Privacy Policy

In accordance with Law No. 2017-20 on the Digital Code in the Republic of Benin, and international standards (GDPR), ORIGIN SYSTEMS is committed to protecting the privacy of its users. This Privacy Policy describes how we collect, use, and protect your personal data when you use the Excompta platform.

Data Controller

The data controller is ORIGIN SYSTEMS, an individual enterprise, headquartered in Cotonou, Benin. For any questions regarding your data, contact our Data Protection Officer (DPO) at: support@excompta.com.

Data Collected

We collect only the data necessary for the provision of our services:

• Identification data: first and last name, professional email address, phone number, and organization details.
• Accounting data: invoices, receipts, and financial records you submit via WhatsApp or the platform.
• Connection data: IP address, browser type and operating system, actions performed on the platform.
• Billing data: payment information (managed by our certified providers), subscription and invoice history.

Purposes of Processing

Your data is processed for the following purposes:

• Processing of accounting entries, extraction of data from documents, and generation of financial reports.
• Production of OHADA-compliant financial statements and reports.
• Billing and subscription management.
• Customer support, problem resolution, and security (fraud detection, prevention).

Legal Basis

The processing is based on: contractual execution (Terms of Service), compliance with legal obligations (billing and accounting), and legitimate interest (security, service improvement).

Data Recipients

Your data is never sold. It is shared only with our trusted service providers:

• Hosting: Vercel Inc. (USA) and Supabase (European Union, Frankfurt Region)
• Payments: Certified providers (FedaPay - WAEMU Zone)
• Notifications: Twilio / Brevo

Retention Period

We only keep your data for the period necessary for the purposes for which it was collected, in accordance with the regulations in force:

• Identification data: Up to 3 years from the end of the commercial relationship or the last contact.
• Accounting and billing documents: 10 years, in accordance with OHADA legal requirements.
• Connection and browsing logs: 1 year from the date of collection.
• Anonymized statistics: Kept indefinitely for service improvement.

Your Rights

In accordance with the GDPR and the Beninese Digital Code, you have the following rights over your data:

• Right of access: obtain a copy of your personal data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request the deletion of your personal data.
• Right to data portability: receive your data in a portable format.
• Right to object: object to certain processing of your data.

Google OAuth Data

When you choose to sign in or sign up using your Google account, we access certain data from your Google profile via the Google OAuth 2.0 protocol. We access: your Google account email address, your name (first and last name), and your Google profile picture URL (if available). This data is used solely for creating and authenticating your account, pre-filling your profile name, displaying your profile picture, and sending account-related notifications. Your data is stored in our secure database (Supabase, Frankfurt region) and is never shared with third parties for advertising or profiling purposes. You may unlink your Google account at any time by contacting our support team.

Security

We implement rigorous technical and organizational security measures to protect your data against any unauthorized access, loss or alteration, including encryption in transit and at rest, access controls, and regular security assessments.

Modifications to the Policy

We reserve the right to modify this privacy policy at any time. The modifications will take effect as soon as they are published on the site. We invite you to consult this page regularly to stay informed of any changes.

Contact Us

For any questions regarding this Privacy Policy or our data practices, contact our Data Protection Officer (DPO) at: support@excompta.com.