1. Data controller
The controller of the personal data collected via Koverit is Arafat YAYA, publisher based in Douala, Cameroon. Contact: support@koveritapp.com
2. Data collected
As part of your use of Koverit, we collect the following categories of data:
- Identification data : full name, email address, phone number
- Company data : company name, NIU, trade register
- Financial data : invoice amounts, payment statuses, transaction history
- Connection data : access logs, IP addresses, session cookies
- Notification data (optional) : WhatsApp number and timestamp of your consent, only if you turn on WhatsApp notifications
- Your customers' data : names, contact details and invoices you enter yourself; you remain responsible for them, Koverit processes them on your behalf
3. Purposes of processing
Your data is used to:
- Provide the invoicing and payment tracking service
- Send transactional notifications (payment confirmations, reminders, due date alerts) by email and prepare the WhatsApp messages you send from your own number
- Alert you on WhatsApp (reminders ready, payment declared, subscription due) if you have agreed: these messages never go to your customers and you can unsubscribe at any time (Settings or reply STOP)
- Improve the service's features and performance
- Ensure security and fraud prevention
4. Legal basis
The processing of your data is based on the performance of the contract formed by the Terms of Service you accepted when signing up to Koverit.
5. Retention period
Your data is kept for as long as your account is active, then for 3 years after your subscription ends, in accordance with applicable legal obligations. After that period, your data is permanently deleted.
6. Data sharing
Koverit may share some of your data with the following technical providers, strictly within the scope of delivering the service:
- Supabase — database hosting (United States)
- Resend — transactional email delivery (United States)
- Meta (WhatsApp Business) — delivery of WhatsApp notifications only to members who have given their consent (United States / Ireland)
- NotchPay — processing of Koverit subscription payments, where applicable (Cameroon / Africa)
None of your data is ever sold to third parties.
7. Your rights
In accordance with applicable regulations, you have the following rights:
- Right to access your personal data
- Right to rectification in case of inaccuracy
- Right to erasure — exercise it directly via Settings → Delete my account
For any request regarding your rights: support@koveritapp.com
8. Security
Koverit implements appropriate technical and organizational measures to protect your data: SSL/TLS encryption of communications, access restricted by authentication, and Row Level Security policies in Supabase. Only you and the members of your organization, according to their role, have access to your data.