Privacy policy

1. Data we collect

• Messaging identity: WhatsApp identifier (BSUID or number) or Telegram identifier, and your profile's display name.
• Phone number: only if WhatsApp provides it or you give it, to send the Mobile Money payment request.
• Language: the language the bot uses with you (guessed from your first message, changeable in the menu).
• Collections: title, amount, deadline, collection code, organizer's name, amount display setting.
• Contributions: display name, amount, payment method (MTN MoMo, Orange Money, proof), status, date, and the aggregator's transaction reference.
• Payment proofs: the screenshot or transaction ID you choose to send in proof mode.
• Messages: the content of messages you send to the bot, processed to understand your request. We keep the current conversation state, not the full history.
• Voice notes: transcribed into text to understand your request, then discarded. The recording is not kept.
• Association fund: the fund's name, its members, and every operation the treasurer records (amount, reason, borrower's name, due date, optional proof). The money stays in the association's account: Kotiz only keeps the record.

We do not collect your contacts, your location, or the messages of your groups.

2. Why we use it

• To create and manage collections, and produce the updated list.
• To send and verify Mobile Money payments.
• To send you confirmations, and to notify the organizer of payments and proofs to review.
• If you agreed, to send you reminders about a collection.
• To let a collection's members know a payment was just verified (your display name and the total), unless they chose to stop receiving updates.
• To prevent fraud and meet our legal obligations.

We do not sell your data or use it for advertising.

3. What is public

A collection's page (/k/CODE link) shows its title, deadline, contributors' display names, and their amounts unless the organizer hid them. No phone number is ever shown publicly. Anyone with the link can see this page.

4. Who we share it with

• The collection's organizer: your display name, the amount, and, in proof mode, the screenshot or ID you send, so they can check your payment.
• Other members of the collection: your display name when your payment is verified (the amount only if the organizer didn't hide it, never your number).
• Members of an association fund: the balance and operation history (amount, reason, borrower's name), and an update for every withdrawal. The controller also sees the attached proof.
• Meta (WhatsApp) and Telegram: to receive and send messages.
• Notch Pay: licensed payment aggregator, which receives the number, amount and reference to process the payment. Kotiz never holds your funds.
• MTN and Orange: through the aggregator, to execute the payment.
• Mistral AI (where applicable): the text of a request to create a collection may be sent to it to extract the title, amount and date, and your voice notes to be transcribed into text. No free-form answer is ever generated by an AI.
• Hosting providers for our servers and database (Vercel, Prisma), in the European Union where possible.
• Authorities, only upon lawful request.

5. Retention

A collection's data and its contributions are kept while the collection is active, then at most 5 years after it closes for accounting traceability. Data we no longer need is deleted or anonymized.

6. Security

Exchanges are encrypted (HTTPS). Every message received from WhatsApp, Telegram or Notch Pay is authenticated by signature. Access to data is limited to the team that needs it.

7. Your rights

You can request access to your data, its correction or deletion, and withdraw your consent to reminders at any time. Some payment data may have to be kept for legal reasons. To exercise these rights, contact Unitechs, Dschang, Cameroon (unitechs.dev). We answer within 30 days.

8. Minors

Kotiz is intended for people aged 18 and over.

9. Changes

We may update this policy. The date at the top shows the latest version.