Privacy policy
Last updated: 27 September 2026
An establishment entrusts us with its orders, its till and sometimes its guests. This page simply says which data passes through SoftOrderGlobal, why, with whom, for how long, and how you can have it corrected or erased.
This is a translation provided for convenience. The French version is the only legally binding text; in case of discrepancy, it prevails.
1. Who we are
The SoftOrderGlobal platform — management software for hotels, restaurants and bars (floor, kitchen, till, stock, front desk, accounting, QR-code ordering) — is published by NEXT GEN CONSULTING, a single-member limited liability company (SARLU) with capital of 1 000 000 F CFA, registered with the Abidjan Trade and Personal Property Register (RCCM) under number CI-ABJ-03-2022-B13-04523, whose registered office is in Abidjan, Cocody Angré 9ème Tranche. Full details are set out in the legal notice.
For any question about your personal data, write to us at contact@softorderglobal.com, putting “Personal data” in the subject line.
2. Our role depending on the data
The law distinguishes between whoever decides on a processing activity and whoever carries it out on someone else's behalf. We are one or the other depending on the data:
- We are the data controller for visitors to this site, for people who write to us or request a demonstration, and for the accounts of our business customers (establishments, administrators, subscription billing).
- We are a data processor for the data that establishments enter or collect using the platform: their staff, their customers, their orders, their stays and their payments. In this case, it is the establishment that decides what it collects and is your first point of contact. We only use this data to provide the establishment with the service, never for our own purposes, and we never sell it to anyone.
3. The website softorderglobal.com
This site is a static showcase. It does not set any cookies, does not use any audience-measurement tool, and does not contain any forms. The “Request a demo” buttons lead to the contact form on nextgen-consulting.ci, our publishing company's website: the information you enter there is processed under its privacy policy.
- Like any website, our host (Vercel) receives your IP address and technical information about your browser in order to serve you the page and protect the site against abuse.
- The homepage loads its fonts from Google Fonts and its icons from unpkg: these services receive your IP address when the page loads.
- The “Write to us” links open your e-mail application. If you write to us, we keep your message and your contact details so we can reply and, where relevant, prepare a quote.
4. The platform (app.softorderglobal.com)
Establishment and staff accounts
- Data: name, e-mail address, phone number, role, establishment and site, PIN code or password (stored encrypted, never in plain text).
- Why: to log in, to give each person the rights of their role, and to keep one establishment's data strictly separate from another's.
Activity and audit log
- Data: who did what and when — orders, payments taken, discounts, cancellations, stock movements, till openings and closings, logins, registered devices.
- Why: traceability of the till and of stock, fraud prevention, technical support, and the establishment's accounting obligations.
Subscription billing
- Data: company name, billing contact, invoices and the subscription's payment history.
- Why: to perform the contract and to meet our accounting and tax obligations.
Smart assistant
When an establishment activates the assistant (for example on Telegram or WhatsApp), the questions asked and the establishment's data needed to answer them (sales, stock, orders) are sent to Google's Gemini artificial-intelligence model to produce the reply. The assistant is only active if the establishment has configured it.
5. Establishments' customers
If you order by QR code, online, or from your room at an establishment that uses SoftOrderGlobal, the establishment is responsible for your data and we process it on its behalf. Depending on what the establishment has activated, this may include:
- your name or room number, and the content of your orders;
- your phone number and address, for a delivery or to send you a payment link or a receipt by SMS or WhatsApp;
- your stay details (dates, room, room bill);
- the status of your payments. We never receive your Mobile Money code or your full card details: payment takes place with the payment provider;
- in Côte d'Ivoire, the billing information the law requires to be sent to the tax authorities (the standardised electronic invoice (FNE)).
To exercise your rights over this data, contact the establishment first. You can also write to us: we will pass on your request and help the establishment respond to it.
6. Our providers
We use providers who only access data to the extent necessary for their service:
| Provider | Service | Data involved |
|---|---|---|
| Supabase | Database, authentication, server functions, file storage | All of the platform's data |
| Vercel | Hosting of the website and the web application | IP address, technical browsing data |
| Kkiapay, CinetPay, Wave, Orange Money | Online and Mobile Money payments, depending on what the establishment has chosen | Amount, reference, payer's phone number |
| CinetPay | Sending SMS messages | Phone number, message content |
| Meta (WhatsApp), Telegram | Notifications, payment links, assistant | Messaging number or ID, message content |
| Google (Gemini) | Smart assistant, when activated | Questions asked, establishment data needed for the reply |
| Resend | Sending service e-mails | E-mail address, message content |
| Ivorian tax authorities (FNE) | Invoice certification, legal obligation | Billing data |
| Google Fonts, unpkg | Fonts and icons for the showcase site | IP address |
Some establishments also install a local SoftOrderGlobal server on their premises, to keep serving during an internet outage. It keeps a copy of the data for the site in question, which remains in the establishment's custody and resynchronises with the platform once the connection returns.
7. Transfers outside your country
Several of these providers (in particular hosting, messaging and the smart assistant) process data on servers located outside Benin, Senegal and Côte d'Ivoire, particularly in Europe and the United States. We choose providers who make contractual commitments on the security and confidentiality of the data, and we limit what is sent to them to what is strictly necessary.
8. Retention periods
- Messages and demo requests: for the duration of the exchange, then up to three years without any further contact from you.
- An establishment's accounts and data: for the whole duration of the subscription. At the end of the contract, the establishment may request an export for thirty days; the data is then deleted, except for what the law requires us to keep (see the terms and conditions).
- Audit log: 12 months by default, adjustable depending on the plan subscribed to; it is automatically purged beyond that.
- Invoices, payments received and accounting records: for the period required by the accounting and tax law of the establishment's country.
9. Security
- Encryption of exchanges (HTTPS) between your device, the platform and our providers.
- Strict separation of data: one establishment never sees another's, and each staff member only sees what their role allows.
- Passwords and PIN codes are never stored in plain text; till devices are registered and can be revoked.
- A log of sensitive actions, backups, and access by our team limited to what support requires.
In the event of a data breach likely to affect you, we notify the establishment concerned and, where the law requires it, the competent authority.
10. Your rights
Under the law of your country, you have a right of access, rectification, erasure and objection over your data, and the right to withdraw your consent where the processing is based on it.
To exercise it, write to contact@softorderglobal.com (or to the establishment, if you are its customer). We may ask you to prove your identity, and we respond within one month.
If you believe your rights are not being respected, you can refer the matter to your country's data protection authority:
- Benin: Autorité de Protection des Données à caractère Personnel (APDP — Personal Data Protection Authority);
- Senegal: Commission de Protection des Données Personnelles (CDP — Data Protection Commission);
- Côte d'Ivoire: Autorité de Régulation des Télécommunications/TIC de Côte d'Ivoire (ARTCI — Telecommunications/ICT Regulatory Authority).
11. Cookies and local storage
This showcase site does not set any cookies.
The application (app.softorderglobal.com) stores in your browser only what is strictly necessary for it to work: your login session, your display preferences and, on staff devices, a copy of service data so work can continue without internet. This storage is never used for advertising or tracking, and it is cleared on logout or by clearing the data stored by your browser.
12. Changes
We will update this page whenever our services or providers change. The date at the top of the page shows the latest version. In the event of a significant change, we notify establishment customers before it takes effect.