Privacy

Version in force: 2026-10-09

ORGANISATION DESTINÉE D’IMPACT · SARL au capital de 2 000 000 FCFA · RCCM CI-ABJ-03-2021-B12-01689 · Riviera, Abidjan, Côte d’Ivoire · +225 01 50 10 10 74

1. Data controller

ORGANISATION DESTINÉE D’IMPACT is the controller of LeUp CMsocial data. Personal data contact: support@leupmanager.com.

2. Data processed

Account (name, e-mail, country, language, time zone); connections (public identifiers of accounts and pages, encrypted access tokens); content you create or upload (drafts, texts, existing media); statistics provided by platforms or entered by you; XPAYE payment references (never card numbers); technical security logs.

3. Purposes and legal bases

Providing the service (contract); securing and preventing abuse (legitimate interest); invoicing and accounting duties (legal obligation); notifications, network connections and optional commercial messages (consent, withdrawable at any time).

4. Data from social networks

We only access what you authorise, solely to provide the service, with no sale or advertising use. LeUp CMsocial uses YouTube API Services: by using it you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy). You can revoke access at https://myaccount.google.com/permissions or from the Connections page.

5. Recipients and processors

Hosting: LWS (France). E-mail delivery: Amazon Web Services. Payment: XPAYE. Social networks: only at your request. If AI assistance is enabled, the chosen provider will be named here before any use.

6. International transfers

Some data may be processed outside Côte d'Ivoire (France, provider regions, social platforms). We choose providers offering appropriate safeguards.

7. Artificial intelligence

The assistant only produces text (ideas, hooks, captions, recommendations) from your workspace data. No image or video is generated. You review and approve every item before publishing.

8. Retention

Your data is kept while your account and workspaces exist. After a deletion request: erased within 30 days (technical backups disappear on rotation). Accounting records are kept for the legal period. Tokens are deleted on revocation. Technical logs are kept 12 months.

9. Security

Encrypted connections (HTTPS), access tokens encrypted at rest, access separated by workspace with minimal permissions, logging of sensitive operations, rate limiting against abuse.

10. Your rights

Access, rectification, erasure, objection, restriction, portability (JSON export in Settings) and withdrawal of consent: write to support@leupmanager.com. You may contact the Côte d'Ivoire data protection authority (ARTCI), under law no. 2013-450 of 19 June 2013.

11. Cookies and local storage

A strictly necessary session cookie keeps you signed in. Browser local storage keeps drafts while you type. No advertising cookies.

12. Minors

The service is not intended for minors without the authorisation of their legal representative.

13. Changes

This policy may change; the version in force is shown at the top and you are asked to accept again after a substantial change.