Privacy policy

This privacy policy describes how Nicocrm collects, uses and protects the personal data processed in the course of providing the Platform, in accordance with Senegalese law n° 2008-12 of January 25, 2008 on the protection of personal data.

Please read before relying on this page

This document is provided for informational purposes only and must be reviewed by legal counsel before going into production.

1. Data collected

In the course of using the Platform, Nicocrm processes in particular the following categories of data:

  • Users' identification and login data (first name, last name, work email, role);
  • sales data entered by the Customer, relating to its own contacts and customer companies (name, contact details, job title, interaction history);
  • technical connection data necessary for the proper functioning and security of the Platform (connection logs, IP address).

2. Purposes of processing

Data is processed for the following purposes: providing and continuously improving the Platform's features; managing User accounts and the associated access rights; billing subscriptions and managing the contractual relationship with the Customer; security, fraud prevention and compliance with applicable legal obligations.

3. Legal basis for processing

Processing of Users' data is mainly based on the performance of the subscription contract entered into between Nicocrm and the Customer, as well as, where applicable, Nicocrm's legitimate interest in ensuring the security and proper functioning of the Platform.

Regarding data relating to contacts and customer companies entered by the Customer into the Platform, the Customer remains the data controller within the meaning of law n° 2008-12, and Nicocrm acts as a technical data processor on its behalf.

4. Retention period

User Account data is kept for the entire duration of the Customer's subscription, then deleted or anonymized within a reasonable period after termination, unless a longer retention period is legally required.

Sales data entered by the Customer (contacts, companies, opportunities, quotes, invoices) is kept following the same logic and can be exported by the Customer before its permanent deletion.

5. Rights of data subjects

In accordance with Senegalese law n° 2008-12 on the protection of personal data, any individual whose data is processed has a right of access, rectification, objection and, under the conditions provided for by law, a right to have their data deleted.

For any request relating to the exercise of these rights concerning the data of a User Account, the individual concerned may contact Nicocrm directly using the contact details below. For any request relating to the data of contacts or customer companies entered by a Customer, the request must be addressed to the Customer concerned, who is the controller of that data.

6. Subprocessors and hosting

Nicocrm may use third-party technical providers (hosting, transactional email delivery, cloud infrastructure) acting as subprocessors, strictly within the purposes described in this policy.

Data is hosted on secure infrastructure. Any transfer of data outside Senegal, where applicable, is governed by appropriate contractual safeguards with the providers concerned.

7. Data security

Nicocrm implements reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration or disclosure, including encryption of communications, role-based access management and connection logging.

The Customer remains responsible for properly managing the credentials and roles assigned to its own Users.

8. Contact and data protection officer

For any question relating to this privacy policy or to exercise your rights, you can contact our data protection officer at: privacy@nico-crm.com.

Nicocrm undertakes to respond to any legitimate request within a reasonable period of time, in accordance with applicable regulations.