Privacy Policy
Last updated [date]
1. Controller
OSD Consulting, [address], Abidjan, Côte d’Ivoire, is responsible for the personal data processed through qbill. We process it under Ivorian Law No. 2013-450 on personal data protection, under the supervision of ARTCI (declaration no. [reference]). Contact: privacy@qbill.dev.
2. Data we collect
Merchants: name, sign-in and security email addresses, phone, company information, verification documents (business registration, representative’s ID, proof of the Wave account), Wave payout numbers. Merchants’ customers: name, email, phone, billing details (company, address, tax ID, country), subscriptions, invoices and payments. Everyone: IP address and request logs.
3. Why we use it
To provide billing and withdrawals, verify merchants’ identity and prevent fraud, send invoices, receipts, codes and account notices, meet our legal obligations, including anti-money-laundering, and improve the Service. We do not sell personal data.
4. Merchants and their customers
For data about a merchant’s customers, the merchant decides what is collected and QBill acts on its behalf. Customers should contact the merchant first; we help the merchant respond.
5. Who we share it with
Wave, for payments and withdrawals; our email provider [provider]; our hosting provider [host]; and authorities where the law requires. Where data leaves Côte d’Ivoire, we apply the safeguards the law requires, including ARTCI authorisation where needed.
6. How long we keep it
Account data, for as long as the account is open. A merchant’s verification information, 10 years after the account is closed, as anti-money-laundering rules require; an unfinished or rejected verification, 12 months. Accounting records and transactions, [10] years. Request logs, 30 days; the activity log, 12 months.
7. Security
Encryption in transit (HTTPS); AES-256-GCM encryption of phone numbers, Wave credentials, webhook and two-factor secrets and verification details; two-factor authentication required for every portal sign-in; a security address and a code for every withdrawal; restricted, logged staff access.
8. Your rights
You can ask to access, correct or delete your data, or object to its use, by writing to privacy@qbill.dev. Some data must be kept for legal reasons. You can also complain to ARTCI.