Privacy Policy

VOKASH is committed to protecting the confidentiality of your personal data. This policy explains what data we collect, why we collect it, and how we use it.

1. Data Collected

We collect the following types of data:

  • Identification data: first name, last name, email, phone number, address
  • Professional data: company name, RCCM number, business sector
  • Financial data: invoices, receivables, transaction information
  • Technical data: IP address, cookies, connection logs
  • Blockchain data: wallet addresses, transaction hashes

2. Processing Purposes

Your data is used to:

  • Manage your account and access to the platform
  • Process tokenization operations and transactions
  • Verify your identity (KYC/AML)
  • Score debtors
  • Comply with our legal and regulatory obligations
  • Improve our services
  • Send you communications (with your consent)

3. Legal Basis for Processing

We process your data on the following legal bases:

  • Contract execution: necessary to provide our services
  • Legal obligation: KYC/AML, transaction retention
  • Legitimate interest: fraud prevention, service improvement
  • Consent: marketing communications (revocable at any time)

4. Retention Period

  • Account data: duration of relationship + 5 years
  • Transaction data: 10 years (legal obligation)
  • Blockchain data: permanent (blockchain immutability)
  • Cookies: 13 months maximum

5. Data Recipients

Your data may be transmitted to:

  • Technical partners: Vercel (hosting), AWS (infrastructure)
  • Payment providers: Orange Money, Wave
  • Blockchain network: Polygon (public transaction data)
  • Authorities: BCEAO, judicial authorities (upon legal request)

Important note: We never sell your data to third parties.

6. Data Security

We implement robust security measures:

  • Encryption of sensitive data (AES-256)
  • Secure connections (HTTPS/TLS)
  • Two-factor authentication (2FA)
  • Strict access controls
  • Regular security audits
  • Daily backups

7. Your Rights

In accordance with GDPR, you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct your inaccurate data
  • Right to erasure: delete your data (except legal obligations)
  • Right to restriction: limit the processing of your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to processing
  • Right to complain: file a complaint with the data protection authority

To exercise your rights, contact us at privacy@vokash.io

8. Cookies

We use different types of cookies:

  • Essential cookies: necessary for operation (authentication, cart)
  • Analytical cookies: audience measurement (anonymized)
  • Marketing cookies: personalization (with your consent)

You can configure your cookie preferences in your browser.

9. International Transfers

Your data may be hosted on servers located outside the WAEMU zone (AWS, Vercel). We ensure that these transfers are governed by appropriate safeguards (standard contractual clauses).

10. Policy Modifications

We may modify this privacy policy. In case of substantial change, we will inform you by email or notification on the platform.

11. Contact

For any questions regarding the protection of your data:
Email: privacy@vokash.io
Data Protection Officer (DPO): Amédée DERA
Address: Ouagadougou, Burkina Faso

Last updated: January 2026