Skip to content
MboaBot
FRWhatsApp
← Back to home

Privacy policy

Last updated: 25 October 2026

This policy describes how RICHENEL'S AI AGENCY SARL ("MboaBot", "we"), as data controller, collects and uses the personal data of people who visit mboabot.com, who message MboaBot on WhatsApp, or who chat with a MboaBot assistant set up for a client business. It is written in accordance with Cameroon's Law No. 2024/017 of 23 December 2024 on the protection of personal data and with Meta's requirements for the WhatsApp Business Platform. In case of discrepancy, the French version prevails.

1. Who is the controller?

RICHENEL'S AI AGENCY SARL, a limited liability company under Cameroonian law, RCCM RC/YAO/2024/B/1323, NIU M062416904631T, registered office at Nkoabang, Yaoundé, Cameroun. Contact for any data question: yvan.kamga@raia.cm or WhatsApp +237 673 872 097 (type "human" to reach a team member).

2. Two different situations

a) You are a MboaBot prospect or customer

You message our sales assistant on WhatsApp, request a quote, test a demo or subscribe. MboaBot is the controller of your data.

b) You are a customer of a business that uses MboaBot

You write to a shop, restaurant, school or other professional whose WhatsApp number is handled by a MboaBot assistant. That business is the controller; MboaBot acts as processor on its behalf, under its instructions, and does not use your data for any other purpose. To exercise your rights, contact that business first; we assist it in responding.

3. Data collected on WhatsApp

  • Identity and contact: WhatsApp phone number, WhatsApp profile name and, if you provide them, business name, first name, e-mail address, delivery address.
  • Conversation content: text messages, voice notes (transcribed when the feature is enabled), images or documents you send, WhatsApp buttons and form answers.
  • Business information given during qualification: industry, platforms used (Facebook pages, Instagram accounts, website, which we check publicly), requested features, approximate customer volume, pro formas and invoices issued.
  • Payment: for an MTN Mobile Money or Orange Money payment through our provider CamPay, we receive the transaction reference, amount, payment status and the mobile money number used. We never hold your PIN or mobile money account credentials.
  • Technical data: message timestamps, WhatsApp technical identifiers (message ID, WhatsApp Business account ID), error logs.

We collect no sensitive data (health, opinions, religion, biometrics) and ask you not to send any. Our services are not intended for people under 18.

Mandatory data. To prepare a quote we need your business name, industry, the platforms and features you want and an estimate of your customer volume. Without this information we cannot price your project; everything else is optional.

3a. AI-generated replies

Replies from the MboaBot assistant are generated automatically by artificial intelligence, from the information provided by the business concerned. Pro forma amounts are calculated automatically and checked by a team member before they are sent. You can ask for a person at any time by typing "human" in the conversation.

4. Data collected on mboabot.com

The website is static, with no forms and no accounts. It sets no cookies by default. Our host keeps short-lived technical logs (IP address, pages requested, browser) for security. If we enable the Meta Pixel to measure advertising campaigns, we will say so on this page and it will be subject to your consent where the law requires it.

5. Purposes and legal bases

  • Answering your messages and preparing a quote (pre-contractual steps and consent expressed by sending the message).
  • Performing the contract: personalised demo, go-live, subscription, invoicing, payment, support and changes (performance of the contract).
  • Running a client business's assistant: answering its customers, taking orders and bookings, sending payment links, handing over to a human with a summary (instructions of the client controller).
  • Follow-ups: reminders about a pro forma, a cart or an appointment, within the rules set by the business and your choices (legitimate interest; you can object at any time by typing "human" in the conversation to ask us to stop follow-ups, or by e-mail: a team member handles your request).
  • Legal obligations: accounting, invoicing, fraud prevention.
  • Security and service improvement: technical logs, abuse detection, aggregated statistics (legitimate interest).

We do not use your conversations to train artificial-intelligence models and we never sell your data.

6. Recipients and processors

  • Meta Platforms (WhatsApp Business Platform, Messenger, Instagram): message delivery. WhatsApp messages are end-to-end encrypted up to the WhatsApp Cloud API operated by Meta, which then forwards them to us over an encrypted connection (TLS); Meta processes messages and their metadata under its own terms and privacy policy.
  • Amazon Web Services (hosting, storage and AI models through Amazon Bedrock): data is stored in the US East (N. Virginia) region; AI processing may take place in other AWS regions in the United States. Amazon Bedrock does not use processed content to train its models.
  • CamPay: MTN Mobile Money and Orange Money payment processing.
  • The client business you contact: it receives your orders, bookings, conversation summaries and payment confirmations.
  • Public authorities, only on a lawful request.

These providers process data outside Cameroon, mainly in the United States. These transfers rely on each provider's data processing terms and are carried out in line with Law No. 2024/017.

7. Retention

  • Conversation messages: deleted automatically 12 months after they were sent, at the latest.
  • Prospect or customer file (business, needs, sales history): for the duration of the relationship, then 12 months at most.
  • Personalised demo data: deleted on request, and at the latest 12 months after the demo ends if no contract is signed.
  • Pro formas, invoices, payment references: 10 years (OHADA accounting obligations).
  • Technical logs: 14 days.

8. Your rights

Under Law No. 2024/017 you have the right to information, access, rectification, erasure, restriction, objection (including to follow-ups) and portability, the right to withdraw consent at any time, and the right to give instructions about your data after your death.

To exercise them: type "human" in the WhatsApp conversation, or contact us at yvan.kamga@raia.cm. We reply within 30 days. Proof of identity may be requested in case of doubt. You may also lodge a complaint with the Cameroonian personal data protection authority established by Law No. 2024/017.

To have your WhatsApp data deleted from our platform, type "human" in the conversation and state your deletion request, or send an e-mail to the address above. A team member handles your request within 30 days, except for data the law requires us to keep (invoices).

9. Security

Encryption in transit (TLS) and at rest, access restricted to authorised team members, secrets kept in a dedicated vault, access logs, backups. In the event of a data breach likely to harm you, we notify you and the competent authority within the legal deadlines.

10. Changes

This policy may change; the current version is always published at mboabot.com/en/privacy. Last updated: 25 October 2026.