Privacy policy
Your data belongs to you. This page transparently explains what we collect, why, and how you can exercise your rights.
Last updated: 26 août 2026
1. Who we are
SokoDesk is a multitenant SaaS platform published by Nkaka Jefkin, an entrepreneur based in Douala, Cameroun. We provide an online store, order management and Mobile Money payment solution for African WhatsApp sellers.
For any question regarding your personal data, you can contact us at contact@sokodesk.com or by WhatsApp at +237691562759. We commit to reply within 72 hours maximum.
2. Data we collect
We limit collection to what is strictly necessary for the service to work. Concretely, this includes:
- Seller account data: name, email, WhatsApp number, password (Argon2id hashed), optional profile photo.
- Business data: shop name, slug, category, city, description, logo, cover, Mobile Money number.
- Product data: name, description, price, photos, variants, stock.
- Seller's customer data: name, phone, city, balance due, purchase history.
- Payment data: Mobile Money transaction references, amounts, status.
- Technical data: IP address, user agent, audit logs, session cookies.
3. How we use your data
Your data is exclusively used to:
- Provide the service: create and host your online store, process orders and payments.
- Communicate with you: technical support, order notifications, stock alerts.
- Improve the product: analyze usage in aggregated and anonymized form, identify bugs.
- Secure the platform: detect fraud, prevent abuse, maintain an audit log.
- Billing: generate your subscription receipts, track payments.
We never use your data for targeted advertising, sale to third parties, or training of external AI models.
4. Legal basis
In accordance with the principles of the European GDPR and Cameroonian Law No. 2010/012 on cybersecurity and cybercrime, we process your data on the following legal bases:
- Contract performance: processing your orders, payments and invoices.
- Legitimate interest: security, fraud prevention, service improvement.
- Legal obligation: retention of invoices and tax logs.
- Consent: non-essential cookies, marketing communications.
6. Data retention
We retain your data as long as your account is active, plus the following legal periods:
- Invoices and transactions: 10 years (Cameroonian tax obligation).
- Security audit logs: 1 year.
- Inactive account data: 24 months after last login, then deletion.
- Contact requests: 12 months, then deletion.
You can request early deletion of your account at any time (see section 8). Invoices will however be retained for legal obligation.
7. Security
We apply the following technical and organizational measures to protect your data:
- TLS 1.3 (HTTPS) encryption on all pages and APIs.
- Passwords hashed with Argon2id (never in clear).
- CSRF protection on all forms.
- Complete audit log of all sensitive actions.
- Daily encrypted backups, 30-day retention.
- Two-factor authentication (TOTP) for administrators.
- Security headers: CSP, HSTS, X-Frame-Options, X-Content-Type-Options.
- Rate limiting on sensitive endpoints (login, contact).
In case of confirmed data breach, we commit to notify you within 72 hours, in accordance with the GDPR.
More details on our Security and Trust page. See Security page →
8. Your rights
In accordance with the GDPR, you have the following rights over your data:
- Right of access: know what data we hold about you.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure: delete your account and associated data.
- Right to portability: export your data as CSV/JSON.
- Right to object: object to processing for legitimate reason.
- Right to restriction: freeze processing temporarily.
To exercise these rights, write to us at contact@sokodesk.com with "GDPR Request" in the subject. We will reply within 30 days maximum. You can also file a complaint with the data protection authority of your country.
10. Contact
For any question regarding this policy or your data: