Version: privacy-en-0.4
The French version prevails in case of discrepancy.
1. Data controller
The data controller is AureusPrime SARL U, Douala, Cameroon, which operates Aureus Prime. Contact for any question about your data: donnees@aureusprime.com.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Identity and account | last name, first name, email, Google profile photo, language | you, or Google if you sign in with Google |
| Phone | Mobile Money number, number for SMS (Cameroon) | you |
| Purchases and credits | orders, subscriptions, Auri credit purchases, credit history | our services, our payment provider |
| Payment | transaction reference, operator, amount, status | our payment provider. We do not receive your PIN or your Mobile Money credentials. |
| Student proof (if you request a discount) | document or institutional email | you |
| Security | IP address, device, browser, sign-in dates, verification codes sent | automatic |
| Exchanges | messages to support, conversations with Aureo | you |
| Consents | your choices (email, SMS, push), date, version of the accepted text | you |
| Waiting list | email, interests, language, source of the sign-up | you |
| Visit statistics | pages viewed (without address parameters), origin, device and browser type, country, key journey actions (for example sign-up completed), without cookies and without personal identification | automatic |
3. Why we use it
| Purpose | Basis |
|---|---|
| Create and manage your account, provide the services purchased | performance of the contract (Terms / Terms of Sale) |
| Process payments and Auri credits, prevent fraud | performance of the contract, legitimate interest, legal obligations |
| Secure accounts (device verification, abuse detection) | legitimate interest |
| Answer support and run Aureo | performance of the contract |
| Verify student status | your request |
| Send you announcements (launches, news) by email, SMS or push | your consent, which you can withdraw at any time |
| Measure traffic and usage of the site, the sign-in pages and the customer area, to improve journeys | legitimate interest (anonymous statistics) |
| Keep evidence (transactions, consents) | legal obligations, defence of our rights |
4. Who receives your data
We do not sell your data. We share it only with providers necessary for the service.
| Provider | Role | Location |
|---|---|---|
| LWS | hosting of servers, the database and the visit statistics tool | France |
| Cloudflare (R2) | file storage: attachments sent to support, receipts, student proofs (encrypted by us before upload) | European Union |
| Moneroo and the approved payment providers with which AureusPrime SARL U is under contract | processing of Mobile Money payments | Not specified |
| sign-in with Google; AI model used by Aureo and for analysing student proofs | Not specified | |
| Brevo | sending emails and announcements | European Union |
| Combitext | sending SMS (Cameroon) | Cameroon |
| Firebase (Google) | push notifications | Not specified |
| Google reCAPTCHA | protection against bots and fraud on forms | Not specified |
We also disclose data to the authorities when the law requires it.
Aureo and student proofs:
- messages sent to Aureo and student documents are sent to Google's AI service to be processed;
- never send Aureo a code, a password or an identity document number. Aureo refuses to use them.
Visit statistics (Umami):
- we use Umami, an audience measurement tool installed on our own servers: these statistics are not shared with any third party;
- it runs on aureusprime.com, on the sign-in and sign-up pages (auth.aureusprime.com) and in the customer area (compte.aureusprime.com);
- it sets no cookies and does not identify you: no name, email or account identifier;
- address parameters (verification links, codes, tokens) and identifiers contained in addresses are never recorded;
- it is only used to know which pages and features are used and at which step journeys fail.
File storage (Cloudflare R2):
- files you send us or that we produce for you (support attachments, receipts, student proofs) are stored with Cloudflare, in a private space located in the European Union;
- these files are never publicly accessible: they are only delivered to authorised people, after their rights have been checked;
- student proofs are encrypted by us before being stored.
Transfers outside Cameroon: several providers are located abroad.
5. Retention periods
| Data | Period |
|---|---|
| Account | as long as the account is active, then 3 months after its deletion |
| Transactions, credit purchases, receipts | 10 years (OHADA accounting retention period) |
| Consent log | duration of the relationship, plus 5 years (evidence) |
| Student proof | 30 days after the decision, then the document is deleted (only the result is kept) |
| Conversations with Aureo | 6 months |
| Messages to support | 3 years after closure |
| Security logs | 12 months |
| Waiting list without an account | until the service launches or you unsubscribe, at most 24 months |
| Visit statistics (anonymous) | 25 months, then automatic deletion |
6. Cookies
- Session cookie (strictly necessary): it keeps you signed in across Aureus Prime spaces. It is set on
.aureusprime.com. - Preferences (strictly necessary): display language and theme.
- Bot protection (Google reCAPTCHA): on some forms, Google may set cookies and analyse technical information about your device to detect bots and fraud.
- No advertising cookies and no audience-measurement cookies. Our visit statistics (Umami) do not set cookies.
If we ever add cookies that require your consent, we will ask you before setting them.
7. Your rights
You can at any time:
- access your data and obtain a copy;
- correct it;
- request its deletion, subject to the data we must keep (transactions, evidence);
- object to certain processing;
- withdraw your consent to announcements:
- email: link in every email;
- SMS: link at the end of every announcement SMS;
- all channels: page
compte.aureusprime.com/notifications.
To exercise your rights: donnees@aureusprime.com. We reply within 30 days. We may ask you to prove your identity.
You may also refer the matter to the competent Cameroonian data protection authority.
8. Security
We protect your data with appropriate measures:
- encrypted connections (HTTPS);
- passwords stored in irreversibly encrypted form;
- session cookie not accessible to scripts;
- restricted access;
- audit logs;
- files stored in a private space, student proofs encrypted before storage;
- verification of sign-ins from a new device.
As no system is infallible, we will inform you in the event of a data breach likely to affect you.
9. Minors
The services are not aimed at people under 16. Some services (Aureus Gate, Aureus Dev and Marketing services) are reserved for people aged 18 and over. We do not knowingly collect data from people under 16; if this happens, write to us and we will delete it.
10. Changes
In case of a significant change, we will notify you by email before it takes effect. The applicable version is always shown at the top of this page.