Privacy policy

1. Data controller

The data controller for personal data collected on AfricaDesign is the publisher of the platform, accessible via the contact form.

2. Data we collect

Account data

• full name, email, avatar, password (hashed) or Google OAuth identifier;
• preferred language, role (member, creator, admin), subscription status.

KYC data (creators only)

• full legal name, date of birth, country of residence;
• type and number of identity document, photo of front and back;
• Wave or Orange Money number for payouts.

Payment data

• amount, pack chosen, Moneroo reference, payment date and status.
• We never store your full bank card number — payment is handled by Moneroo.

Usage data

• downloaded files, dates and times;
• technical logs (IP, browser, device) for security purposes;
• contact messages sent via the form.

3. Purposes

• provide the service: account, downloads, subscription, creator payouts;
• verify creator identity (KYC) and combat fraud;
• process payments and issue receipts;
• send transactional emails (welcome, KYC validation, file approval, expiry notice, payout, etc.);
• analyze platform use to improve the service (anonymous statistics);
• comply with legal obligations (accounting, taxation).

4. Legal bases

• Performance of the contract: account, subscription, downloads, payouts.
• Legal obligation: KYC, accounting, anti-fraud.
• Legitimate interest: security, fraud prevention, anonymous statistics.
• Consent: optional cookies, optional newsletter.

5. Recipients

Your data is processed by AfricaDesign and the following technical providers:

• Moneroo — payment processing;
• Cloudflare R2 — encrypted storage of files and KYC documents;
• Hosting provider — application servers and database;
• SMTP provider — sending transactional emails;
• Google — OAuth authentication if you choose this option.

We never sell your data to third parties.

6. Retention

• Account data: as long as your account remains active, then 12 months after deletion;
• KYC data: 5 years after the last transaction (legal obligation);
• Payment data: 10 years (accounting obligation);
• Connection logs: 12 months;
• Contact messages: 3 years.

7. Your rights

In accordance with applicable regulations, you have the right of access, rectification, deletion, portability, opposition, and limitation. You may exercise these rights at any time via the contact form. We respond within 30 days. Your downloaded files and submitted creations remain governed by the contractual licenses already issued, even after deletion of your account.

8. Security

We implement reasonable technical and organizational measures: HTTPS encryption, hashed passwords, KYC documents stored in private buckets, restricted admin access, monitored backups. However, no system is infallible: report any anomaly via the contact form.

9. Cookies

AfricaDesign uses essential cookies for authentication (Laravel session, CSRF protection) and remembering language preference. We do not use advertising or third-party tracking cookies. If we add an analytics tool, your consent will be requested via a banner.

10. Minors

The service is reserved for users aged 18 and over, or for minors with parental authorization. We do not knowingly collect data from children under 13.

11. International transfers

Some technical providers (Cloudflare, Google) may host data outside Africa. These transfers are governed by the standard contractual clauses recognized by the relevant authorities.

12. Contact

For any privacy-related question, contact us via the contact form by mentioning "Personal data" in the subject.