Privacy policy
Last updated: September 15, 2026
To run your shop, Tolipesa processes data about you, your business and your customers. This page explains which data, why, with whom, and how to exercise your rights. In short: your data is used to make Tolipesa work. It is never sold or used for advertising.
Who is responsible for your data
The publisher of Tolipesa, identified in the legal notice, is responsible for your account data.
The data about your own customers that you record in Tolipesa remains your responsibility: we process it only on your behalf, to provide you with the service.
See the legal noticeThe data we collect
- Your account: your name, email address, WhatsApp number and password, which is never stored in plain text, as well as your shop's name, sector, country, city and address.
- Your shop's activity: items, stock, sales, invoices, customers, suppliers, purchases, expenses and till counts, as you and your staff enter them.
- Your staff: the name, email address and role of each person you give access to, and the log of actions taken in the application.
- Your subscription payment: it is handled by our payment provider. We keep the amount, date and status of the payment, but never your bank card number or your Mobile Money PIN.
- Technical data: your IP address, used to choose the website's language from your country on your first visit, and the information needed to keep your connection secure.
Why we use it
We do not sell your data, we do not rent it out, and we do not use it for advertising.
- To run Tolipesa: record your sales, work out your figures, produce your invoices and reports.
- To secure your account: verification codes sent by email and recognition of trusted devices.
- To manage your subscription and send you the emails the service needs: verification, invitations, forgotten password, subscription due date.
- To answer you when you contact us.
Artificial intelligence
When you use the Assistant, the Insights daily summary or the help to write automations, the figures needed to answer you are sent, at the time of the request, to our artificial intelligence model provider (DeepSeek).
Only the data of the shop you are signed in to is used. The artificial intelligence never sees another business's data.
Who we share it with
Your data is only passed on to the providers that help us run Tolipesa, and only for that purpose:
- OVHcloud, which hosts the server Tolipesa runs on;
- SasPay, for subscription payments;
- Resend, for sending emails;
- DeepSeek, for the artificial intelligence features.
Some of these providers are based outside your country, so your data may be processed abroad, only for the purposes described here. We may also be required to disclose data to an authority when the law requires it.
How long we keep it
Your data is kept for as long as your account is active. If you ask us to close your account, we delete your data, except what the law requires us to keep, such as records of subscription payments.
How we protect it
- Exchanges between your device and our servers are encrypted (HTTPS).
- Each business has its own space, closed to everyone else.
- Each employee only sees what their role allows.
- Passwords are stored in an encrypted form that cannot be read back.
- The database is backed up regularly.
Your rights
You can ask at any time to see your data, correct it, delete it, object to certain uses or receive a copy of it. Much of this information can be corrected directly in Tolipesa. For the rest, write to us at contact@tolipesa.com.
You can also contact the authority responsible for personal data protection in your country.
Changes to this policy
We may update this policy, for example as Tolipesa evolves. The date of the latest update is shown at the top of this page.