Privacy policy

Data controller

Mali Kura Académie Center, [À DÉFINIR], publisher of Diatigui Cloud (diatiguicloud.ml), is responsible for your account and payment data. Contact for your data: contact@diatiguicloud.ml.

For the data you put into our services yourself (files, sites, servers), you are the controller: we only process it for you, on your instructions, as a technical provider.

Legal framework

We process your data in accordance with Law No. 2013-015 of 21 May 2013 on the protection of personal data in Mali, amended by Law No. 2017-070 of 18 December 2017. The supervisory authority is the Autorité de Protection des Données à caractère Personnel (APDP).

Formalities with the APDP: [À DÉFINIR].

Data collected

• account: name, email address, account type and organisation name;
• Google sign-in, if you choose it: name and email address sent by Google;
• payments: amount, payment method, reference and date. Card numbers are entered with our payment provider and never sent to us; for Mobile Money, the phone number is sent to the provider to validate the payment;
• services: configuration of servers, spaces and sites;
• technical logs: IP address, dates, pages and actions, for security and fraud prevention;
• your files and the content of your sites and servers, which we do not look at, except for a technical need, at your request or when the law requires it.

Purposes and legal bases

This data is used to provide the services ordered (performance of the contract), to collect payments and keep the accounts (legal obligation), to notify you (end of rental, due date, availability alert) and to keep the site secure and prevent fraud (legitimate interest).

We do not sell your data, we do not use it for advertising and we do not profile you.

Recipients and providers

• Amazon Web Services, Europe region (Paris): accounts, orders, archiving spaces, server sites and static site files;
• our payment provider: payments by Orange Money, Moov Money and card;
• GPU server providers in several countries (preferably in Europe): simulation servers, erased at the end of the rental;
• Cloudflare: delivery of the site and of static sites;
• Google, if you sign in with Google.

These providers only access data for their service. We may also disclose data to the authorities when the law requires it.

The AI you connect to an Isaac server (Claude, Gemini, ChatGPT or another) is your choice: the data you send it is processed by its publisher, under its own policy and your responsibility.

Transfers outside Mali

Our providers process data outside Mali, notably in the European Union and the United States. We choose providers that offer recognised security guarantees. By using our services, you are informed of these transfers, which are necessary for them to work.

Detailed guarantees and any APDP authorisations: [À DÉFINIR].

Retention

Account data is kept as long as the account exists, then deleted, except what the law requires us to keep. Files of a space or site that is not renewed are deleted at the end of the period set out in the terms of use; a GPU server’s disks, at the end of the rental. Technical logs are kept for 30 days, and the audit log of our infrastructure for 400 days. Receipts are kept for the legal retention period of accounting records: [À DÉFINIR].

Security

Traffic goes over HTTPS. Archiving spaces and files are encrypted. Each organisation can only access its own resources, and no access key to our accounts is installed on GPU servers.

No system is infallible: we cannot guarantee absolute security. If a data breach affects you, we notify you and the supervisory authority as the law requires. On your side, you protect your passwords and access.

Your rights

You can ask to access, correct or delete your data, or object to its processing, by writing to contact@diatiguicloud.ml. We may ask you to prove your identity, and we reply within the time limits set by law. You can also contact the APDP.

Deleting data needed for an ongoing service stops that service.

Minors

Our services are reserved for people aged 18 or over. We do not knowingly collect data about minors.

Cookies and browser storage

The site only uses cookies needed for it to work: those of your sign-in session, protected and unreadable by the pages, and those of the Google sign-in flow. It also keeps the chosen theme (light or dark) in your browser.

It uses no advertising cookies and no audience measurement.

Changes to this policy

We may change this policy. The date of the current version is shown at the top of this page; we notify you by email before a significant change.