AssoLinks is an app that helps associations, clubs and communities organise their community life: members, events, news, membership dues, files and conversations. This policy explains what data we process, in the app and on the assolinks.com website, why, who we share it with and what your rights are.
1. Who is responsible for your data?
AssoLinks is published by HTIC Networks, a company based in Abidjan, Cocody Riviera Abatta, Côte d’Ivoire. Contact: [email protected]
Each association that uses AssoLinks decides what it publishes; its officers have the permissions attached to their role, which the association can adjust with the Pro plan.
2. What data do we process?
Account
- full name and email address;
- password, stored only as a one-way hash;
- optional information: phone number, occupation, links to your LinkedIn or Facebook profiles, profile photo;
- if you sign in with Google or Apple: the service sends us your name, your email address (or the relay address provided by Apple if you hide yours) and an account identifier. We never receive your Google or Apple password. For Sign in with Apple, we also keep an authorisation token, used to revoke access when you delete your account.
Association membership
- associations joined, role, section, joining date;
- member number and digital membership card: its QR code, signed and valid for 24 hours, lets the association’s officers check your membership and mark you present at an event;
- visibility, contact and notification preferences.
Content and activity
- news posts, comments, reactions, event responses and attendance recorded at the door;
- contributions to fundraisers and quiz answers;
- photos, videos and documents you share, which the association’s officers approve before they become visible;
- reports you make and members you block.
Membership dues
- chosen membership option, amounts, periods, declared payment method (card, mobile money, cash or bank transfer) and approval status;
- AssoLinks processes no card data: payments are recorded and approved by the association’s officers (president, treasurer or anyone they have given that permission).
Messaging
- conversations and messages exchanged with other members.
Technical data
- session information: device type, sign-in dates;
- notification token, if you accept notifications;
- IP address, used to protect the service against abuse.
Camera: it is used to scan a QR code (an association’s, to join it, and, for officers, a member’s card) and, if you choose, to take your profile photo. A scanned QR code is never stored as an image: only its text is sent.
Photos and files: the app only accesses the photos, videos and documents you choose to send.
We do not access your contacts, your location or your other apps.
3. Why do we use this data?
- To create and manage your account, and let you join your associations.
- To display your associations’ content and let you take part.
- To let officers run the association, according to the permissions attached to their role, which the association can adjust with the Pro plan.
- To send you notifications about your associations’ activity, if you accept them.
- To keep the service secure: prevent abuse, detect suspicious sign-ins.
- To answer your support requests.
We do not sell your data, we do not do targeted advertising and we use no tracking tool. Partner announcements shown by an association are the same for all its members: they are not based on your data.
For users located in the European Union, this processing is based on:
- the performance of the service you requested;
- our legitimate interest in securing the service;
- your consent for notifications, optional information and the website waitlist.
4. Who can see your data?
- Members of your associations, within the association’s visibility rules and your contact preferences.
- Officers of your associations (president, secretary, treasurer…), according to the permissions attached to their role, which the association can adjust with the Pro plan.
- HTIC Networks, for support and maintenance of the service.
- HTIC Networks’ central API (acr-s2s.cmdcall.com), the real-time messaging and notification service of AssoLinks.
- Our technical providers, who act only on our instructions:
- Hetzner Online GmbH (Germany): hosting of the app and website servers;
- Cloudflare, Inc.: network protection, file storage and website audience measurement;
- Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service): delivery of notifications;
- Google and Apple: verification of your identity when you choose to sign in with their service.
- Public authorities, when the law requires it.
Some providers may process data outside your country, in particular in the United States. These transfers are covered by appropriate safeguards, such as the European Commission’s standard contractual clauses.
5. How long do we keep your data?
| Data | Retention |
|---|---|
| Account and profile | As long as your account is active; deleted 15 days after your deletion request (which you can cancel until then) |
| Content published in an association | Deleted with your account, or anonymised (“Former member”) when deleting it would make conversations hard to follow |
| Dues history | Anonymised when the account is deleted, so the association keeps consistent accounting records |
| Website waitlist registration | 12 months after the public launch of the app, or until you ask for deletion |
| Technical security logs (including IP address) | 12 months at most |
6. How do we protect your data?
- Encrypted exchanges (HTTPS) and hashed passwords.
- Secure sessions, which you can revoke at any time, including on all your devices.
- Strict separation between associations, and role-based access.
- Files stored under a random, unguessable address, which the app only shows to the association’s members.
7. Your rights
At any time, you can:
- access your data and request a copy;
- have it corrected;
- request its deletion;
- object to processing or request its restriction;
- withdraw your consent, without affecting what was done before.
Most of these actions are available directly in the app (profile, visibility preferences, account deletion). For any other request, write to [email protected] from your account email address, or from the address you used for the waitlist. We reply within one month.
You can also lodge a complaint:
- in Côte d’Ivoire, with ARTCI (Autorité de Régulation des Télécommunications/TIC de Côte d’Ivoire, the country’s telecommunications and data protection regulator), under Law No. 2013-450 of 19 June 2013 on the protection of personal data;
- in France, with the CNIL (www.cnil.fr);
- in another European Union country, with the data protection authority of your place of residence, under the General Data Protection Regulation (EU) 2016/679.
8. Minimum age
You must be at least 13 years old to use AssoLinks, or the higher age required by the law of your country. If you are under 18, your parents or legal guardian must have read this policy. We do not target children under 13. If we learn that an account belongs to a child of that age, we delete it.
Our rules for protecting minors are published on the Child safety page.
9. The assolinks.com website
Waitlist. When you register an association on the waitlist, we record the association’s name, its country, its number of members, your role, your email address, the language of the page and the date of your consent. This data is used for one thing only: to write to you about the launch of AssoLinks and the pioneer offer. This processing is based on your consent, which you can withdraw at any time. Registrations are deleted 12 months after the public launch of the app, or earlier on request to [email protected]. To protect the form against abuse, the IP address of each submission is used to limit the number of submissions; it is not stored with the registration.
Audience measurement. The website counts its visits with Cloudflare Web Analytics. This tool sets no cookie, uses no persistent identifier and does not follow your browsing from one site to another. It only produces aggregated statistics: page views, country, device and browser type, referring page.
Cookies. The website sets no cookie. Your language and currency choices are remembered in your browser (local storage) and are never transmitted to us.
10. Changes
If we make a significant change to this policy, we will let you know in the app before it takes effect.
11. Contact
HTIC Networks, Abidjan, Cocody Riviera Abatta, Côte d’Ivoire: [email protected]