Privacy policy

Idromix is an online management software (schools, retail, stock, parcels, fuel, real estate, human resources…) published by Malinuse SARL, a company incorporated in Mali and located in Bamako, Mali.

For any question about this policy: imidsac@malinuse.com, +223 76 65 35 65, or the Contact page.

The businesses and organisations that use Idromix (our "customers") enter into Idromix the data of their own clients, students, guardians, employees, patients or members. For this data, the customer is the data controller: it decides which data it records and why. Malinuse acts on its behalf, as a service provider (processor), and only uses this data to provide the service.

For Idromix user accounts (name, login, sign-ins) and for requests sent through our website, Malinuse is the data controller.

• User accounts: name, e-mail address or access code, phone, role, agency, sign-in history.
• Data entered by our customers in their modules: for example name, phone and address of their clients, students and guardians, parcel details, sales, payments, attendance and grades.
• WhatsApp messages sent from Idromix: recipient number, message template used and its variables (for example a parcel code), date and delivery status.
• Technical data: IP address, browser type, security logs and session cookies required to sign in.
• Requests sent through the contact form or onboarding forms: name, company, contact details and message content.

• Provide Idromix: display, store and compute our customers' data, issue their receipts, report cards and documents.
• Send, on behalf of our customers, the notifications they have chosen (for example "your parcel has arrived") by WhatsApp, SMS or e-mail.
• Secure the service: authentication, abuse and fraud prevention, backups.
• Answer requests, provide support and invoice the subscription and usage.
• Comply with our legal and accounting obligations.
• We do not sell any data and do not use our customers' data for advertising.

A customer can connect its business's WhatsApp Business number to Idromix, with its own Facebook account, through Meta's official window ("Facebook Login for Business"). Idromix then receives an access token limited to that WhatsApp Business account; this token is stored encrypted and is only used to send the messages chosen by the customer and to read their status.

The messages sent are service notifications written from templates approved by Meta. To deliver them, the recipient's number and the message content are transmitted to Meta Platforms, which processes them under its own terms and privacy policy (WhatsApp Business).

The customer remains the owner of its number and WhatsApp Business account; it can disconnect them at any time from the Idromix WhatsApp page, which deletes the stored access token.

• Our hosting and technical providers (servers, backups, e-mail delivery), bound by confidentiality.
• Meta Platforms (WhatsApp) and our SMS providers, only to deliver the messages requested by our customers.
• Authorities, when required by law.
• A customer's data is never visible to another customer.

Our customers' data is kept as long as their Idromix account is active, then deleted or anonymised no later than 12 months after the end of the subscription, unless the law requires longer retention (for example for accounting). Security logs are kept for 12 months at most. The WhatsApp access token is deleted as soon as the number is disconnected.

• Encrypted connection (HTTPS) on every page.
• Passwords, access tokens and secrets stored encrypted.
• Access limited by role and by agency: each user only sees what their organisation allows.
• Regular backups and protection against attacks.

Under Malian law no. 2013-015 of 21 May 2013 on the protection of personal data, anyone may request access to their data, its correction or deletion, and object to its processing. If your data was entered by a customer business (your school, your carrier…), contact it first; we will help it answer. You can also write to us directly: imidsac@malinuse.com. You may also contact Mali's personal data protection authority (APDP).

To request the deletion of your data, including data received through Facebook or WhatsApp:

• write to imidsac@malinuse.com or use the Contact page, giving your name, phone number and the business concerned;
• a customer can also remove its agency's WhatsApp connection itself ("Disconnect the number" button on the WhatsApp page), and delete its clients' records from Idromix;
• we confirm the deletion within 30 days, except for data the law requires us to keep.

Idromix only uses the cookies it needs to work: sign-in session, chosen language and form security. No advertising cookies.

We may update this policy; the date of the last update is shown at the top of the page. Our customers are informed of any significant change.