Version: privacy-en-0.2
The French version prevails in case of discrepancy.
1. Data controller
The data controller is MBC SARL, Douala, Cameroon, which operates Aureus Prime on a transitional basis. Contact for any question about your data: donnees@aureusprime.com.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Identity and account | last name, first name, email, Google profile photo, language | you, or Google if you sign in with Google |
| Phone | Mobile Money number, number for SMS (Cameroon) | you |
| Purchases and credits | orders, subscriptions, Auri credit purchases, credit history | our services, our payment provider |
| Payment | transaction reference, operator, amount, status | our payment provider. We do not receive your PIN or your Mobile Money credentials. |
| Student proof (if you request a discount) | document or institutional email | you |
| Security | IP address, device, browser, sign-in dates, verification codes sent | automatic |
| Exchanges | messages to support, conversations with Aureo | you |
| Consents | your choices (email, SMS, push), date, version of the accepted text | you |
| Waiting list | email, interests, language, source of the sign-up | you |
| Visit statistics | pages viewed, origin, device type, without cookies and without personal identification | automatic |
3. Why we use it
| Purpose | Basis |
|---|---|
| Create and manage your account, provide the services purchased | performance of the contract (Terms / Terms of Sale) |
| Process payments and Auri credits, prevent fraud | performance of the contract, legitimate interest, legal obligations |
| Secure accounts (device verification, abuse detection) | legitimate interest |
| Answer support and run Aureo | performance of the contract |
| Verify student status | your request |
| Send you announcements (launches, news) by email, SMS or push | your consent, which you can withdraw at any time |
| Measure site traffic | legitimate interest (anonymous statistics) |
| Keep evidence (transactions, consents) | legal obligations, defence of our rights |
4. Who receives your data
We do not sell your data. We share it only with providers necessary for the service.
| Provider | Role | Location |
|---|---|---|
| LWS | hosting of servers and the database | France |
| Moneroo and the approved payment providers with which MBC SARL is under contract | processing of Mobile Money payments | Not specified |
| sign-in with Google; AI model used by Aureo and for analysing student proofs | Not specified | |
| Brevo | sending emails and announcements | European Union |
| Combitext | sending SMS (Cameroon) | Cameroon |
| Firebase (Google) | push notifications | Not specified |
| Google reCAPTCHA | protection against bots and fraud on forms | Not specified |
We also disclose data to the authorities when the law requires it.
Aureo and student proofs:
- messages sent to Aureo and student documents are sent to Google's AI service to be processed;
- never send Aureo a code, a password or an identity document number. Aureo refuses to use them.
Transfers outside Cameroon: several providers are located abroad.
5. Retention periods
| Data | Period |
|---|---|
| Account | as long as the account is active, then 3 months after its deletion |
| Transactions, credit purchases, receipts | 10 years (OHADA accounting retention period) |
| Consent log | duration of the relationship, plus 5 years (evidence) |
| Student proof | 30 days after the decision, then the document is deleted (only the result is kept) |
| Conversations with Aureo | 6 months |
| Messages to support | 3 years after closure |
| Security logs | 12 months |
| Waiting list without an account | until the service launches or you unsubscribe, at most 24 months |
6. Cookies
- Session cookie (strictly necessary): it keeps you signed in across Aureus Prime spaces. It is set on
.aureusprime.com. - Preferences (strictly necessary): display language and theme.
- Bot protection (Google reCAPTCHA): on some forms, Google may set cookies and analyse technical information about your device to detect bots and fraud.
- No advertising cookies and no audience-measurement cookies. Our visit statistics do not set cookies.
If we ever add cookies that require your consent, we will ask you before setting them.
7. Your rights
You can at any time:
- access your data and obtain a copy;
- correct it;
- request its deletion, subject to the data we must keep (transactions, evidence);
- object to certain processing;
- withdraw your consent to announcements:
- email: link in every email;
- SMS: link at the end of every announcement SMS;
- all channels: page
compte.aureusprime.com/notifications.
To exercise your rights: donnees@aureusprime.com. We reply within 30 days. We may ask you to prove your identity.
You may also refer the matter to the competent Cameroonian data protection authority.
8. Security
We protect your data with appropriate measures:
- encrypted connections (HTTPS);
- passwords stored in irreversibly encrypted form;
- session cookie not accessible to scripts;
- restricted access;
- audit logs;
- verification of sign-ins from a new device.
As no system is infallible, we will inform you in the event of a data breach likely to affect you.
9. Minors
The services are not aimed at people under 16. Some services (Aureus Gate, Aureus Dev and Marketing services) are reserved for people aged 18 and over. We do not knowingly collect data from people under 16; if this happens, write to us and we will delete it.
10. Changes
In case of a significant change, we will notify you by email before it takes effect. The applicable version is always shown at the top of this page.