PrivacyPolicy

1Data Controller

Cherry Soft determines the purposes and means of the processing of personal data carried out through the DWEXO platform.

2Personal Data Processed

In the context of operating the DWEXO platform (ERP / CRM SaaS), the following categories of personal data may be processed:

• Identification data: first name, last name, email address, phone number, job title
• Professional data: company name, position, role, professional history
• Commercial data: clients, suppliers, quotations, invoices, purchase orders
• Financial data: amounts, transactions, payments, accounting information
• Connection data: user identifiers, IP addresses, connection logs
• Indirect location data: approximate location derived from IP address
• Technical and functional data: activity logs, permissions, action history

DWEXO collects and processes only data that is strictly necessary for the purposes described below.

3Purposes of Processing

Personal data are processed for the following purposes:

• Providing and operating the DWEXO platform (ERP / CRM SaaS)
• Managing user accounts and access rights
• Ensuring commercial, financial, and administrative management
• Enabling collaborative tools and features
• Ensuring security, traceability, and continuity of the service
• Complying with applicable legal and regulatory obligations

4Source of Data

Personal data are collected:

• Directly from the data subjects, during registration or use of the service
• Indirectly, for certain technical data (e.g. IP address)

5Data Recipients

Personal data are accessible only to:

• Authorized employees of DWEXO
• Technical service providers acting as data processors (hosting, maintenance, security), under the authority and instructions of DWEXO

DWEXO does not sell or transfer personal data to unauthorized third parties.

6Data Storage Location

Personal data are stored electronically on secure servers hosted by a professional hosting provider (OVHcloud), located primarily in Europe, and administered by DWEXO.

7Data Retention Periods

Personal data are retained as follows:

• Identification and professional data: contractual duration + 3 years
• Commercial and financial data: legal retention periods applicable
• Connection and location data: 1 year
• Technical data: contractual duration

After these periods, data are deleted or anonymized.

8Data Security and Confidentiality

DWEXO implements appropriate technical and organizational measures to ensure the security and confidentiality of personal data, including:

• Access control and authentication mechanisms
• Connection and activity logging
• Secured infrastructure
• Encryption of data exchanged
• Physical protection of servers ensured by the hosting provider

9Rights of Data Subjects

In accordance with Tunisian law, data subjects have the following rights:

• Right of access to their personal data
• Right to rectification or update
• Right to object to processing for legitimate reasons
• Right to erasure, within legal limits

10Information and Consent

Data subjects are informed of the processing of their personal data:

• through the DWEXO website and platform
• during registration and use of the service

Consent is obtained explicitly, notably through online forms and mechanisms that leave a written trace.

11Changes to the Privacy Policy

DWEXO reserves the right to modify this Privacy Policy at any time. Any changes will be published on the official platforms and will take effect upon publication.