1. Introduction

Welcome to Mboa.link. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our link-in-bio platform.

This policy complies with the General Data Protection Regulation (GDPR/DSGVO), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller

Mboa.link is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us using the information provided at the end of this document.

3. Data We Collect

We collect and process the following categories of personal data:

Account Information: Name, email address, username, and profile picture when you create an account
Profile Content: Links, products, services, testimonials, and other content you add to your profile
Payment Information: Mobile money numbers (MTN MoMo, Orange Money) that you choose to display publicly
Usage Data: IP address, browser type, device information, pages visited, and interaction data
Analytics Data: Geographic location (country/region), referral sources, and click statistics
Communication Data: Messages and inquiries you send to us

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to provide our services to you
Legitimate Interests: Analytics, security, and service improvement
Consent: Marketing communications and optional features (you can withdraw consent anytime)
Legal Obligations: Compliance with applicable laws and regulations

5. How We Use Your Data

We use your personal data for the following purposes:

To create and manage your Mboa.link profile
To display your profile to visitors who access your unique URL
To provide analytics about your profile's performance
To improve our services and develop new features
To communicate with you about your account and our services
To ensure the security and integrity of our platform
To comply with legal obligations

6. Data Sharing

We do not sell your personal data. We may share your data with:

Service Providers: Hosting, analytics, and infrastructure partners who help us operate our platform
Legal Authorities: When required by law or to protect our rights
Business Transfers: In connection with a merger, acquisition, or sale of assets

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Analytics data is retained for up to 24 months. You can request deletion of your account and associated data at any time.

9. Your Rights (GDPR)

Under the GDPR, you have the following rights:

Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data ('right to be forgotten')
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent for consent-based processing

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. Essential cookies are necessary for the platform to function. Analytics cookies help us understand how you use our service. You can manage your cookie preferences through our cookie consent banner or your browser settings.

For more details, please see our Cookie Policy.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending you an email. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

Privacy Policy