Privacy policy

• Your account: first name, last name, email address, country of residence, password (never stored in clear: it is hashed) or your Google account if you sign in with Google.
• Your WhatsApp number, and your answers to the welcome questions (how you heard of us, services used, usage, volume) — these answers are optional.
• Your bip purchases: amount, payment method used, date and status. We never see your bank card details or your mobile money codes.
• Your number orders: service, country, number assigned, and the SMS received on that number (including verification codes).
• Technical data: IP address and browser type, used for security (limiting sign-in attempts, preventing fraud) and to fix errors.

• To provide the service: create your account, credit your bips, assign you a number and show you the SMS received (performance of the contract).
• To send you essential emails: verification code, password reset (performance of the contract).
• To answer you and help if an order gets stuck, including by WhatsApp (performance of the contract).
• To secure the service and prevent abuse (legitimate interest).
• To keep our accounts and meet our legal obligations (legal obligation).
• To better understand where our clients come from, using the optional welcome answers (legitimate interest).
• To add you to the bipsbips WhatsApp community, only if you ticked the box for it (consent, which you can withdraw at any time).

We use providers that process some data on our behalf, only for the service they provide to us:

• Vercel (United States): website hosting.
• Neon (database hosted in Germany, European Union): storage of your account and orders.
• Upstash: temporary technical storage (sessions, attempt limits).
• Moneroo and Maketou: payment of your bips, depending on your country.
• Google: sign-in with your Google account, if you choose that option.
• Resend (United States): sending emails.
• HeroSMS: supply of numbers and reception of SMS. We do not pass on your name or email.
• Ably: showing codes live on your page.
• Cloudflare: domain name management.
• YouTube: the presentation video only loads if you click on it.

Some of these providers are located outside the European Union, notably in the United States. These transfers are covered by the safeguards provided by law (European Commission standard contractual clauses or an equivalent mechanism).

• Your account and orders: as long as your account exists.
• Verification codes sent by email: erased once expired (15 minutes).
• The history of emails sent: 30 days.
• Payment data needed for accounting: as long as the law requires (up to 10 years), in anonymous form if you deleted your account.

When you delete your account, your name, email, WhatsApp number, country, welcome answers, Google link and notifications are erased immediately.

bipsbips only uses technical cookies that the website needs to work, and no advertising cookie or tracking tool:

• sign-in cookies, which keep you signed in (24 hours without activity, 7 days at most);
• a security cookie that protects your actions against forged requests;
• a cookie that remembers the language you chose (French or English).

Your browser also keeps a few practical settings (for example whether you hid the video card). These cookies and settings are not used to track you and therefore do not require your consent.

At any time you can:

• access your data and get a copy of it;
• correct it (part of it directly in your profile);
• erase it: « Delete my account » button on the Account page;
• object to some uses or ask for them to be restricted;
• withdraw your agreement to the WhatsApp community.

To exercise these rights, write to contact@bipsbips.com from your account email. We answer within one month.

If you believe your rights are not respected, you can contact the data protection authority of your country (for example the CNIL in France or the CDP in Senegal).

Exchanges with the website are encrypted (HTTPS), passwords are hashed (never stored in clear), and access to data is limited to the people who need it to run the service.

bipsbips is for people aged 18 and over. We do not knowingly collect data about minors.

We update this policy when the service changes; the date at the top of the page shows the latest version.

For any question about your data: contact@bipsbips.com.

The French version prevails; the English version is a translation.