legal obligation: retention of accounting records relating to subscriptions, where applicable.

4.Recipients and sub-processors

Data is neither sold, rented nor transferred to third parties for advertising purposes. It is accessible only to authorised members of the store concerned, according to their role, and to the following technical providers, strictly for the purposes of the service:

Supabase — Database, authentication and server functions
Shopify — Receiving orders via webhook, at the merchant's initiative
Telegram — Sending new-order notifications
CallMeBot — Sending WhatsApp notifications
Lovable — Technical gateway used to route notifications

5.Separation by store and by role

Every request is filtered server-side by row-level security rules: a member only accesses the data of the store they belong to.

Roles further limit access: a closer only sees orders from their assigned country and can only change their application status; only the manager accesses finances, the team and the integrations.

6.Security

The following technical measures are in place:

Encryption of communications in transit (HTTPS/TLS).
Filtering of database access through row-level security rules (RLS).
Cryptographic signature verification of incoming webhooks, to reject inauthentic orders.
Rate limiting of sign-in and PIN validation attempts (5 tries per 15-minute window).
Server secrets (API keys, integration tokens) kept server-side only, never exposed to the browser.
Administration access protected by a signed, time-limited session.

7.Retention periods

Data is retained for as long as necessary for the purposes described above:

Account and store data: for the entire duration of the contractual relationship, then [TO FILL — retention period after closure].
Imported orders: [TO FILL — retention period].
Security logs and sign-in attempts: [TO FILL — period, e.g. 12 months].
Accounting records: for the applicable statutory period.

8.Your rights

You have the right to access, rectify, erase and port your data, and to object to its processing, as well as the right to give instructions on its fate after your death.

These requests are exercised with [TO FILL — dedicated data-protection email]. You will receive a reply within [TO FILL — response time].

If you are the end customer of a merchant using the service, address your request directly to that merchant: they determine how your data is used. We will relay their request in our capacity as processor.

9.Account deletion

You may request the deletion of your account and the associated data by writing to support@pilotafrik.site. Deletion takes effect within [TO FILL — time frame], subject to data we are required to retain under a legal obligation.

10.Changes

This policy may change along with the service. Any substantial change will be communicated to users by email or through an in-app notification before it takes effect.