Privacy policy

1. Who we are

EKORA ([company name to be completed], [legal form to be completed], RCCM [to be completed], registered office: [address to be completed], Libreville, Gabon) publishes this website and provides a platform that lets organisations talk to their customers on WhatsApp, through Meta's WhatsApp Business Platform (Cloud API).

For any question about your data: confidentialite@ekora.africa.

2. Our role depending on the data

• Website visitors and people who contact us: EKORA is the data controller.
• EKORA customers (businesses, institutions, developers): EKORA is the controller for account, billing and support data.
• People who exchange WhatsApp messages with an EKORA customer (for example a shop's customers or an institution's users): the organisation messaging you is the controller. EKORA acts as a processor, only on its instructions and to provide the service.

If you receive messages from an organisation that uses EKORA, please address your requests to that organisation first. You can also write to us: we will forward your request and help them answer it.

3. Data we process

• Contact form: name, company, WhatsApp number, email address and message if you provide them, the needs you tick, date of the request.
• Customer accounts: users' identity and contact details, organisation, login credentials (passwords stored with irreversible hashing), API keys, settings, billing and payment history.
• WhatsApp messages processed for our customers: phone number and WhatsApp profile name, content of messages and media exchanged, timestamps, delivery statuses (sent, delivered, read), message templates used.
• AI agents: content supplied by the customer to train the agent (catalogue, prices, opening hours, FAQ) and the conversations handled by the agent.
• Technical data: IP address, browser type, security and error logs, kept to secure the service.

We do not ask for, and do not wish to receive, sensitive data (health, opinions, full banking details, passwords) via WhatsApp or the form.

4. Why we use it

• To answer your requests and send you a proposal (basis: your request and the consent given in the form).
• To provide the service to our customers: sending and receiving messages, AI agents, notifications, delivery log (basis: performance of the contract).
• To invoice, collect payments and keep accounts (basis: contract and legal obligations).
• To ensure security, prevent fraud and abuse, and comply with Meta's rules (basis: legitimate interest and contractual obligations towards Meta).
• To answer requests from authorities where the law requires it.

We do not sell your data. We do not use it for advertising. We do not send promotional WhatsApp messages without prior consent.

5. Artificial intelligence

When a customer enables an AI agent, conversation content and the customer's knowledge base are sent to an AI model provider ([provider to be completed]) to generate replies. This processing is limited to providing the service.

We select providers that contractually commit not to use this content to train their models [to be confirmed when the provider is chosen]. Agents are configured to introduce themselves as automated assistants and to hand over to a person.

6. Recipients and processors

• Meta Platforms (WhatsApp Business Platform): carrying and processing WhatsApp messages, under the WhatsApp Business terms and data processing terms.
• Hosting of the platform and website: [host to be completed].
• AI model provider: [to be completed].
• Email delivery: [SMTP provider to be completed].
• Payment: [Bamboo Pay / mobile money operators, to be confirmed]. EKORA does not store payment card numbers.

Each provider only accesses the data it needs for its task and is bound by confidentiality and security obligations.

7. Transfers outside Gabon

Some providers, including Meta, process data on servers located outside Gabon. These transfers are covered by the contractual safeguards of those providers and carried out in line with applicable Gabonese regulations.

8. Retention periods

• Contact requests that did not lead to a contract: 3 years after the last exchange [to be confirmed].
• Account data: for the duration of the contract, then 3 years [to be confirmed].
• Content of WhatsApp messages processed for a customer: [30 days, to be confirmed] unless the customer instructs otherwise, then deleted.
• Delivery status log and per-message billing data: [12 months, to be confirmed].
• Accounting records: 10 years, in line with OHADA accounting rules.
• Technical security logs: [6 months, to be confirmed].

9. Security

Encrypted connections (HTTPS/TLS), access restricted to staff who need it, secrets and keys stored outside the code, access logging, backups, regular updates. Details are on the Security page.

10. Cookies

The website uses no advertising cookies, no audience measurement tool and no third-party scripts. Fonts are hosted on our own servers: your browser contacts no external service when you visit the site. If this changes, this policy will be updated and your consent requested where the law requires it.

11. Your rights

Under Gabonese Law No. 001/2011 of 25 September 2011 on the protection of personal data, as amended, you have the right to access, correct, object to and delete your data.

To exercise these rights, write to confidentialite@ekora.africa describing your request; proof of identity may be requested. The deletion procedure is described on the Data deletion page. We answer within 30 days.

You may also lodge a complaint with Gabon's National Commission for the Protection of Personal Data (CNPDCP).

To stop receiving WhatsApp messages from an organisation, ask it directly (for example by replying “STOP”) or block its number in WhatsApp.

12. Minors

Our services are intended for organisations and professionals. They are not intended for people under 18.

13. Changes

We may update this policy. The date of the last update is shown at the top of the page; customers are informed in advance of any significant change.