Legal documents
Privacy policy
SmartCom360 is online business management software for companies. This policy explains what personal data we process, why, who it is entrusted to and what your rights are. It applies to the website, the application and the public catalogues of the companies that use SmartCom360.
1. Who is responsible for your data
SmartCom360 is published by David Rene METOMO and Jean Pierre MAMBINGO (“we”). Responsibilities depend on the data:
- Your account, your subscription and your exchanges with support: we are responsible for them.
- The information a company records in SmartCom360 (its customers, sales, staff): that company is responsible for it. We host and process it on its behalf, following its instructions.
- You are a customer of a company that uses SmartCom360 (an order placed on its catalogue, a WhatsApp conversation): contact that company first. We help it answer you.
- For any question about your data: contact.smartcom.app@gmail.com
2. The data we process
Depending on how you use the service:
- Account: name, email, phone, role, password (stored in a form that cannot be read back), two-factor authentication settings.
- Company: name, tax ID (NIU), trade register number (RCCM), address, logo, business sector, settings.
- Activity recorded by the company: products, sales, stock, invoices, deliveries, after-sales service, customer records (name, phone, address), staff.
- Public catalogue orders: what the visitor enters to place a request (name, phone, delivery address).
- Messages: WhatsApp conversations between a company and its customers when it has linked its number to SmartCom360; messages and attachments sent to support.
- AI assistant: your questions, voice dictation included, and the company data needed to answer them.
- Subscription payment: amount, date, transaction reference, mobile money account number used. We do not keep bank card numbers: they are handled by the payment providers.
- Technical data: IP address, browser and device type, dates and times of sign-in, security logs.
3. Why we use it
Your data is used only to:
- Provide the service covered by your subscription and keep it running.
- Protect accounts: sign-in, verification codes, two-factor authentication, detection of unusual access.
- Send you service messages (codes, alerts, notifications) by email, SMS or WhatsApp.
- Manage the subscription, billing and our legal obligations.
- Answer your support requests.
- Fix incidents and improve reliability, using aggregate statistics.
We do not sell your data, we do not use it for advertising and we do not train any artificial intelligence model with it.
4. AI assistant
The built-in assistant and automatic replies on WhatsApp are optional features. When they are used, the question asked and the company data needed for the answer are sent to an artificial intelligence model provider, through the OpenRouter service.
- An answer produced by AI may contain errors: check it before making a decision.
- Do not enter sensitive information that is not useful to your question.
- A company that turns on automatic replies on WhatsApp informs its own customers.
5. How long we keep it
- Account and company data: as long as the account is open. After it is closed, we delete it at the administrator’s request, subject to what the law requires us to keep.
- Verification codes: a few minutes.
- Technical and security logs: a limited time, as long as needed to detect and understand an incident.
- Billing records: the period required by law.
- Backups: deleted data may remain there for a while before disappearing.
6. Who has access
The following have access to your data, each for their own part:
- Members of your company, according to the role the administrator gave them.
- The publishers of SmartCom360, for support and maintenance. Their actions on a company’s account are recorded.
- Hosting: Hostinger (application) and Neon (database, Europe – London).
- Message delivery: Google (email), Meta (WhatsApp) and, when enabled, an SMS provider.
- Payment: CamPay, Flutterwave or Stripe, depending on the payment method chosen.
- Artificial intelligence: OpenRouter and the model providers it relies on.
These providers receive only what their task requires. We do not disclose your data to anyone else, unless the law or a court decision requires it.
7. Data processed outside Cameroon
The providers listed above are established outside Cameroon, mainly in Europe and the United States. Your data is therefore hosted there or passes through there. We choose providers recognised for their security and limit these transfers to what the service requires.
8. Your rights
Under Cameroonian law on the protection of personal data, you can:
- Obtain a copy of your data and find out how it is used.
- Have inaccurate or incomplete data corrected.
- Ask for your data to be deleted.
- Object to processing or ask for it to be restricted, where the law allows.
- Retrieve your company’s data: the administrator can export it at any time from Settings → Data.
- Refer the matter to the Cameroonian authority in charge of personal data protection.
To exercise these rights, write to contact.smartcom.app@gmail.com stating your name and your company. We may ask you to prove your identity. We answer as soon as possible, and at the latest within the time limit set by law.
9. Security
Communications are encrypted (HTTPS). Passwords are stored in a form that cannot be read back. Each company’s data is kept separate, access depends on each person’s role, sign-ins are logged and two-factor authentication can be turned on (email, SMS or WhatsApp, authenticator app).
No system is infallible. If an incident affects your data, we inform you, and the competent authority where the law requires it. Report any suspicious access to contact.smartcom.app@gmail.com.
11. Changes to this policy
We update this page when the service changes; the date is shown at the top. An important change is announced in the application or by email.