Last updated: 30 September 2026
This policy explains what personal data Tunispare processes, why and how, in accordance with Tunisian Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data. This English version is provided for information; the French version prevails.
1. Data controller
The data controller is Tunispare, whose details are given in the legal notice.
2. Data processed
- Account: name, email, phone, password (stored only as a hash).
- Company: company name, tax ID, address and location.
- Activity: stock, sales, repair tickets (including the shop’s customers’ names and phones, device photos and, encrypted, their unlock codes), invoices.
- Orders: delivery or pickup name, phone and address.
- Payments: method, reference and proof. Card data is processed by the payment provider and never stored by Tunispare.
- Technical data: sessions (device, browser, IP address) and security logs.
3. Purposes
- provide the platform and its features;
- handle plans, orders and invoicing;
- send notifications about the account and operations;
- keep the service secure and prevent fraud;
- meet legal obligations, including accounting ones.
4. Recipients
Data is accessible to authorised Tunispare staff, and shared only as far as needed with:
- the other party to an order or quote request (for instance the delivery address for the supplier);
- technical providers: hosting, email delivery, online payment (Stripe, PayPal), bot protection of forms (Cloudflare Turnstile);
- artificial-intelligence model providers, only for the invoices you choose to have read automatically.
5. No resale
Tunispare neither sells nor rents your data, and shows no targeted advertising.
6. Transfers outside Tunisia
Some providers (online payment, email delivery, bot protection, artificial intelligence) may process data outside Tunisia. These transfers are limited to the data the service concerned needs and are made in compliance with the applicable regulations.
7. Repair shops’ customers’ data
When a repair shop records its own customers’ details (sales, repairs, credit), it is responsible for them; Tunispare processes them on its behalf, only to provide the service.
8. Retention
Account data is kept while the account is active, then deleted or anonymised, except accounting documents (invoices, payments), kept for the legal period. Technical logs are kept for a limited time.
9. Security
Hashed passwords (bcrypt), encrypted unlock codes, encrypted connections (HTTPS), email verification, staff access limited and logged.
11. Your rights
Under Organic Law No. 2004-63 you have the right of access, rectification and objection. You can change your details and close your account from your workspace, or write to the contact address.
You can also refer the matter to the National Authority for the Protection of Personal Data (INPDP).
12. Changes
This policy may change; the date of the last update is shown at the top of the page.