Privacy policy
Version 2026-09-28
This policy describes the processing of personal data carried out by CERTIVA, in accordance with Loi n° 2024/017 du 23 décembre 2024.
Data controller
Processing is carried out for Directorate General of Taxation by the platform operator (CERTIVA, a NovaGov Africa product), which has appointed a data protection officer.
Data processed
Representative data (last name, first name, job title, email, phone), sign-in data and security logs, the company's tax data and certified documents. Personal data of individual customers is optional and never published.
Purposes
Account management, certification and verification of documents, platform security, compliance with legal obligations. No data is used for commercial purposes.
Hosting
Data is hosted according to the residency rule applicable in the country, with no transfer to third parties other than as provided by law.
Retention period
Tax documents and audit logs are kept for 10 years, the legal archiving period. Account data is deleted or anonymised when the account is closed, subject to these obligations.
Your rights
You can access, correct and export (JSON and PDF) your data and request the deletion of your account from Settings > My data. Certified tax data cannot be corrected: a credit note replaces it. Deletion anonymises your account; tax documents and audit logs are kept for the statutory retention period.
Requests to the data protection officer
Requests that cannot be handled in self-service (objection, restriction, a question about processing) are sent to the officer from Settings > My data, where their progress can be followed. An answer is given within 30 days at most.
Data breach
Any personal data breach is notified to the data protection authority within 72 hours of its discovery, and to the persons concerned where the law requires it.
Contact
To exercise your rights or for any question, send your request to the data protection officer from your account; you will receive an answer within the time limits set by law.