Privacy policy
Draft — to be validated by a lawyer. This English version is a courtesy translation; the French text is legally binding.
Controller
CLOUPIX SUARL, Rue Île de Rhodes 10, 3ème étage, bureau A1, Immeuble Henda, 1053 Les Berges du Lac 2, Tunis, Tunisia, tax ID 1949932Q. Contact for privacy questions: info@cloupix.com. This processing is governed by Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data; its declaration to the national personal data protection authority (INPDP) is in progress.
Visiting the website
When you visit our pages, our server processes your IP address, the time, the requested address, the referrer and your browser identifier to deliver the pages and detect attacks. We delete these logs after 30 days at the latest unless they are needed to investigate a security incident.
Your account
For your account we process your name, email address, a hashed password, two-factor authentication data and the IP address and browser identifier of your sessions, to perform our contract with you and protect your account. We use strictly necessary cookies for signing in and for your language choice.
Billing and payment
When you subscribe to a plan, payment is made by bank transfer; we process no card data. We keep your billing details (company name, address, tax ID) to issue our invoices, which we create with Contabli and send to you by email.
Your business data in Contabli
Customers, invoices, receipts and other data you enter in Contabli are processed on your behalf, as a processor. You are responsible for that data; our data processing agreement (contabli.tn/dpa) applies. If you invite your accountant, they only see what you share.
Emails
Emails for account confirmation, password resets and your subscription, as well as invoices you send from Contabli, are delivered via OVH.
Service providers and transfers
We use carefully selected processors for hosting and email delivery (OVH). The hosting providers and the location of the data are available on request. Personal data is only transferred outside Tunisia after authorisation by the INPDP, in accordance with articles 50 to 52 of Organic Law No. 2004-63.
Retention
We keep account data for as long as your account exists. After the contract ends we delete your data unless a legal retention duty applies; invoices and accounting records are kept for ten years under Tunisian tax and accounting law.
Security and incidents
Sign-in is protected by two-step authentication, issued invoices are locked and every important action is recorded in an audit trail. We do not use your data to train artificial intelligence models. In case of a personal data breach, we notify the customers concerned without undue delay and, where the law requires it, the INPDP.
Your rights
Under Organic Law No. 2004-63, you have the right to access, rectify and delete your data, and the right to object on legitimate grounds. You may withdraw consent at any time with effect for the future. Write to us at info@cloupix.com. You may also refer the matter to the national personal data protection authority (INPDP), Tunis.