Privacy Policy

Data controller

Julie Atenda (Kobeta), Avenue Louise 5, 1050 Brussels, Belgium, CBE 0728.502.167. Privacy contact: legal@kobeta.africa.

Data we process

Account: email address, display name, encrypted password, role.

Business: name, activity type, sector, base currency.

Financial data you enter: transactions, cash collected, receivables, costs, inventory, appointments, customer and supplier contacts.

Messages sent to the copilot and related interactions.

Technical data: security logs, timestamps, audit log.

Purposes and legal bases

Providing the service and your management records (performance of contract).

Securing accounts and tracing sensitive operations (legitimate interest, security obligation).

Sharing data with a financial partner only with your explicit, revocable consent.

Audience measurement, if ever enabled, only with your consent.

Recipients and processors

Hosting and database (Lovable Cloud, Cloudflare), transactional email delivery, and an AI gateway used to extract information entered in the copilot. No data is sold. [TO COMPLETE: named list of processors and data processing agreements (DPA)]

Transfers outside the European Union

Some providers may process data outside the EU under standard contractual clauses or an adequacy decision. [TO COMPLETE: countries and safeguards for each provider]

Retention periods

Account and financial data: for the life of the account, then deletion or anonymisation. Audit logs: [TO COMPLETE: duration, e.g. 5 years]. Partner consent records: for the duration of the consent and its proof.

Your rights

Access, rectification, erasure, restriction, objection, portability and withdrawal of consent at any time, by writing to legal@kobeta.africa. You may lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).

Security

Strict data isolation between businesses, encryption in transit, role-based access control and an audit log of sensitive operations.