Privacy policy · Automakion

Last updated: (information being finalized)

This policy explains how Automakion ("we") collects, uses, retains and protects your personal data when you use the site `automakion.vercel.app` (future `automakion.com`), create an account, purchase a product or a training course, or contact us.

It has been drafted to comply with:

Beninese Law No. 2009-09 of 22 May 2009 on the protection of personal data, as well as the Code du numérique (Law No. 2017-20) and the supervision of the APDP (Autorité de Protection des Données Personnelles du Bénin) ;
the General Data Protection Regulation (GDPR, EU Regulation 2016/679), applicable where persons located in the European Union use the Site.

1. Controller

The controller of the data processing is the publisher of the Site:

Identity: (information being finalized)
Address: (information being finalized)
Email (exercise of rights, personal data questions): contact@automakion.com

2. Data we collect

| Data category | Examples | Source |

|---|---|---|

| Account data | name / pseudonym, email address, password (stored in encrypted/hashed form), role (customer, student, admin) | Provided by you at sign-up |

| Profile data | name, email, preferences | Provided by you |

| Order data | name, email, phone number (required for mobile money payment), products/training courses purchased, amount, date | Provided by you at the time of purchase |

| Digital delivery data (ebooks) | personal download token, number and date of the last download (no IP address), date the delivery email was sent, proof of consent (date, version of the Terms of Sale) | Generated when an ebook is purchased |

| Payment data | transaction status and reference. We do not store your full bank details: payment is processed by our provider FedaPay | Via FedaPay |

| Technical session data | authentication session cookie, theme preference (light/dark) stored locally in your browser | Generated by the Site |

| Content of exchanges | messages sent to the AI assistant, support requests, content you submit | Provided by you |

3. Purposes and legal bases for processing

| Purpose | Legal basis (GDPR) | Equivalent under Beninese law |

|---|---|---|

| Create and manage your account, authenticate you | Performance of the contract (art. 6.1.b) | Performance of a contract |

| Process your orders for products and training courses, manage access to the student area | Performance of the contract (art. 6.1.b) | Performance of a contract |

| Collect payment via FedaPay | Performance of the contract (art. 6.1.b) | Performance of a contract |

| Send transactional emails (order confirmation, training course access, password reset) | Performance of the contract (art. 6.1.b) | Performance of a contract |

| Deliver purchased ebooks (personal download link, download log) and keep proof of the express consent and of its confirmation by email | Performance of the contract (art. 6.1.b) and legitimate interest (art. 6.1.f) for the proof | Performance of a contract / legitimate interest |

| Provide the site's AI assistant (visitor chat) | Performance of the contract or legitimate interest (art. 6.1.f) | Legitimate interest / contract |

| Generate blog articles and their cover images (AI writer + AI illustrations), based on a topic provided by the admin only | Legitimate interest (art. 6.1.f) | Legitimate interest |

| Respond to your support requests | Legitimate interest (art. 6.1.f) | Legitimate interest |

| Comply with our legal obligations (accounting, tax) | Legal obligation (art. 6.1.c) | Legal obligation |

| Secure the Site, prevent fraud | Legitimate interest (art. 6.1.f) | Legitimate interest |

| (Where applicable) send you marketing communications / newsletter | Consent (art. 6.1.a) | Consent |

4. Processors and data recipients

We use the following providers, which act as processors and process the data on our behalf, in accordance with our instructions:

|---|---|---|---|

| Supabase | Database + authentication + private file storage (ebooks) | Account, profile, orders | Hosting according to the project region ((information being finalized)) |

| DeepSeek | Writing of blog articles | Only the article topic provided by the admin: no personal data of the visitor / customer | Outside the EU / outside UEMOA ((information being finalized)) |

| Fal.ai (Flux) | Generation of article cover images | Only the article topic / prompt provided by the admin: no personal data of the visitor / customer | United States (outside the EU / outside UEMOA) |

We never sell your personal data. We only pass it on to third parties:

to the processors listed above, strictly to the extent necessary ;
where the law requires it (judicial order, legal obligation).

5. Data transfers outside the EU / outside UEMOA

Several of our processors (Vercel, Resend, Anthropic, and possibly Supabase depending on the region) are located in the United States. When you use the Site, certain data may therefore be transferred outside Benin, outside the UEMOA zone and outside the European Union.

The providers linked to the blog (DeepSeek for the writing, Fal.ai for the cover images) are also located outside the EU / outside UEMOA, but they process only an article topic provided by the admin: no personal data of any visitor or customer is transmitted to them.

To frame these transfers, we rely on:

the standard contractual clauses (SCCs) incorporated into the contracts of these providers (a mechanism recognised by the GDPR for transfers outside the EU) ;
the security and confidentiality safeguards provided by each provider.

If you are a person located in the EU, you may ask us for additional information about these safeguards at the address indicated in section 1.

6. Retention periods

| Data | Retention period |

|---|---|

| Account / profile data | For as long as the account is active, then deletion or anonymisation within a reasonable period after the account is closed (e.g. (information being finalized)) |

| Order / invoicing data | Retained for the statutory retention period for accounting records ((information being finalized)) |

| Ebook download log (counter, last date) | Kept for as long as the ebook remains available in the catalogue, then deleted or anonymised (information being finalized) |

| Access to training courses | For the access period announced at the time of purchase (see Terms of Sale) |

| Transactional emails (logs) | (information being finalized) |

| Exchanges with the AI assistant / support | (information being finalized) |

| Authentication session cookie | Duration of the session / until log-out |

7. Your rights

In accordance with the GDPR and Beninese Law No. 2009-09, you have the following rights over your data:

Right of access: to know what data we hold about you ;
Right of rectification: to correct inaccurate or incomplete data ;
Right to erasure ("right to be forgotten"): to request the deletion of your data, subject to our legal retention obligations ;
Right to object: to object to processing based on legitimate interest ;
Right to restriction of processing ;
Right to portability: to obtain your data in a structured, machine-readable format ;
Right to withdraw your consent at any time (where the processing is based on consent), without retroactive effect.

How to exercise your rights: send your request to contact@automakion.com. We may ask you to prove your identity. We will reply within one month (extendable in the case of a complex request).

Right to lodge a complaint:

If you are in Benin: you may refer the matter to the APDP (Autorité de Protection des Données Personnelles): https://apdp.bj.
If you are in the EU: you may refer the matter to the supervisory authority of your country (in France, the CNIL: https://www.cnil.fr).

8. Security

We implement reasonable technical and organisational measures to protect your data:

encryption of communications (HTTPS) ;
passwords stored in hashed form (managed by Supabase Auth) ;
access to data restricted through access controls (RLS / roles) ;
use of recognised providers for payment and hosting.

As no system is infallible, we cannot guarantee absolute security. In the event of a data breach likely to create a risk to your rights, we will take the required measures and carry out the legal notifications (APDP and/or the competent EU authority, and informing the data subjects where applicable).

9. Minors

The Site is not intended for persons under (information being finalized). We do not knowingly collect data concerning minors without the consent of the holders of parental authority.

10. Changes to this policy

We may update this policy. Any substantial change will be indicated on the Site. The date of the last update appears at the top of the document.

11. Contact

For any question relating to your personal data: contact@automakion.com · (information being finalized).