1. Data controller
FobizGrowth SARL, BP 0000, Akwa, Douala, Cameroun (provisoire), is the controller of the processing described here. For any question about your data: [email protected].
This policy covers the FobizGrowth website and the FobizGrowth platform. It is written in accordance with Cameroonian law n° 2024/017 of 23 December 2024 on personal data protection and, for people located in the European Union, the General Data Protection Regulation (GDPR).
2. Data we process
| Category | Data | Source |
|---|---|---|
| User account | Full name, work email, password (stored only as a bcrypt hash), role, last sign-in date | You, at registration or by invitation |
| Company workspace | Workspace name and ID, assessed companies (name, sector), company size | You and your team |
| Assessments | Questionnaire answers, computed scores | You and your team |
| Billing and services | Plan, invoices, service orders, payment method (masked mobile-money number or card ending) | You, our payment providers |
| Security | Audit log of actions on the platform (passwords and tokens are always masked), session tokens (stored hashed) | Generated by the platform |
| Contact | Name, email, company and message you send us | You, through the contact form |
The application does not record your IP address. Our host’s technical logs may however keep it for security purposes, for a limited time.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create and manage your account and workspace, authenticate you | Performance of the contract (terms of use) |
| Run assessments and compute scores | Performance of the contract |
| Bill subscriptions and services, collect payments | Performance of the contract; accounting and tax obligations |
| Secure the platform, trace actions, prevent fraud | Legitimate interest |
| Answer your contact and quote requests | Legitimate interest or pre-contractual steps |
We do not sell your data, do not run targeted advertising and do not use any third-party audience measurement tool.
4. Recipients
- Members of your workspace, according to the role the workspace owner gives them.
- Authorised staff of FobizGrowth SARL (support, experts assigned to a mission you ordered, platform administration).
- Our technical processors: the host Hébergeur à confirmer (provisoire).
- The payment providers you use (banks, mobile-money operators).
- Authorities, where the law requires it.
Each workspace’s data is isolated: no other customer company can access it.
5. Hosting location and transfers
Your data is hosted in Union européenne (provisoire). Should it be transferred outside that country, the transfer would be covered by the safeguards the applicable law provides (appropriate contractual clauses in particular).
6. Retention periods
| Data | Period |
|---|---|
| Account, workspace and assessments | For the life of the account, then 3 ans after it is closed |
| Invoices and accounting records | 10 years, under OHADA accounting law |
| Audit log | 1 an |
| Session tokens | 15 minutes (access) and 7 days (renewal); revoked on sign-out |
| Invitations | 7 days, the link’s validity |
| Contact requests | 3 years from the last exchange |
7. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing and, for data you provided, to data portability. You may also set instructions for what happens to your data after your death.
To exercise these rights, write to [email protected] describing your request. We answer within one month. We may ask for proof of identity where there is reasonable doubt.
You may lodge a complaint with the competent data protection authority in Cameroon and, if you live in the European Union, with your country’s supervisory authority.
8. Security
- Passwords hashed with bcrypt; never stored or displayed in clear.
- Short-lived session tokens, renewed on every use and stored hashed.
- Strict separation of data between customer workspaces.
- Session cookies unreadable by page JavaScript (httpOnly).
- Encrypted connections (HTTPS).
9. Minors
The platform is meant for companies and their staff. It is not intended for people under 18.
10. Changes
We may update this policy. The date of the last update is shown at the top of the page; we will tell you about any significant change.
A question about your data?
Write to us and we will answer within one month.