Privacy Policy

1. Data controller

Mahtos Technologies, sole proprietorship, Rue 37 x 26, Médina, Arr. Plateau, Dakar, Sénégal, publisher of the RIIVA platform. Contact: legal@mahtos.online.

2. Data concerned

Account (via Mahtos Solo): identifier, name, e-mail address, country and city, requested roles.

Orders and tickets: name, e-mail, phone, contact channel (e-mail or WhatsApp), name and number of the payment sender, proof of payment (image), QR codes and validation history.

Organizers: organization profile, Mobile Money numbers and beneficiary name, possible link with a Mahtos company, history of service fees and settlements, settlement proofs.

Advertisers, partners and sponsorship: campaign information, application files and attachments.

Technical data: security logs, IP address fingerprints, browser type, strictly necessary cookies (session). Only the data needed for each purpose is collected.

3. Purposes and legal bases

Providing the service (account creation, booking, ticketing, access control): performance of the contract.

Fraud prevention, security, management of unpaid amounts and disputes: legitimate interest and legal obligations.

Invoicing, accounting and compliance: legal obligations.

Service communication (confirmations, requests for information): performance of the contract. Any non-essential marketing or audience measurement relies on your consent.

4. Recipients

The Organizer receives the data of the Attendees of their events (name, contact, tickets) to run the event; they undertake not to use it for other purposes.

RIIVA's technical providers: application hosting (Vercel), database and file storage (Supabase), Mahtos Solo identity service. Authorized Mahtos Technologies staff access the data needed for their mission.

Competent authorities may receive data where the law requires it or to establish or defend rights in case of fraud.

5. Retention periods

Data is kept for as long as necessary for each purpose: account while it is active; orders, tickets and accounting data according to applicable legal obligations; proofs and logs related to security or a dispute for as long as needed to handle them. It is then deleted or anonymized.

6. Your rights

You have the rights of access, rectification, erasure, objection, restriction and, where applicable, portability. You can exercise them by writing to legal@mahtos.online, with reasonable identity verification. You may also contact the competent data protection authority (in Senegal, the Commission de Protection des Données Personnelles).

7. Security

We apply reasonable organizational and technical measures: role-based access control, data-level security policies, private files with short-lived signed links, unguessable order links, logging. No system is infallible; report any vulnerability to legal@mahtos.online.

8. Cookies

RIIVA uses strictly necessary cookies for operation (session, security, language and country preferences). Any non-essential audience tracker will only be set with your consent.

9. Children

The platform is not intended for minors without the consent of a legal representative.

10. Changes

This policy may change; the version and update date are shown at the top of the page. Contact: legal@mahtos.online.