Data Controller
The data controller is GEMINI AND COMPANY (SARL), the publisher of the website (see the Legal Notice), established in Cotonou (Benin). Dedicated contact for personal data matters: securite@myforja.digital.
Data Collected
We collect: email, name, password (encrypted), registration IP address (anti-fraud), conversation history and generated documents, as well as the payment information necessary to process transactions (via FedaPay).
Purposes
- Provide and secure the service (account, generation of deliverables).
- Manage accounts, quotas and payments.
- Prevent fraud and abuse.
- Measure the effectiveness of our advertising (Meta pixel).
- Measure audience and improve the product, only after your consent.
Legal Bases
- Performance of the contract: account, generation of deliverables, payment.
- Consent: audience measurement / non-essential cookies (refused by default, strict opt-in; withdrawable at any time).
- Legitimate interest: security and fraud prevention.
- Legal obligation: accounting and invoicing.
Processors
Your data may pass through: Supabase (database), Vercel (hosting), Resend (transactional emails), FedaPay (payments), the AI model providers (DeepSeek, Anthropic, OpenAI) for processing requests, Meta Platforms, Inc. (United States) via the Meta advertising pixel to measure our advertising, as well as, only after your explicit consent, PostHog (product audience measurement, EU hosting) and Microsoft Clarity (heatmaps and anonymized usage recordings).
Transfers Outside Benin
Some data is hosted or processed outside Benin (European Union and/or United States) through these processors. These transfers are governed by the contractual commitments of the providers. [Specific safeguards to be confirmed with the APDP.]
Processing by AI Models
The content of your conversations is transmitted to our artificial-intelligence model providers (see Processors) for the sole purpose of generating your deliverables. FORJA does not use this content to train models, or for any purpose other than producing your documents.
Retention
Data is kept only as long as necessary for the purposes described, then deleted or archived:
- Account, conversations and stored data: for the entire lifetime of your account.
- Generated PDF documents ("My documents"): 90 days, then automatically deleted.
- Verification codes (OTP): 10 minutes; password-reset links: 60 minutes.
- Purchased credits: valid for 31 days after purchase.
- Payment and billing data: 10 years, in accordance with accounting obligations (OHADA Uniform Act on accounting law).
- Technical and fraud-prevention data (e.g. sign-up IP address): only as long as strictly necessary for security.
You may request deletion of your account and data at securite@myforja.digital, subject to data we are legally required to retain (in particular accounting records).
Your Rights
You have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to withdraw your consent and to lodge a complaint with the APDP (Personal Data Protection Authority, Benin). To exercise these rights, write to securite@myforja.digital.
Cookies, Advertising Pixel and Audience Measurement
The website uses the strictly necessary cookies required for authentication and the proper functioning of the service.
Only if you accept via the consent banner, three measurement tools may be activated (declining is as easy as accepting, and your choice can be changed at any time):
- Meta advertising pixel (Facebook / Instagram), provided by Meta Platforms, Inc. (United States): measures the effectiveness of our advertising. It may set cookies and transmit certain data (IP address, pages viewed, registration event) to Meta, including outside the European Union, governed by standard contractual clauses. You may also object to it via the ad settings of your Meta account (facebook.com/adpreferences).
- PostHog (EU hosting) : product audience measurement (page views, usage journeys). Helps improve the service. Local storage on the browser side.
- Microsoft Clarity : heatmaps and anonymized usage recordings (sensitive fields such as passwords are automatically masked).
None of these tools is activated before your consent. You may withdraw it at any time: your choice is stored locally on your device, and data collection stops immediately. To exercise this right or for any question, write to securite@myforja.digital.
Last updated: to be completed by the publisher.