Privacy Policy

Effective date: 16 August 2026 · Last updated: 16 August 2026 · Version: 1.1

This Privacy Policy explains how Achète Tout Ici Sarl (trading as Agrimarket Connect) collects, uses, stores, shares, and protects personal data when you use Agrimarket Connect marketplace and retail store services.

1. Who We Are

  • Legal entity: Achète Tout Ici Sarl
  • Brand: Agrimarket Connect
  • Address: Dogbong, Douala, Littoral, Cameroon
  • Support email: helpdesk@acheteici.com

In this Policy, “we,” “us,” and “our” refer to Achète Tout Ici Sarl.

2. Scope of this Policy

This Policy applies to personal data processed through:

  • Agrimarket Connect marketplace services (producer-client transactions),
  • Agrimarket Connect retail store services,
  • related customer support features (including AI-assisted support via Google Gemini through our servers),
  • notification and account security services,
  • connected web interfaces, native iOS and Android applications, and API interactions used to provide those services.

This Policy does not apply to third-party websites or services that we do not control, even where links are provided on the Platform. Native apps and the website share this Policy. A dedicated account-deletion resource for Google Play is at acheteici.com/account-deletion.

3. Categories of Personal Data We Collect

Depending on how you use the Platform, we may collect the following categories of data.

3.1 Account and Identity Data

  • Full name / display name
  • Email address
  • Phone number
  • Account role (e.g., client, producer, admin)
  • Login and authentication metadata

3.2 Profile Data

  • Client profile information (such as first/last name, gender, date of birth)
  • Producer profile information (such as business/individual type, description, certifications, production types, availability, profile status)
  • Profile image and related uploaded media, where provided

3.2.1 Location and Device Permissions

When you tap “use my location” during registration or profile setup we collect approximate or precise GPS coordinates to fill your delivery address. We do not track your location in the background. Camera and photo library access are used only when you choose to upload a profile photo, listing image, identity document, or dispute evidence.

  • GPS / device location (when you request address autofill)
  • Photos and documents you upload (stored with Cloudinary and/or our API)
  • Session tokens on native apps stored in encrypted on-device Preferences (not only browser localStorage)

3.3 Order and Transaction Data

  • Order details (items, quantities, prices, status transitions)
  • Delivery/pickup details and addresses
  • Coupon usage, discount eligibility, and referral-related order events
  • Payment status references and transaction metadata

3.4 Wallet and Withdrawal Data

  • Wallet balances and wallet transaction records
  • Withdrawal request records (amount, status, request dates)
  • Producer payment method details (e.g., provider, account number/name)

3.5 Support, Dispute, and Communication Data

  • Support session messages (including AI assistant (Google Gemini) and human support interactions)
  • Support guest identifiers where guest support is used (e.g., guest email/name)
  • Dispute records and dispute evidence uploads
  • Notification records (in-app and event-triggered notifications)

3.6 Security Data

  • Password hash (not plain-text password)
  • Password reset token and expiry metadata
  • Refresh token hash and expiry metadata
  • OTP request and verification records used for security-sensitive actions
  • Rate-limit and anti-abuse signals

3.7 Device, Technical, and Usage Data

  • IP address and request metadata
  • Browser/device characteristics where available
  • API logs and server diagnostics
  • Session and event timing metadata

3.8 Cookie and Tracking Data

We and our service components may use cookies and similar technologies to:

  • maintain sessions and authentication state,
  • secure account operations,
  • store preferences,
  • improve performance and reliability,
  • understand usage trends and service quality.

See Section 8 for full cookie details.

4. How We Collect Personal Data

We collect data:

  • Directly from you (registration, profile forms, orders, support messages, disputes, uploads).
  • Automatically through technical operation of the Platform (logs, session metadata, security events).
  • From transaction workflows (payment status, order transitions, referral/coupon checks).
  • From internal moderation and compliance workflows (support/dispute/admin actions).

5. Why We Process Personal Data (Purposes)

We process personal data to:

  • create and manage your account and profile,
  • authenticate users and secure access,
  • process marketplace and retail orders,
  • support payment, wallet, and withdrawal operations,
  • validate promotions/coupons/referrals and prevent abuse,
  • provide customer support (including AI-assisted support and agent handover),
  • operate dispute resolution and evidence workflows,
  • send notifications and service communications,
  • monitor, troubleshoot, audit, and improve system performance,
  • comply with legal obligations and enforce platform terms.

6. Legal Bases for Processing

Where required by applicable law, we rely on one or more of the following legal bases:

  • Contractual necessity: to provide services you request (account, orders, support).
  • Legitimate interests: to secure and improve the Platform, prevent fraud, and administer operations.
  • Legal obligation: to comply with legal, regulatory, tax, law-enforcement, or court requirements.
  • Consent: where legally required (for example, certain optional communications or non-essential tracking).

7. Sharing and Disclosure of Personal Data

We may share personal data with:

  • Service providers/processors supporting hosting, infrastructure, messaging, analytics, support tooling, and similar operations.
  • Payment and financial service providers used in transaction or settlement workflows.
  • Professional advisers (legal, accounting, audit) where needed.
  • Authorities and regulators where disclosure is required by law or lawful process.
  • Business transferees in case of merger, restructuring, acquisition, or asset transfer.

We do not sell personal data as “data brokerage” where prohibited by law.

Processors we currently use include Cloudinary (media uploads), Google Maps / Places (address search), OpenStreetMap / Nominatim (map tiles and reverse geocoding), Tranzak (wallet top-up for physical goods), Google Gemini (AI customer support, after in-app consent), and Socket.IO infrastructure for in-app notifications and chat. The public website may load a Google Ads conversion tag. Native iOS and Android store binaries do not include that advertising tag.

8. Cookies and Tracking Technologies

8.1 Types of Cookies/Tracking We May Use

  • Strictly necessary cookies: required for core platform functionality (login/session/security).
  • Functional cookies: remember settings and user experience preferences.
  • Performance/analytics technologies: help us understand usage, reliability, and service quality.
  • Security-related tokens/session storage artifacts: used to protect authenticated workflows.

8.2 Purposes

We use these technologies to:

  • keep users signed in where appropriate,
  • protect against unauthorized access,
  • maintain service continuity and performance,
  • diagnose technical issues,
  • improve product experience.

8.3 Cookie Retention

Cookie/token retention varies by purpose:

  • short-lived session artifacts may expire quickly,
  • authentication/refresh-related tokens may persist for configured periods,
  • analytics/performance artifacts may persist longer depending on configuration.

8.4 Your Choices and Controls

You can manage cookies through your browser/device settings and by clearing stored data. Some Platform features may not work correctly if strictly necessary cookies are disabled.

Where consent is required by law for non-essential tracking, we will request consent before enabling it.

9. International Data Transfers

Your data may be processed in jurisdictions other than your own if service providers or infrastructure are located abroad. Where applicable, we use reasonable safeguards and contractual controls designed to protect personal data during cross-border transfers.

10. Data Retention

We retain personal data for as long as needed to provide services and fulfill the purposes described in this Policy, including legal, security, accounting, and dispute-resolution needs.

Retention periods vary by data category. By example:

  • account and profile records: while account is active and as required post-closure,
  • order/transaction/wallet records: as needed for accounting, audit, and compliance,
  • support/dispute records and evidence: for service quality, legal defense, and operational history,
  • security tokens/OTP/reset artifacts: generally short-lived with expiry controls.

Where feasible, we delete, anonymize, or de-identify data when no longer needed.

11. Data Security

We implement technical and organizational measures designed to protect personal data, including access controls, authentication safeguards, and security monitoring.

No system is completely secure. You should also protect your credentials and notify us immediately if you suspect unauthorized account use.

12. Your Rights

Subject to applicable law, you may have rights to:

  • request access to your personal data,
  • request correction of inaccurate data,
  • request deletion of certain data,
  • object to or restrict certain processing,
  • withdraw consent where processing is based on consent,
  • request portability where legally applicable.

To exercise rights, contact: helpdesk@acheteici.com. If you have an account, you can also delete it in-app from Profile → Security → Delete account, or request deletion on the web at /account-deletion. We may request verification before acting on requests.

13. Children’s Privacy

The Platform is not intended for children below the age required by applicable law to enter binding contracts. We do not knowingly collect personal data from children in violation of applicable law.

If you believe a child has provided personal data improperly, contact us so we can investigate and take appropriate action.

14. Third-Party Links and Services

The Platform may reference third-party services or links. Their privacy practices are governed by their own policies, not this Privacy Policy. We recommend reviewing those policies before interacting with such services.

15. Changes to this Privacy Policy

We may update this Policy from time to time. If changes are material, we will take reasonable steps to notify users (for example, via platform notice or email). Continued use of the Platform after the effective date of changes indicates acceptance of the updated Policy.

16. Contact and Complaints

For privacy questions, requests, or complaints, contact:

You may also raise complaints with relevant competent authorities where permitted by applicable law.