Privacy Policy
Last updated: 23 October 2026
1. Data controller and contact
JELANI TECHNOLOGIES, a French simplified joint-stock company (SAS) with share capital of €1,500, registered with the Pontoise Trade and Companies Register under number 107 539 611, with its registered office at 11 Place d'Alembert, 95100 Argenteuil, France, is the controller for the processing described in this policy. France telephone: +33 6 19 94 76 13 ; Côte d’Ivoire telephone: +225 07 03 60 72 03. Contact for exercising your rights: contact@jelani.ci.
2. Registration for relaunch updates
The relaunch form, embedded on the Website and provided by Tally, collects first name, last name, WhatsApp number and, optionally, email address. These details are used to inform subscribers about the preparations, announcement and arrangements for JELANI's relaunch. Processing is based on the individual's explicit consent given upon registration, which may be withdrawn at any time by writing to contact@jelani.ci.
3. Journey suggestions and mobility research
The “Suggest a journey” feature collects origin and destination areas, approximate geographic positions, days, preferred times, frequency, flexibility and travel preferences. Contributions are voluntary and do not require an account, name or email address.
This information is used to identify needs, compare how they evolve over time, prioritise corridors, study timetables and prepare the progressive rollout of mobility routes. Processing pursues JELANI's legitimate interest in designing and improving its network, subject to applicable law and individuals' rights. A combination of locations and recurring times may amount to personal data even without direct identification.
The data is sent to a secure Supabase function and then stored in the dedicated JELANI Mobility Demand database, separate from systems used in the historical pilot. Individual contributions are not published.
4. Contact and partnerships
The Contact and Partnerships forms open the visitor's email application with a prepared message; visitors must confirm sending the email themselves. JELANI processes received emails to respond to enquiries, consider cooperation proposals and follow up. Processing is based on the legitimate interest in responding to requests and, where applicable, on pre-contractual steps requested by the person concerned. These form messages are not stored in Mobility Demand.
5. Browsing, mapping and security
The Website and its features use Cloudflare (Website hosting, CDN, DNS and prevention of automated submissions through Turnstile), Netim (domain name registration), Geoapify et Leaflet (mapping and place search), Supabase (API and storage for mobility requests), and Tally (relaunch registrations). Technical data exchanged may include IP address, browser information, network requests and data strictly necessary to operate the requested services.
JELANI uses cryptographic network fingerprints to rate-limit submissions and prevent abuse, without storing raw IP addresses in the rate-limit table. Data sharing with providers is limited to the relevant features. JELANI does not sell personal data collected through the Website.
6. Recipients
Data may be accessed by authorised JELANI staff and the technical providers involved in the purposes described: Tally, Supabase, Geoapify, Cloudflare, Netim and the business email provider for received messages. Their respective roles and responsibilities depend on the services provided and the applicable contractual terms.
7. Retention periods
Journey suggestions: three years from submission. This period reflects the gradual deployment of JELANI's network. Research, prioritisation and launch of routes span several years and depend on demand, feasibility, operational capacity and required authorisations. Individual submissions are automatically deleted by a daily scheduled task at the end of this period, or sooner if no longer needed.
Statistics: genuinely anonymised data may be kept longer where it cannot reasonably identify contributors. Deleting individual suggestions does not mean retaining identifiable records indefinitely.
Anti-abuse fingerprints: cryptographic fingerprints are deleted in hourly clean-ups once their initial window is more than 48 hours old. A technical delay of less than one hour is possible.
Contact messages: 12 months from the last relevant exchange, unless the enquiry becomes a matter subject to separate contractual or legal obligations. Messages are kept in the business email system, not in Supabase Mobility Demand.
Prospects and partnerships: up to three years after collection or the last relevant contact initiated by the individual, except where a contractual relationship, legal obligation or other applicable legal basis requires otherwise.
Relaunch registrations: until consent is withdrawn or the stated purpose ends, with a review after 24 months without relevant interaction. Requests to unsubscribe or erase data should be addressed to contact@jelani.ci.
Cookie preferences: six months, stored locally as privacy choices.
Retention periods reflect their respective purposes and applicable legal requirements, including any rules set by competent authorities. Data needed to meet a legal obligation or defend legal claims is retained separately for a legally justified period.
8. Security
Data transmissions are encrypted, access controls are applied, and contributions are checked by the API before storage. Mobility Demand data is kept separate from the historical PoC system. JELANI applies anti-abuse controls and restricts access to authorised individuals.
9. Individual rights
Subject to applicable law, you have rights of access, rectification, erasure, restriction, objection and, where available, data portability. You can withdraw consent at any time without affecting processing carried out before withdrawal.
Requests should be sent to contact@jelani.ci. For suggestions submitted without identification, JELANI assesses the information that could locate a contribution while preventing disclosure to an unauthorised third party.
10. International transfers
Journey suggestions are hosted in a Supabase project located in the European Union (Ireland region). Using international providers also involves technical exchanges and, depending on the service, processing from other territories. JELANI applies the protection mechanisms required for transfers subject to the GDPR and applicable Ivorian law.
11. Data protection in Côte d’Ivoire
Users located in Côte d’Ivoire benefit from the rights under Ivorian Law No. 2013-450 of 19 June 2013 where it applies to processing. The Autorité de Régulation des Télécommunications/TIC de Côte d’Ivoire (ARTCI) exercises the personal data protection powers assigned to it by law. Information on rights and complaints procedures is available at autoritedeprotection.ci.
12. Complaints and updates
Individuals may lodge complaints with the CNIL or, depending on territorial and subject-matter jurisdiction, ARTCI. This policy is updated when processing activities, tools or obligations change materially.