At Wassa360 (“we”, “our”, “us”), protecting your privacy and your personal data is a priority.
This Privacy Policy describes how we collect, use, share and protect information about you when you use our platform
at wassa360.com, our apps and our related services (together, the “Services”).
1. Data controller
The controller of your data is Wassa360, which operates the management platform for businesses and
service providers in West Africa. For any question about this policy or your personal data,
you can contact us at: [email protected].
2. Data we collect
We collect different types of data depending on how you use our Services:
2.1. Data you provide to us
- Account data: last name, first name, email address, phone number, password.
- Business data: company name, industry, address, logo, opening hours, team.
- Operational data: categories, products, services, orders, invoices, expenses, reports.
- Customer data (of your business): name, contact details, purchase history and preferences you enter for your own customers.
- Payment data: information needed to process subscriptions and transactions through our providers (Wave, etc.).
- Communications: messages sent to our support team (email, WhatsApp).
2.2. Data collected automatically
- Log data: IP address, browser type, operating system, pages visited, timestamps.
- Cookies and similar technologies: session identifiers, language preferences, usage analytics data.
- Usage data: access frequency, features used, aggregated usage statistics.
3. Purposes of processing
We use your data for the following purposes:
- Creating and managing your account and your shop;
- Providing, operating and improving our Services (point of sale, orders, reports, payments, etc.);
- Processing payments and subscription billing;
- Providing customer support and responding to your requests;
- Sending service notifications (invoices, subscription reminders, operational alerts);
- Keeping the platform secure and preventing fraud and abuse;
- Complying with our legal and regulatory obligations;
- Analyzing usage and improving the user experience (aggregated, anonymized statistics).
4. Legal basis for processing
Our processing relies on the following legal bases:
- Performance of the contract between us (terms of service);
- Legal obligation (accounting, fraud prevention, tax obligations);
- Legitimate interest (security, improving the Services, preventing abuse);
- Consent where required (non-essential cookies, marketing communications).
5. Sharing your data
We never sell your personal data. We may share some data with third parties strictly as needed
to operate the Services:
- Payment providers (e.g. Wave) to process transactions and subscriptions;
- Hosting and cloud infrastructure providers that host the platform;
- Communication tools (transactional email, WhatsApp) to send you notifications;
- Competent authorities where required by law, in a judicial investigation, or to enforce our rights.
All of our processors are carefully selected and are contractually bound by confidentiality
and security obligations in line with applicable regulations.
6. Data about your own customers
When you use Wassa360 to run your business, you remain the data controller for the data
of your own customers (customer records, order history, etc.). Wassa360 acts as a data processor
for this data and commits to processing it only according to your instructions and to operate the platform.
7. Delivery riders' data
If you apply as a delivery rider ("Champion") on wassa360.com/livreurs
or in the Wassa360 Rider app, we process the following data:
- Identity: first and last name, date of birth, mobile number verified by SMS, email (optional), city and neighbourhood, languages spoken, stated experience, a photo of you.
- ID document and driving licence: photos or PDFs of your ID (front and back) and licence, their type and number, licence category and expiry dates. ID and licence numbers are stored encrypted.
- Vehicle: type, number plate, make, model, colour, seats, owner, registration document, insurance certificate, roadworthiness test, vehicle photo and their expiry dates.
- Payout and emergency contact: your Wave or Orange Money number for your earnings, name and phone number of a person to contact in an emergency.
Why: to check your identity and minimum age (18, or 21 for a car or a van), make sure you are allowed to drive
the vehicle you declared and that it is insured and roadworthy, keep customers, merchants and riders safe, pay your earnings,
and meet our legal obligations (checks, requests from the authorities). This processing is based on the performance of our
contract with you, our legitimate interest (safety, fraud prevention) and our legal obligations.
Who can see it: only the Wassa360 staff who review rider applications, with personal and logged access.
Documents are only shown through links that expire after a few minutes. They are never published, never sold, never shared
with merchants or customers, and never used by our artificial intelligence tools. During an ongoing delivery, the customer
only sees your first name, your phone number (to reach you) and your location.
How long we keep it:
- Application never sent: uploaded files are deleted after 7 days.
- Rejected application: attached documents are deleted 90 days after the rejection unless you fix your application; the decision history is kept, without the files.
- Active rider: your file is kept while your rider account is active. A renewed document replaces the old one, which is deleted; a rejected renewal is deleted after 90 days.
- After you stop riding: your file is kept for 3 years after your last rider activity (last delivery, last document sent or last decision on your file) to handle a claim or a request from the authorities; its documents are then deleted and its personal data anonymised. The history of your deliveries and paid earnings follows the legal retention period for accounting data (10 years).
- GPS location: only your last location is kept, and it is deleted after 7 days without an update.
Your rights: you can view and correct your file in the app, and exercise all the rights described in the
"Your rights" section (access, rectification, erasure, objection…) by writing to
[email protected]. Erasure may be limited by our legal obligations
(for example for earnings already paid).
8. Data retention
- Account and business data: kept as long as your account is active, then archived for up to 3 years after the account is closed.
- Accounting data and invoices: kept for 10 years in accordance with legal obligations.
- Log data and technical logs: kept for a maximum of 12 months.
- Support data: kept for up to 3 years after the last exchange.
9. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access,
alteration, disclosure or destruction: encrypted communications (HTTPS), password hashing, access control,
regular backups, incident monitoring and restricted data access within our team.
10. Your rights
Under applicable personal data protection regulations, you have the following rights:
- Right of access to your personal data;
- Right to rectification of inaccurate or incomplete data;
- Right to erasure (the “right to be forgotten”), subject to our legal obligations;
- Right to restriction of processing;
- Right to data portability;
- Right to object to processing on legitimate grounds;
- Right to withdraw your consent at any time where processing is based on it;
- Right to lodge a complaint with the competent supervisory authority (in Senegal: the Commission de Protection des Données Personnelles — CDP).
To exercise these rights, contact us at [email protected].
We will respond within one month of receiving your request.
11. Cookies
We use cookies and similar technologies to keep the platform working properly (sign-in session,
language preferences) and to measure audience anonymously. You can set your browser to block
cookies, but this may affect some features of the Services.
12. International transfers
Your data is hosted and processed mainly in secure data centers. Where some of our
providers operate outside your country of residence, we make sure appropriate safeguards
(standard contractual clauses, enhanced security measures) govern these transfers.
13. Minors
Our Services are intended for professionals and adults. We do not knowingly collect data
about minors under 18. If you find that a minor has provided us with data, contact us so that
we can delete it.
14. Changes to this policy
We may update this Privacy Policy to reflect changes to our Services or
to regulations. Any change will be posted on this page with the date of the last update. For
significant changes, we will notify you by email or through a notification in the platform.
15. Contact
For any question, request or complaint about your personal data or this Privacy Policy: