Privacy policy

How Habily collects, uses and protects your personal data.

Last updated: 4 November 2026

This document is under legal review. Items in brackets will be completed before final publication. The French version prevails.

1. Who we are

[Raison sociale] ([Adresse du siège], Dakar, Sénégal) is the controller of the processing described below for the habily.net website and subscription management. Data protection officer: [Nom du délégué à la protection des données] — [E-mail dédié aux données personnelles, ex. dpo@habily.net].

This processing is declared to Senegal's personal data protection commission (CDP): [Numéro de déclaration ou d'autorisation CDP].

2. Data we collect

  • Website visits: technical data needed for operation and security (IP address, browser), with no advertising cookies or third-party analytics.
  • Sign-up: agency name, city, phone and email; administrator's first name, last name, email and mobile number; chosen plan, any promo code, acceptance of the terms.
  • Payment: reference, amount, status and payment method sent by Bictorys (never your full card number).
  • Conversations: messages you send our team on WhatsApp or by email.

3. Why we use it

  • Create and manage your subscription, collect payments and issue invoices (performance of the contract).
  • Send service messages: verification code, access, renewal reminders, payment confirmations (performance of the contract).
  • Keep the website secure and prevent abuse (legitimate interest).
  • Meet our accounting and tax obligations (legal obligation).

4. Recipients and processors

Your data is processed by authorised Habily staff and by our processors, only for the needs of the service: hosting (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA — vercel.com; [Contabo GmbH, Aschauer Straße 32a, 81549 München, Germany — à confirmer, avec la région des serveurs]), payment (Bictorys), WhatsApp messages (Meta Platforms, through the WhatsApp Business API), transactional emails (Resend). We never sell or rent your data.

5. Transfers outside Senegal

Some processors are located outside Senegal (European Union, United States). These transfers are framed in accordance with law no. 2008-12 and CDP authorisations: [transfer basis: CDP authorisation, contractual clauses…].

6. Retention periods

  • Unpaid sign-up: deleted or anonymised after [period, e.g. 6 months].
  • Subscription data: for the whole contract, then [period after the contract ends, e.g. 3 years].
  • Accounting records (invoices, payments): for the legal retention period, i.e. [legal period, e.g. 10 years].

7. Data managed by agencies

Data that agencies enter in Habily about their tenants, landlords, co-owners and prospects is processed by Habily as a processor, on behalf of and on the instructions of each agency, which is the controller. To exercise your rights over this data, contact the agency first; we will help it answer you.

Each agency's data is isolated from other agencies' data, and every important action is recorded in an audit log.

8. Cookies and local storage

The website uses no advertising cookies or third-party analytics. It only keeps in your browser, without sharing them: a promo code from a shared link (30 days) and your sign-up progress (for the session).

9. Your rights

Under law no. 2008-12, you have the right to access, rectify, object to and delete your data. Write to [E-mail dédié aux données personnelles, ex. dpo@habily.net] stating your request; we will reply as soon as possible. You may also contact Senegal's personal data protection commission (CDP).

10. Security

We protect your data with appropriate technical and organisational measures: encrypted connections (HTTPS), encrypted secrets, limited and logged access, one-time verification codes.

A question about this document? Contact us