Aller au contenu principal
DARKOM

Privacy Policy

What data DARKOM collects, why, which providers host it, for how long, and how to exercise your rights.

1. Who is responsible for your data?

The data controller is DARKOM, a company being incorporated (SARL or SUARL) under Tunisian law, publisher of the darkom.tn website and the DARKOM app. For any question about your data: darkomtunisie@gmail.com.

This policy applies to the website, the mobile application and email exchanges with our team. It supplements the terms of service.

2. What data do we collect?

Account data (provided at sign-up, through our authentication provider Clerk): email address, phone number, first and last name, profile picture, preferred language. If you sign in with Google, we receive your Google email, name and profile picture; we do not access your contacts, calendar or files.

Listing data (if you publish a property): transaction type, category, title, description, price, surface, number of rooms, governorate, city, approximate address and geographic coordinates of the property, photos. This data is public by nature, except the exact address, which is not displayed.

Craftsman profile data (if you create a Pro profile): business name, activity category, description, business phone, WhatsApp number, service governorates, logo and cover photo. This data is public; that is its purpose.

Usage data: favourites, messages exchanged with other users, reviews posted, reports, blocks, subscription history.

Payment data: if you subscribe to a plan, the transaction is processed by Konnect (Flouci). DARKOM only receives the transaction identifier, amount, status and date. We never receive or store your card numbers.

Technical data: IP address (used to limit abuse and request volume), browser or device type, pages viewed, error logs. We use no advertising tracking tool.

3. Why and on what basis?

  • Create and manage your account, authenticate you — Performance of the contract (Terms)
  • Publish, verify and display your listings and Pro profile — Performance of the contract
  • Enable messaging, favourites and reviews — Performance of the contract
  • Process subscriptions and issue invoices — Performance of the contract, legal obligations
  • Moderate content, handle reports, prevent fraud — Legitimate interest (platform safety), legal obligations
  • Send you transactional emails (confirmation, moderation, subscription) — Performance of the contract
  • Improve the Service using aggregated statistics — Legitimate interest

We do not send commercial newsletters without your explicit consent and never sell your data.

4. Who has access to your data?

Your data is processed by the DARKOM team and by the following technical providers, which act on our instructions and under their own data-protection commitments:

  • Clerk (Clerk, Inc., United States) — account creation, sign-in, sessions, Google sign-in. Clerk stores email, phone, name, picture and session identifiers.
  • Supabase (PostgreSQL hosting, European Union region) — main database: accounts, listings, profiles, messages, reviews, favourites, subscriptions.
  • Cloudinary (Cloudinary Ltd.) — storage and delivery of listing photos, logos and cover photos.
  • Konnect (Konnect Networks, Tunisia) and Flouci — subscription payments.
  • Netlify (Netlify, Inc.) — hosting and delivery of the website and its APIs.
  • Resend (Resend, Inc.) — transactional email delivery.

Other users see the public information of your listings and Pro profile, as well as your name and picture when you message them or leave a review. Your Advertiser phone number is only visible to signed-in users viewing your listing.

We may disclose data to judicial or administrative authorities where required by law.

5. Transfers outside Tunisia

Some providers (Clerk, Cloudinary, Netlify, Resend) process data in the United States or the European Union. We choose providers offering appropriate contractual and technical safeguards (encryption in transit and at rest, data-protection clauses). The main database is hosted in the European Union.

6. How long do we keep your data?

  • Account: as long as the account is active, then deleted within 30 days of a deletion request. An account inactive for 24 months is notified by email and then deleted.
  • Listings: while published, then 12 months after withdrawal (statistics, disputes), then deleted. Rejected listings are deleted after 90 days.
  • Pro profile: as long as the profile exists; deleted with the account.
  • Messages: 24 months after the last message in the conversation, or when one participant deletes their account (anonymised on the recipient side).
  • Reviews: as long as the reviewed Pro profile exists; anonymised if the author deletes their account.
  • Reports and moderation decisions: 24 months, to track repeat offences.
  • Billing data: 10 years (accounting obligation).
  • Technical logs and IP addresses: 90 days.

7. Your rights

In accordance with Tunisian Organic Law No. 2004-63 on the protection of personal data and, where applicable, the GDPR for residents of the European Union, you have the following rights:

  • Access: obtain a copy of the data we hold about you.
  • Rectification: correct your data directly from your profile, or on request.
  • Deletion: delete your account yourself from the app or the website (Profile, then "Delete my account"), or by writing to us. Your listings, Pro profile and favourites are deleted immediately; other data follows the periods in section 6.
  • Objection and restriction: object to processing based on our legitimate interest.
  • Portability: receive your data in a structured format.

To exercise these rights, write to darkomtunisie@gmail.com from the email address of your account, or use the Contact page. We reply within 30 days. You may also lodge a complaint with the Tunisian National Authority for the Protection of Personal Data (INPDP).

8. Cookies and local storage

We only use cookies and local storage that are strictly necessary for the Service to work:

  • Clerk session (__session, __client_uat): keep you securely signed in. Duration: session or 7 days.
  • Language (NEXT_LOCALE): remember your language (French, Arabic, English). Duration: 1 year.
  • Listing draft (browser local storage): keep the listing you are writing if you leave the page before publishing. Deleted on publication.

We use no advertising cookies, no third-party trackers and no audience-measurement tool that identifies visitors. No consent banner is therefore required; you may block these cookies in your browser, but sign-in will no longer work.

9. Security

Exchanges are encrypted (HTTPS). Passwords are never stored by DARKOM: they are managed by Clerk, which keeps them hashed. Database access is restricted to the technical team and protected by individual credentials. Photos are stored on Cloudinary under non-guessable identifiers. We rate-limit requests per IP address to prevent abuse.

In the event of a data breach likely to put you at risk, we will inform you as soon as possible.

10. Minors

The Service is reserved for people aged 18 or over. We do not knowingly collect data from minors; if you believe a minor has created an account, contact us so that it can be deleted.

11. Changes

This policy may be updated to reflect changes in the Service or in regulations. The update date appears at the top of the page; in the event of a substantial change, you will be informed by email or notification.

12. Contact

darkomtunisie@gmail.com — DARKOM, Tunisia. Contact page.