Privacy policy

1. Roles and scope

LIKSOFT acts as controller for data used to create and administer accounts, provide support, secure the service, manage commercial relationships and meet its own legal obligations.

For recipient data and message content submitted by a customer, LIKSOFT generally acts as a processor on that customer’s documented contractual instructions, in line with Article 20 of Togolese Law No. 2019-014. The customer remains controller and must inform recipients, establish a lawful basis and answer their requests.

2. Data processed

• Account and contact data, such as name, business details, email, telephone number and roles.
• Authentication and security data, including credential metadata, 2FA status, IP addresses, device and audit events.
• Commercial and billing data, including orders, balances, usage, payments, invoices and support exchanges.
• Messaging data supplied by customers, including recipients, Sender IDs, domains, routing metadata, message content and delivery events.
• Technical data needed to operate, diagnose, protect and improve the platform.

3. Purposes and legal bases

Data is processed to provide contracted services, authenticate users, route communications, calculate usage and billing, support customers, prevent fraud, maintain security, comply with law and defend legal claims.

Depending on the context, processing relies on performance of a contract, compliance with a legal obligation, legitimate interests in operating and securing the service, or consent where the law requires it.

4. Customer instructions and message data

LIKSOFT processes customer message data only to provide and secure the requested services, follow lawful documented instructions and comply with binding legal obligations. Customers must not submit data they are not authorized to process.

Channel providers and telecom networks may independently process communications under their own legal duties and privacy terms.

Customer email is submitted through the LIKSOFT Pro Messaging API or branded SMTP. SMTP credentials are customer-specific and revocable.

5. Retention

Account and commercial records are retained for the duration of the relationship and afterward only as needed for legal, accounting, security or dispute-resolution duties. Message content, routing logs and delivery events are retained only for operational, contractual and legally required periods.

Exact periods may depend on the service configuration, signed agreement, provider requirements and applicable law. Data is deleted or anonymized when it is no longer needed, subject to lawful holds and backups.

6. Recipients, subprocessors and transfers

Data may be shared with personnel who need it, contracted infrastructure and support providers, payment or email services, telecom operators, WhatsApp or Meta providers and authorities where legally required.

When processing involves another country, LIKSOFT applies the conditions and safeguards required for transfers outside Togo, including the framework in Articles 28 to 30 of Togolese Law No. 2019-014, and assesses providers according to the service and risk.

7. Security

LIKSOFT applies proportionate organizational and technical controls such as access restrictions, authentication safeguards, logging, encrypted transport, credential protection, backups and incident procedures. No internet service can promise absolute security, and customers must secure their own accounts, endpoints and integrations.

8. Rights and complaints

Subject to applicable law, including Articles 39, 45 and 46 of Togolese Law No. 2019-014, a person may request access, correction or deletion and may object to processing. Other applicable rights, including restriction, portability or consent withdrawal, can be exercised where provided by law. If LIKSOFT processes the data only for a customer, the request may be redirected to that customer.

Requests can be sent to [email protected] or initiated through the official LIKSOFT website. Under applicable Togolese law, a person may also submit a complaint to the Personal Data Protection Authority (IPDCP).

9. Cookies and local storage

The public and authenticated interfaces may use cookies or browser storage necessary for sessions, security, language, theme and service preferences. Any optional analytics or similar technology must be presented with the information and choice required by applicable law before use.

10. Updates and official references

This policy may be updated when services, providers or legal requirements change. Material updates will be communicated through an appropriate channel.

The relevant Togolese framework includes Law No. 2019-014 of October 29, 2019 on personal data protection.