MboaSon — Privacy Policy
Last updated: [to be completed]
Preliminary Warning:
This document is a first draft — it has not been reviewed by a legal professional. Before any public use, have it validated by a Cameroonian lawyer or counsel. In particular, verify whether MboaSon must declare itself to ANTIC (National Agency for Information and Communication Technologies) under Article 25 of Law No. 2010/012, and the obligations arising from Law No. 2024/017 relating to the protection of personal data, applicable from June 23, 2026.
1. Who Processes Your Data
MboaSon, published by [name of the structure — TO BE COMPLETED], is responsible for processing the data described in this policy.
2. Data We Collect
| Data | When | Why |
|---|---|---|
| Phone number | At registration | Account identifier, login |
| Password (encrypted, never stored in plain text) | At registration | Account security |
| Optional, requested at payment | Order-related communication, required by our payment provider | |
| Occasion, first name(s), tone, musical style | With each order | Song generation |
| Anecdote or personalized message | With each order, optional | Song generation — this text remains private, it never appears on the public page of the song |
| Generated lyrics and audio file | After generation | Product delivery, your order history |
| Transaction data (amount, method, status, reference) | With each payment | Order tracking, accounting |
What we never see: your credit card number or mobile money PIN. This information is entered directly with our payment provider, never transmitted to our servers.
3. Subcontractors and Recipients of Your Data
Your data passes through the following providers, each within the strict scope necessary for their role:
- Anthropic (Claude) — generation of the title and lyrics from the information you provide
- sunor.cc (reseller of Suno technology) — generation of the audio file from the chosen lyrics and style
- Passerelle de paiement sécurisée — payment processing (mobile money, card)
- Neon, Render, Vercel, Upstash — technical hosting of the application and data (servers located in Europe)
None of your data is sold to third parties for commercial or advertising purposes.
4. What is Public
A song you have generated is accessible via a unique link (long and unguessable web address), intended to be shared by yourself — for example on WhatsApp. Anyone with this link can listen to the song.
This public page never displays: your phone number, your email, your payment history, or the raw anecdote you provided. Only the title, style, occasion, and audio of the song are shown.
5. Retention Period[TO COMPLETE / VALIDATE]
Base proposal, to be adjusted:
- Account data and created songs are kept as long as the account exists.
- You can request the deletion of your account and your data at any time (see section 7).
- Transaction data may be kept beyond the deletion of the account, within the limits required by applicable accounting and tax obligations.
6. Security
Passwords are encrypted. Connections to the service are secure (HTTPS). Access to production data is limited and logged.
7. Your Rights
You can request at any time:
- access to the data we hold about you
- the correction of inaccurate information
- the deletion of your account and associated data
To exercise these rights: [contact email address to be completed].
8. Cookies
[To be completed according to what is actually used on the site — at this stage, verify if audience measurement cookies or others are actually placed before writing this section.]
9. Minors
The service is not designed to be used directly by minors. If you order a song concerning a child (for example for a baptism), it is you, the adult, who provides the information — no data is collected directly from the child themselves.
10. Changes to This Policy
This policy may be updated. The version in force is the one published on the site on the date of your visit.
11. Contact
For any questions regarding your personal data: [contact email address to be completed].