Last updated: August 14, 2026

Privacy policy

This policy explains how AfricaCars processes personal data through its vehicle-classifieds service. It is provisional during the launch phase and will be completed with the final operator identity, APDP formalities and service providers before the commercial launch.

Data controller

Current operator: AfricaCars, a provisional trading name. The operating company, RCCM, IFU, registered office and physical address will be added once registration is complete.

Personal-data contact: contact@mail.africacars.bj.

1. Data we collect

  • Account data: name, username, email, telephone number and encrypted password.
  • Seller data: profile, business details, location, displayed contact details and WhatsApp number when provided.
  • Listing data: vehicle details, price, mileage, description, equipment, photos and status.
  • Browsing data: IP address, logs, device, viewed route templates, language, preferences and selected product actions.
  • Security data: login attempts, anti-fraud logs and reports.
  • QR-code data: code identifier, associated listing or profile and redirects.
  • Future payment data: only if subscriptions or paid options are launched, according to the selected payment provider and published sale terms.

2. Why we use data

  • Create and secure user accounts.
  • Publish, display, search, moderate and archive listings.
  • Connect buyers and sellers.
  • Generate, associate and redirect QR codes linked to listings or profiles.
  • Prevent fraud, abuse, illegal content and infringements of rights.
  • Respond to support requests, complaints and reports.
  • Measure audiences, improve the service and correct errors.
  • Send service information and, only when authorized, commercial messages or newsletters.

3. Publicly visible data

A listing or seller profile may display the chosen name, city or area, vehicle information, photos, price, equipment, listing status and contact methods that the seller chooses to publish. Do not publish an identity document, full registration document, personal supporting document, identifiable face, unblurred number plate or sensitive information in listing photos or text.

4. Cookies and similar technologies

AfricaCars may use cookies, browser storage or similar technologies to maintain sessions, protect the service, remember the chosen language, measure audiences and improve the experience.

AfricaCars automatically uses PostHog product analytics for all visitors, without an opt-in prompt, to measure manually emitted page views and selected product actions such as searches, listing views and seller-contact clicks. Events may contain a route template, technical browser or device information, the application version and a pseudonymous identifier stored in the browser. For a signed-in user, they may also contain the internal account identifier and coarse account fields: account category, professional status and whether a username, telephone number or location is present, but not those field values.

Before an event is sent, AfricaCars replaces raw current URLs with safe route templates and removes referrers and route, query or campaign values. Authentication, password-reset or invitation tokens, email addresses, telephone numbers, VINs and listing descriptions are not intended to be sent. Automatic click capture, session recordings, surveys and feature flags are disabled.

5. Recipients and service providers

Data may be processed by the AfricaCars team and strictly necessary technical providers for hosting, email, mapping, authentication, security, support and, later, payments. Audience-measurement events are processed by PostHog, Inc. in the region configured for the AfricaCars PostHog project.

6. Transfers outside Benin

Some technical providers, including PostHog depending on the configured project region, may host or process data outside Benin. When this occurs, AfricaCars must verify that appropriate contractual, technical and organizational safeguards protect that data.

7. Indicative retention periods

  • Accounts: while in use, then until deletion or prolonged inactivity.
  • Listings and photos: while published, then in a limited archive for evidence, moderation or disputes.
  • Technical and security logs: for a limited period proportionate to security needs.
  • Analytics events: according to the retention configured for the PostHog project, or until an earlier deletion request is applied where appropriate.
  • Reports and complaints: for the time needed to handle them and retain evidence.
  • Marketing consent: until withdrawal and for the time needed to prove that withdrawal.
  • Future payment data: according to legal, accounting and tax obligations applicable to the paid service.

8. Your rights

You may request access, correction, updating, objection, restriction or deletion when those rights apply. You may also withdraw consent to direct marketing at any time.

To exercise your rights, email contact@mail.africacars.bj and describe your request and the information needed to identify you. You may also contact Benin’s Personal Data Protection Authority if you believe your rights have not been respected.

9. Security

AfricaCars must use reasonable safeguards, including access controls, encrypted passwords, logging, backups, restricted internal access and abuse monitoring. No system is infallible, so users must also protect their credentials and report suspicious activity.

APDP formalities to be completed

Before the final public opening and the launch of subscriptions or paid options, AfricaCars will verify the formalities required by the APDP, including any declaration, register, authorization or other obligation applicable to personal-data processing.