Privacy Policy

SangoServices is a directory of workers in Cameroon, published by Sango Sarl (Douala). This page says, without jargon, what data we process, who can see it and how to exercise your rights. Any question: contact@sangoservices.com.

If you are a worker, your profile is a public page that search engines such as Google can show. It shows your first name, your photo, your trades, your pitch, your rate (unless you hide it), your experience, your skills, languages and certifications, your city and neighbourhood, the number of confirmed hires and the date you joined. Your last name is not on it.

Your phone number is not written on the page: any visitor can display it by pressing the contact button, within a daily limit (1 free phone number a day without an account, 3 with a free account, then 200 FCFA per number (free during the launch)). Once displayed, the number is out of our control: the person can call you or message you on WhatsApp. We tell you every time your number is taken (in the app, by notification and by email if you gave one), with the person's name when they have an account.

If you publish your CV, its page is public and can appear in search engines. It shows everything you put in it, including your full name, your photo and your phone number, and, if you filled them in, your year of birth, nationality, marital status, sex and your references (name and phone number of the people you list: ask for their agreement). Your email is not on it. You can unpublish or delete your CV at any time.

If you hire with an account, your employer page is public: it shows your business name (or your display name), your logo, your verification level, the date you joined and the number of your open listings. The content of the listings and requests you publish is public; while a listing is open, it also shows a WhatsApp button to the number it carries, which disappears once it is filled, withdrawn or expired. Your name is not shown on it.

• Your account: your phone number (you sign in with a code), and your email address if you add one.
• Your worker profile: what you enter (see above), your portfolio photos, and the ID documents and selfies sent for verification, which are never public.
• Your GPS position, only if you allow it: when you sign up or edit your profile, to place you (only your city and neighbourhood are published, but visitors who search "near me" see the distance to you); and when you search for a worker "near me", the position sent with the search is recorded.
• Your directory searches (trade, city, text) and contacts: which profile was contacted, when, and by which account if the person was signed in.
• Your email address if you leave it without creating an account (after seeing a number, or for an alert): once confirmed, it is used to send you the profiles you asked for and to ask whether you hired someone.
• Technical data: the pages viewed and the steps taken (see "Audience measurement"), and an encrypted fingerprint (hash) of your network address to limit abuse.

Run your account and your profile, connect workers with people who hire, verify identities, tell you about what concerns you, prevent abuse (contact limits, bots) and improve the site. We do not sell your data and we do not use it for advertising.

Notifications go through the app, push notifications and email. SMS and WhatsApp are used to send your sign-in codes; we may also send workers, on WhatsApp, a daily summary of how many times their number was taken.

SangoServices is one of the products of Sango Sarl (with SangoBureau, SangoImmo and SangoBids), which share the same database. When you confirm your phone number or your email, it may be linked to your account on these other products. From SangoBureau, and at your request, your CV can be published here or your profile reused to pre-fill a CV. Our service providers:

• Supabase: database hosting, in the European Union.
• Vercel: hosting of the site and of our servers (run in Paris), and of their technical logs; what our servers write there shows your number and email masked ("+237 6•• •• •• 34") and never your sign-in codes.
• Backblaze: storage of photos and, in a private space, of verification documents.
• Resend: sending emails (your address and the content of the message).
• SMSala: sending sign-in codes by SMS or WhatsApp (your number and the code).
• Expo, then Google (Firebase) or Apple: the app's push notifications (a device identifier and the notification text); on the site, your browser's notification service.
• Sentry: error reports from our servers (passwords, codes and sign-in tokens are removed from them, and your number and email are masked) and from our team's internal tool. The site and the app send none from your device.
• Upstash: anti-abuse counters tied to your network address, erased at the end of their window (from a few minutes to a day).
• OpenStreetMap (Nominatim): if you allow location when signing up on the site, your coordinates are sent to it to find the name of your neighbourhood.
• Google Analytics: audience measurement (see below).
• IndexNow: the address of published profile and CV pages, so that search engines update them.

We set a "sango_vid" cookie: a random identifier, with no name, number or address in it, kept for 13 months after it is created. It tells us whether a visitor comes back and which path (search, profile, contact) leads to a contact, without knowing who they are. It is never shared or used for advertising.

The site also loads Google Analytics, configured for audience measurement only: Google signals (linking with Google accounts, demographics) are turned off, ad personalisation is not allowed, and its cookies (_ga) expire 13 months after your last visit. As on any site that uses it, Google receives the address of the page, information about your device and your network address.

You can refuse this measurement with the button below. If your browser sends the Global Privacy Control signal, we honour it without asking. Either way, Google Analytics is not loaded, the sango_vid cookie is not created (an existing one is deleted, as are the Google Analytics cookies), and the events the site records no longer carry a visitor identifier. What remains: the encrypted fingerprint of your network address, used for security (contact limits, bot detection), and, if you are signed in, what you do with your account.

• Your account and your profile: until you delete them.
• When your account is deleted (48 hours after the request, which you can cancel by signing in again before then): everything that identifies you is erased — number, email, name, photo, portfolio, neighbourhood, position, pitch, the whole CV and its page, verification documents, notifications, devices, alerts, listings, your profile's statistics — along with your files in our storage, and the link with your identity on the other Sango products. What remains, with nothing that identifies you, are the records that also belong to other people (for example the date and outcome of a contact). The details are on the account deletion page.
• Sign-in codes: they expire after 15 minutes, are stored encrypted and are erased within 2 hours.
• Cookies: sango_vid 13 months after it is created, the Google Analytics ones 13 months after your last visit, your choice not to be measured 13 months.
• Statistics (pages viewed, searches, contact steps, CV downloads, site performance) and your notifications: erased after 13 months, like the sango_vid cookie. The position sent with a "near me" search is rounded to about 1 km after 30 days.
• An email address left without an account and never confirmed is erased after 30 days. A confirmed address stays in our database after you have stopped the emails; write to us to erase it.

Each of these emails contains a link to stop it: the summary and tips sent to workers (first-days tips included), answers to your requests, emails sent to an address left without an account (once the address is confirmed), and each search alert. Summaries and tips only go to an address you have confirmed. Without a stop link: sign-in codes and confirmation links, which you ask for yourself, and notices about what happens to your account (your number was taken, a contact request or its answer, a question about a contact you had, a verification result); they stop with the account, and to stop receiving them by email, write to us.

Traffic with the site and the app is encrypted (HTTPS). Sign-in codes are stored encrypted (hashed). Verification documents are in a private storage space, viewable only through a temporary link.

You can access your data, correct it, ask for it to be erased and object to its use, rights provided for in particular by Law No. 2024/017 of 23 December 2024 on the protection of personal data in Cameroon. You correct your profile yourself in the app or on the site, and can hide your rate or unpublish your CV. For anything else, write to us; to delete your account, follow the steps:

• contact@sangoservices.com
• Delete my account: how to do it

When what we do with your data changes, this page changes too, with its update date.