Privacy Policy & Terms and Conditions of use

1.1 Introduction

Porsa Sarl ("Porsa", "we", "us", "our") operates the Porsa commerce platform that enables merchants to sell goods and digital services across multiple markets. Protecting personal data is central to our mission. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our Services.

This single policy includes provisions that apply generally (International) and specific references where local/regional law (CEMAC / UEMOA) requires adjustments.

1.2 Scope & Applicability

This policy applies to:

• All users of Porsa Services (merchants, customers, visitors).
• Data processed by Porsa Sarl and its subsidiaries, affiliates, and service providers.
• Processing in jurisdictions where Porsa operates, including but not limited to countries in CEMAC and UEMOA.

1.3 Types of Data We Collect

1.4 Purposes of Processing

We process personal data for the following primary purposes:

• To provide and operate the Services (account management, payment processing, settlement, order routing, digital delivery).
• To conduct KYC/AML checks and comply with applicable law (CEMAC / COBAC / UEMOA rules where applicable).
• To detect, prevent and investigate fraud, abuse or other unlawful activity.
• To communicate with users (service messages, transactional emails, legal notices, marketing with consent).
• To improve the Services and perform analytics and research.
• To comply with legal obligations, enforce our Terms, and protect rights and property.

1.5 Legal Bases for Processing

Where required by law, Porsa relies on one or more of the following legal bases:

• Performance of a contract (to provide Services you requested).
• Compliance with a legal obligation (KYC/AML, tax, recordkeeping).
• Legitimate interests (fraud prevention, platform security, analytics) — balanced against your rights.
• Consent (for marketing communications and non-essential cookies).

1.6 Specific Rules for CEMAC / UEMOA

• KYC and financial recordkeeping: Under regional financial regulation, Porsa must retain certain transaction and identity records for defined retention periods and share them with competent authorities upon lawful request.
• Cross-border payments and currency controls: Porsa may process and transfer payment-related data to partners outside the jurisdiction to facilitate settlements; such transfers will observe contractual safeguards.
• Consumer protections: For consumers within UEMOA member states, Porsa will respect local consumer rights regarding returns and refunds and will cooperate with regulators in those territories.

1.7 Data Sharing & Recipients

We may disclose personal data to:

• Payment processors and banks to authorize and settle transactions.
• Logistics and fulfillment partners to dispatch and deliver goods.
• KYC and fraud prevention vendors for identity checks and risk scoring.
• Service providers (hosting, email, analytics) acting as processors under contract.
• Law enforcement, tax or regulatory authorities when required by law or in response to legal processes.

Porsa does not sell personal data to data brokers or advertisers.

1.8 International Transfers

Your data may be transferred and stored in countries other than your country of residence (including servers in Europe, Africa, and North America). We will apply appropriate safeguards such as data processing agreements and standard contractual clauses where required by law.

1.9 Data Retention

We retain personal data only as long as necessary for the purposes described and to comply with legal obligations. Typical retention windows:

• Transaction and accounting records: 5–10 years (per regional rules).
• KYC records: as required by local law (often 5 years after account closure).
• Marketing consents: until withdrawn.

1.10 Security Measures

We implement administrative, technical and organizational measures including encryption in transit and at rest, access controls, logging and monitoring, vulnerability management, and regular security testing. We follow PCI-DSS standards for card data (when applicable).

1.11 Your Rights & How to Exercise Them

Depending on your jurisdiction, you may have rights to:

• Access and obtain a copy of personal data.
• Correct inaccurate or incomplete personal data.
• Delete or request deletion ("right to be forgotten"), subject to legal retention requirements.
• Restrict or object to certain processing.
• Data portability (receive a machine-readable copy).
• Withdraw consent where processing is based on consent.

To exercise rights, contact: privacy@porsa.io. We will respond within applicable legal timelines.

1.12 Cookies & Tracking

We use cookies for authentication, security, preferences, analytics, and advertising (optional). You can manage cookie preferences via your browser and via the cookie banner on our site.

1.13 Children

Porsa Services are not directed to children under 18. We do not knowingly collect personal data from minors.

1.14 Contact

If you have questions or complaints about this policy, contact: privacy@porsa.io or write to Porsa Sarl, Legal Department.

1.15 Changes to this Policy

We may update this Privacy Policy. Where required by law we will provide notice or obtain consent for material changes.

2.1 Introduction

These Terms & Conditions ("Terms") govern your access to and use of the Porsa Services. By creating an account or using the Services, you agree to be bound by these Terms.

2.2 Definitions

• "Porsa" means Porsa Sarl and its affiliates.
• "Merchant" means an entity or person using Porsa to list and sell goods or services.
• "Merchant" means the party that supplies goods (seller) under the Merchant-of-Record model.
• "Customer" means an end buyer who purchases goods/services through Porsa.
• "Services" means the platform, APIs, apps, and related services provided by Porsa.

2.3 Eligibility

You must be at least 18 years old, able to enter into binding contracts, and operate a lawful business to use Porsa.

2.4 Merchant of Record (MoR)

Porsa acts as the Merchant of Record for customer-facing transactions. This means:

• Customers contract with Porsa for purchases; Porsa collects payment and disburses settlements to Merchants.
• Merchants are Suppliers responsible for producing, holding and shipping products.
• Settlements provided to Merchants are commercial payments for supplied goods/services, not regulated payment services provided by Merchants.

2.5 Account Registration & KYC

You must provide accurate information when registering. Porsa may require identity documents (RCCM, national ID, tax numbers) to comply with KYC/AML and tax rules. Failure to provide requested documents may delay or block your access to payouts.

2.6 Products & Prohibited Items

Merchants must not list prohibited items (illegal drugs, weapons, unauthorized pharmaceuticals, counterfeit goods, adult sexual content where restricted, hazardous materials, regulated financial products, etc.). Porsa may remove listings or disable accounts that violate these rules.

2.7 Pricing, Fees & Settlements

• Porsa charges fees for the use of the Services (platform fees, transaction fees, optional add-ons). Fees are published on the pricing page and may change with notice.
• Settlement timing varies by payment method and risk review. For high-risk or disputed transactions, Porsa may hold funds pending investigation.
• Merchants are responsible for applicable taxes in their jurisdictions. Porsa may collect and remit taxes where required by law.

2.8 Orders, Fulfillment & Shipping

• Merchants must fulfill purchase orders within the promised time and provide accurate tracking information to Porsa.
• Porsa coordinates logistics with partner carriers; however, carriers operate independently and Porsa is not responsible for carrier delays beyond reasonable control.
• Title and risk transfer terms are specified in the Merchant agreement and may vary by jurisdiction and product type.

2.9 Returns, Refunds & Chargebacks

• Porsa provides a returns and refunds policy that applies to customers. Merchants must cooperate with returns and refund processes.
• Chargebacks and payment disputes may result in provisional debits against Merchant accounts. Merchants must provide documentation to contest disputes when requested.

2.10 Suspension & Termination

Porsa may suspend, limit or terminate accounts for breaches, suspicious activity, legal requests, or to protect the platform and users. On termination, outstanding obligations survive.

2.11 Intellectual Property

Porsa owns all IP in the Services (software, branding, documentation). Merchants retain rights to content they upload but grant Porsa a license to host and display such content as necessary to provide Services.

2.12 Warranties & Disclaimers

Merchants warrant that they have the right to sell products and that listings are accurate. Porsa disclaims all warranties to the extent permitted by law and provides Services "as is" except where explicitly stated otherwise.

2.13 Limitation of Liability

To the maximum extent permitted by law, Porsa's liability is limited to direct damages up to the amount of fees paid by the Merchant in the prior 12 months. Porsa is not liable for indirect, special, or consequential damages.

2.14 Governing Law & Dispute Resolution

• For Merchants operating in CEMAC/UEMOA regions, these Terms will be governed by applicable local law; disputes will first seek amicable resolution, then may be submitted to the competent courts in the Republic of Cameroon (Yaoundé) or an agreed arbitration forum.
• For international users, governing law and venue will be specified in the Merchant Agreement or onboarding documents.

2.15 Changes to these Terms

Porsa may modify these Terms. Material changes will be communicated in advance. Continued use of Services after notice constitutes acceptance.