Privacy Policy

Who is responsible for your data

Gemma Madagascar is operated by Gemma Madagascar Sarlu, based at Antananarivo, Madagascar. We are responsible for the personal data described in this policy. For privacy questions, access requests, or account deletion, contact [email protected]. General support is available at [email protected].

Data we collect

Account data: your name, email address, email verification status, profile image where available, and account identifiers. If you register with a password, our authentication system stores a password hash, rather than your readable password.

Access application data: the contact name, phone number, address, company name, and tax identifier you enter during onboarding, together with your access status, administrator review notes, and review history. These details are supplied by you; Google Sign-In does not supply your phone number, postal address, or tax information.

Invoice data: your selected products, quantities or weights, prices, customer and company details, invoice requests, and the resulting invoice records and documents. Draft selections and customer details can also be saved locally in your browser.

Technical and preference data: authentication and session records, including IP address and browser information where available, security information needed for sign-in, and your selected language, currency, and theme.

Google Sign-In: access, use, and storage

Google Sign-In is optional. When you choose to continue with Google, we request only the OpenID Connect permissions openid, email, and profile. We receive your Google account identifier, email address and verification status, name, and profile picture URL where available. We never receive your Google password and do not request access to Gmail, Google Drive, Contacts, Calendar, or other Google service content.

We use this information to create or identify your Gemma Madagascar account, authenticate you, display your account identity, and support your account. Signing in does not automatically grant access to the restricted storefront: you must complete your contact details and receive administrator approval.

Our authentication system stores your account profile and linked Google account identifier in our server database. It also stores OAuth identity and access tokens, their available expiry information, and a refresh token if Google supplies one, as part of the linked account record. These tokens are used for authentication and account management; we do not use them to access unrelated Google services.

Information obtained from Google is not sold, used for advertising, used to create unrelated profiles, or used to train general-purpose artificial intelligence models. Access by our team is limited to what is necessary for account support, security, or legal requirements.

Gemma Madagascar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.

Why we use your data

To provide the service you request: create and maintain your account, review your application for storefront access, prepare invoice requests and documents, and answer support enquiries.

To protect the service: manage permissions, prevent unauthorised access and abuse, and investigate technical problems. Where a legal basis is required, these activities rely on our legitimate interests in operating a secure service.

To meet applicable legal obligations, including accounting, tax, and lawful disclosure requirements. Where your consent is required for a use of your data, you may withdraw it by contacting [email protected].

Who receives your data

Authorised Gemma team members can access account and application information to review access requests and provide support, and invoice information to manage your requests. We share only the information needed by providers operating our hosting, database storage, and support communications on our behalf.

When you use Google Sign-In, your browser and our authentication service communicate with Google to complete authentication. Google handles its own account and authentication data under its privacy policy: https://policies.google.com/privacy.

We do not sell personal data or share Google account data with advertisers. We may disclose the minimum necessary information when required by law or to protect against fraud, abuse, or security threats.

Retention

Account profiles, linked Google account records, and access applications are kept while your account remains open. Stored OAuth tokens may remain in the linked account record after they expire, until replaced or removed when the linked account or account is deleted. We do not automatically erase your account when you stop signing in or revoke Google access.

When you request deletion, we review and remove account data, Google profile data, stored Google tokens, and associated personal information that we no longer need, subject to identity verification and applicable legal requirements. Invoice and accounting records may need to be kept for the period required by law, or while a dispute remains unresolved; these records are restricted to those purposes.

Session records have an expiry and are used to manage authentication. Browser drafts and preferences remain on your device until cleared or replaced; server-side account deletion does not clear your browser storage.

Your choices and deletion requests

You may request access to, correction of, or deletion of your personal data, or ask about restricting, objecting to, or obtaining a copy of your data, where applicable law provides these rights.

To request account deletion or removal of data received from Google, email [email protected] from the address associated with your account, with the subject "Account deletion". Tell us whether you want to delete the entire account or remove the Google connection. Please do not send a password or Google token. We may need to verify your identity before acting.

Account deletion and Google disconnection requests are handled by our team. We will explain any records that must be retained and confirm the outcome of your request. You can also contact us to correct details that you cannot change yourself.

Revoking Google access

You can revoke Gemma Madagascar's Google access at https://myaccount.google.com/connections by selecting the application and removing its connection. This revokes the Google permission grant; a future Google sign-in may ask you to authorise the application again.

Revocation does not delete data already stored by Gemma Madagascar, remove invoice records, or necessarily end an existing Gemma Madagascar session. Sign out to end your current session, and contact [email protected] to request removal of the Google connection, stored Google data, or your account.

Cookies and browser storage

We use authentication and sign-in security cookies, and storage that remembers language, currency, theme, and product or invoice selections. Invoice drafts, including customer details entered into them, may be saved in browser local storage so you can continue on the same device.

You can remove cookies and local storage through your browser settings. This can sign you out and erase saved drafts or preferences. We do not use advertising or cross-site tracking cookies.

Security and hosting

The production website uses HTTPS. Authentication sessions use httpOnly cookies, and Google Sign-In uses an OAuth authorisation flow with safeguards against forged sign-in requests. Access to restricted application features is controlled by account roles and approval status.

Hosting or communication providers may process information outside Madagascar or your country of residence, depending on their infrastructure. Contact [email protected] for questions about how your data is handled. No system can guarantee absolute security; report suspected unauthorised access to us.

Children

The service is intended for customers and business users and is not directed at children. If you believe a child has supplied personal data, contact [email protected] so we can review and remove it where appropriate.

Policy updates

We may update this policy when the service or our data practices change. The date shown on this page identifies the current version. Questions about this policy can be sent to [email protected].