Privacy Policy and Protection of Personal Data

The "Ma Maison à Moi" service (mamaisonamoi.com) is published by OUENZE SARLU (symbol OZ), a single-member private limited liability company (SARL unipersonnelle) incorporated under Congolese law whose office is located at n° 2, avenue Okito, Quartier Révolution, Commune de la Gombe, Kinshasa, Democratic Republic of the Congo.

For any question relating to your data, you may write to bonjour@mamaisonamoi.com.

RCCM number: CD/KNG/RCCM/24-B-02304; tax number (NIF): A2421380R; share capital: 270,000 Congolese francs (CDF); publication director: Mr Jonathan IZEBE BEN, manager.

OUENZE SARLU has not appointed a data protection officer. The address bonjour@mamaisonamoi.com is the point of contact for any question about your data and for the exercise of your rights.

We seek to collect as little data as possible. In concrete terms, we hold the following items.

Your telephone number (the one used on WhatsApp). It serves as the identifier for your account: there is no password on the public side. You log in by means of a six-digit code that we send you on WhatsApp.

Your name, as you provide it to us.

The properties you list: listing characteristics, location, description, asking price, as well as the elements related to the tracking of the verification and, where applicable, of the lease or the sale.

The verification photographs taken by our teams during the physical visit of the property. These photographs are geolocated, time-stamped, and sealed by a cryptographic signature that attests that they have not been modified after being taken.

A technical fingerprint of your IP address when a report is filed. This fingerprint is "salted", that is, transformed in a non-reversible manner: it allows us to detect and limit reporting abuse, without our being able to reconstruct the original IP address.

If you subscribe to the newsletter, the contact details you leave with us for that purpose.

We do not collect any password, since the public login does not use one. We do not request data that the service does not require.

Each piece of data serves a specific and limited purpose.

The telephone number is used to create your account, to identify you and log you in by code, to manage your sessions, and to put you in contact in the context of a visit or a transaction. The advertiser's number and the visitor's number remain mutually masked until the visit is confirmed: we use them to arrange the connection, not to expose them.

The name is used to identify the author of a listing or a request and to ensure a named follow-up of your files.

The listed properties are used to publish your listings, to conduct the verification, and to ensure the rental or sale follow-up that you entrust to us.

The verification photographs are used to establish and document the "verified" badge attached to a property: they prove that a physical visit took place and in what condition the property was found. This badge attests to a visit and to checks; it does not constitute a guarantee of ownership, the checking of the land title being a separate procedure that is mandatory for a sale.

The salted IP fingerprint is used solely for anti-abuse of reports: to detect repeated or automated submissions that would aim to have a listing removed without cause.

The newsletter contact details are used solely to send you that newsletter, for as long as you are subscribed to it.

Our fraud sensors (abnormal price, photo already seen elsewhere, negative visit feedback, among others) and the "did you visit this property?" loop use this same data for the sole purpose of protecting users against misleading listings.

We do not resell your telephone number. We do not resell your data, in any form.

We do not sell contacts or "prospects" (leads). Our remuneration comes from the verification fees and from a commission when the property is rented or sold, never from the transfer of your information.

We do not display any advertising and do not install any third-party advertising tracking tool on the service.

We share your data with a third party only in two cases: the technical providers strictly necessary for the operation of the service (see the section on hosting), and a legal obligation that we would be required to meet under Congolese law.

The service uses a single cookie: the session cookie. It is strictly functional: it keeps you logged in after you enter your code and enables the service to work. This cookie is of the httpOnly type, which means that it is not accessible to scripts running in the browser.

We do not use any advertising cookie, any third-party audience-measurement cookie, or any tracker intended to follow you from one site to another.

Deleting the session cookie, or logging out, ends the session: you will then have to log in again by code.

Logging in is done without a password, by a limited-use code sent on WhatsApp. There is therefore no password to store, nor to steal.

Your sessions are revocable: you can end an open session, and we can revoke a session in case of doubt.

The verification photographs are sealed by a cryptographic signature at the moment they are taken. Any subsequent modification of a sealed photograph is detectable: this is what gives the "verified" badge its value.

The IP fingerprint retained for anti-abuse is salted and non-reversible: we do not hold the IP address in clear form.

No system is infallible. We implement reasonable measures in light of the state of the art, without claiming absolute security.

The service interface is hosted by Vercel Inc., a provider established in the United States.

The database is hosted by Neon, a managed PostgreSQL database service.

Part of your data is therefore processed and stored outside the Democratic Republic of the Congo, on infrastructure located abroad. We use these providers to operate the service; they act on our behalf and are not intended to use your data for their own purposes.

These providers are bound by contractual confidentiality and security commitments, and access the data only in order to provide their service.

We keep your data only for as long as necessary for the purposes described above, then we delete or anonymize it.

Retention period for the account and the telephone number: twenty-four months after your last activity, or twelve months after the closure of the account.

Retention period for listings and property data after removal or closure of the file: two years.

Retention period for the verification photographs: ten years. This period follows from the evidential value of the sealed files.

Retention period for the salted IP fingerprint used for anti-abuse: twelve months.

Retention period for session data and technical logs: twelve months.

Retention period for the newsletter contact details after unsubscribing: thirty days, the time needed to propagate the deletion.

Where a legal obligation requires us to keep certain data beyond these periods, we keep it only for the period required by that obligation.

You have a right of access to your data: to know what information we hold about you.

You have a right of rectification: to correct inaccurate data, for example your name.

You have a right to erasure of your data, within the limits of what the law may require us to keep.

You can unsubscribe from the newsletter at any time, in one click, from the message you receive.

To exercise these rights, write to bonjour@mamaisonamoi.com from the number or contact linked to your account, or by providing the elements that allow you to be identified. No data protection officer has been appointed: this address is the sole point of contact.

We respond within a reasonable time. The maximum response time we undertake to meet is thirty days.

This policy and the processing of your data are governed by the law of the Democratic Republic of the Congo.

The Congolese text applicable to the protection of personal data is Ordinance-Law No. 23/010 of 13 March 2023 establishing the Digital Code.

A complaint may be addressed to the data protection authority established by the Digital Code. Its contact details will be published here as soon as they are available.

We may change this policy, in particular to adapt it to a change in the service or in the regulations.

The version in force is the one published on mamaisonamoi.com. In the event of a significant change, we will inform you through the usual means of the service.

Version 1, to be validated by a legal expert. Effective date: 21 August 2026. Date of last update: 21 August 2026.