Privacy policy and personal data protection

1. Who is responsible for your data?

The data controller is Vocassio, Abidjan, Côte d'Ivoire.

For any question or request about your data: https://vocassio.com/contact.

2. What data do we collect?

• Vocassio Love: first name (optional), country, language, your answers to the test and the calculated results (love profile, love language). If you use compatibility: a personal 6-letter code and the link to your partner's profile, only if the other person gives you their code.
• Vocassio Job: first name (optional), age or school year, situation (pupil, student, working…), country, language, subjects and test answers, results (interest profile). Raw answers are deleted as soon as the report is delivered.
• Payment: payment references (amount, date, method). Your bank details and payment number never go through our servers: they are handled by the payment provider.
• Messages you send us (contact form): name, email or phone, message content.
• Technical data: an anonymous identifier stored in your browser, test progress, usage statistics (events, language, country), where you came from (a shared card link or direct access) and the sharing code of your card.

We do not seek to collect data about your health, your sex life, your political or religious opinions, your ethnic or regional origin, nor genetic or biometric data. Please do not enter any in free-text fields.

3. Why, and on what basis?

• To produce your profile, results and reports: with your consent and to deliver the service you requested.
• To manage payment and access to your report: to deliver the service and meet our accounting obligations.
• To answer you when you write to us.
• To measure and improve the service: statistics, anonymised after 12 months.

We do not sell your data and we send no commercial message without your prior consent. No decision about you is taken by fully automated processing: our reports are aids to reflection, not verdicts.

4. Who receives your data?

Only technical providers acting on our instructions, located outside Côte d'Ivoire:

• Supabase: database and file storage.
• Google Cloud: website hosting (European Union).
• Paystack: payment.
• OpenRouter and artificial intelligence model providers: only for Vocassio Job, to write the presentation text of your profile from your scores, age, situation, country and free-text answers. Vocassio Love uses no artificial intelligence.

5. Transfer of your data abroad

As the providers above are located outside Côte d'Ivoire, your data is hosted and processed abroad. We choose providers that commit to protecting your data, and we complete the formalities required by law with the ARTCI (articles 7 and 26).

6. How long do we keep your data?

• Job test answers: deleted as soon as the report is delivered.
• Love or Job tests without purchase: 12 months after the last activity.
• Customers (answers, PDF reports): 24 months after the last activity.
• Contact messages: 12 months.
• Payment references: 10 years (accounting obligations), separated from your identity after an erasure.
• Proof of your consent: kept in minimal form (hashed identifier) as long as it may serve as evidence.

After these periods, your data is deleted or anonymised automatically.

7. Your rights

At any time you may: be informed about the processing, obtain a copy of your data (access), have it corrected (rectification), object to processing on legitimate grounds, ask for its erasure, withdraw your consent and ask to receive your data in a reusable format (articles 28 to 38 of the law). You may refuse any commercial prospecting without giving a reason.

How: on the page https://vocassio.com/mes-donnees from the same device and browser as the test, or by email to https://vocassio.com/contact. We may ask for reasonable proof of identity. We reply within 30 days at most.

Erasure: we delete your answers, results and files. Only payment references are kept, separated from your identity, because accounting law requires it.

8. Minors (under 18)

Vocassio is intended for people aged 18 and over. If you are under 18, please take the test with the agreement of a parent or legal guardian, who can also exercise all the rights above on your behalf. If a parent wants a minor's data deleted, they only need to write to us.

9. Security

We protect your data with: encrypted connections (HTTPS), database access reserved to our server, random file names, time-limited sessions, automatic deletion of expired data and logs without personal data.

No system is infallible: in case of a serious incident affecting your data, we will inform you and the ARTCI.

10. Local storage and cookies

We use your browser's storage for strictly necessary needs: anonymous identifier, test progress, language, credits.

The site's fonts and icons are loaded from Google Fonts and jsDelivr, which sends your IP address to those services.

11. Complaints

If you believe your rights are not respected, you may contact the ARTCI, the personal data protection authority of Côte d'Ivoire (www.autoritedeprotection.ci).

12. Changes

We may update this policy. The version date at the top of the page then changes, and we will ask for your agreement again if the change warrants it.