FeePrime

← All pages

Legal

Privacy Policy

Your data is yours. We collect only what runs FeePrime, never sell it, and you can access or delete it anytime. Full policy below.

Effective date: July 17th, 2026 Last updated: July 17th, 2026

This Privacy Policy explains how FeePrime (”we”, “us”, “our”), a business operated from Yaoundé, Cameroon, handles personal data in connection with the FeePrime platform and our websites (the “Service”). The operator’s full legal identity is available on request.

1. Two roles — please read this first

We handle personal data in two distinct capacities, and this Policy covers both:

  1. As a controller — for personal data we decide the purposes of ourselves. This includes the details of the people who register for and administer accounts, our billing contacts, people who contact us, and visitors to our websites. This Policy governs that data.

  2. As a processor — for the personal data our business customers enter into the platform about their own clients, members, students, employees, or other individuals (“Customer Data”). For that data, our customer is the controller and decides why and how it is processed; we act on their instructions under a Data Processing Agreement. If your personal data is in the platform because you are a client, member, student, or employee of one of our customers, you should contact that organisation to exercise your rights, and their privacy notice — not this one — governs how your data is used. We assist our customers in responding to such requests.

The sections below concern personal data for which we are the controller, unless stated otherwise.

2. Personal data we collect (as controller)

  • Account and profile data — name, work email, phone number, organisation, role, and login identifiers of account holders and Authorised Users.
  • Authentication data — information used to sign you in securely (for example, one-time codes sent to your email, single sign-on identifiers, or authenticator-app second factors). Passwords, where used, are stored only as one-way hashes and are never recoverable.
  • Billing and transaction data — the information needed to bill for the Service and keep records of it.
  • Usage and technical data — log data, device and browser information, IP address, and interactions with the Service, used to operate, secure, and improve it.
  • Communications — messages you send us (for example, support requests).
  • Website data — data collected through our websites, including via essential and, where applicable, analytics cookies (see Section 8).

We do not store customers’ full payment-card details. Where the Service orchestrates mobile-money or aggregator payments, we hold only the merchant’s own payment-provider credentials, which are encrypted at rest.

3. Why we use it, and our legal bases

We use personal data (as controller) to:

  • provide and administer the Service and your account — on the basis of performing our contract with you;
  • secure the Service, prevent fraud and abuse, and maintain audit and access records — on the basis of our legitimate interests and legal obligations;
  • bill and keep financial records — to perform our contract and comply with legal obligations;
  • communicate with you about the Service, including service and security notices — to perform our contract and for our legitimate interests;
  • improve the Service — for our legitimate interests, using data in a limited and, where appropriate, aggregated way; and
  • comply with law and respond to lawful requests.

Where we rely on consent (for example, certain analytics or marketing), you may withdraw it at any time.

4. Sharing and recipients

We do not sell personal data. We share it only with:

  • Service providers (sub-processors) who help us run the Service, by category: our infrastructure and hosting provider (EU-based), our licensed payment aggregator, and providers of authentication, security, email delivery, and similar functions. A current list of named sub-processors is available to customers on request and in the Data Processing Agreement.
  • Professional advisers (such as auditors and lawyers) where necessary and bound by confidentiality.
  • Authorities, where required by law or to protect rights, safety, or the integrity of the Service.
  • A successor in the context of a merger, acquisition, or reorganisation, subject to this Policy.

5. International data transfers

The Service is hosted on infrastructure located in the European Union [Germany — confirm region]. If you access the Service from Cameroon or elsewhere, your personal data will be transferred to and stored in the EU. Where personal data is transferred across borders, we rely on appropriate safeguards recognised under applicable data-protection law and take reasonable steps to ensure it remains protected to the standard described in this Policy.

6. Retention

We keep personal data for as long as needed to provide the Service and your account, and afterwards only as long as necessary to meet legal, accounting, audit, and security obligations, or to resolve disputes. Backups are retained on a rolling cycle and then overwritten. When data is no longer needed, we delete or anonymise it.

7. Security

We protect personal data with appropriate technical and organisational measures, including encryption in transit, encryption of the most sensitive data at rest, strict access controls with role-based permissions, an immutable audit trail, and encrypted backups. A plain-language summary is available on our security page. No system is perfectly secure, but we work continually to protect your data.

8. Cookies

Our websites use essential cookies needed to sign you in and keep the Service secure, and may use analytics cookies to understand and improve usage. Where required, we ask for your consent to non-essential cookies and you can manage your preferences. You can also control cookies through your browser settings; disabling essential cookies may affect how the Service works.

9. Your rights

Subject to applicable law, you have the right to access your personal data, to have it corrected or deleted, to restrict or object to certain processing, to receive it in a portable format, and to withdraw consent where processing is based on it. You may also lodge a complaint with a competent data-protection authority.

To exercise these rights over data for which we are the controller, contact us using the details below. If your data is in the platform as a client, member, student, or employee of one of our customers, please contact that organisation (see Section 1).

10. Children

The Service is intended for use by organisations and their Authorised Users, not directed at children. Where a customer (for example, a school) enters data about minors, that customer is the controller of such data and is responsible for the lawful basis for it under the Data Processing Agreement.

11. Changes to this Policy

We may update this Policy from time to time. Where changes are material, we will provide reasonable notice before they take effect. The “Last updated” date above shows the current version.

12. Contact

For privacy questions or to exercise your rights (as controller): fritz@fee.cm FeePrime — Yaoundé, Cameroon.