Privacy Policy
We respect your privacy. This policy explains what data we collect, why we collect it, and how you can control it.
Refja SARL
Avenue Tarik Ibn Ziad N°38, Étage 6, Bureau 32 — Tanger, Maroc
1. Overview
Refja SARL ("we", "our", "us") operates Use Moroccan Tech (usemoroccantech.com). This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our platform.
This policy is compliant with Moroccan Law No. 09-08 on the Protection of Personal Data and is aligned with the General Data Protection Regulation (GDPR) principles for users based in the European Union.
2. Data We Collect
We collect the following categories of personal data:
📧 Account Information
Email address, display name, profile photo URL, and company/specialization details you provide voluntarily when creating an account or completing your profile.
📦 Product Submissions
App name, URL, description, category, cover image, and any custom metadata fields you fill in when submitting a product listing.
📊 Usage Data
Page views, product clicks, upvotes, search queries, and session timestamps — used to generate anonymized analytics and improve the platform.
🍪 Technical Data
Browser type, device type, IP address (truncated), and session cookies necessary for authentication and security.
3. How We Use Your Data
We use the data we collect for the following purposes:
- Account management — to create, maintain, and secure your account
- Platform operation — to process submissions, display listings, and enable upvoting
- Communication — to send transactional emails (approval/rejection of submissions, security alerts)
- Newsletter — only if you explicitly subscribed; you may unsubscribe at any time
- Analytics — to understand usage patterns and improve the platform (anonymized)
- Security & fraud prevention — to detect and prevent unauthorized access or abuse
We process your data on the following legal bases: contract performance (operating your account), legitimate interest (security, analytics), and consent (newsletter, optional features).
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:
- Account data — retained until you request deletion
- Product listings — retained as part of the directory; removed upon verified maker request or account deletion
- Analytics data — aggregated and anonymized after 90 days
- Newsletter data — retained until unsubscription
- Legal obligations — certain records may be retained for up to 5 years as required by Moroccan commercial law
7. Your Rights
Under Moroccan Law 09-08 and GDPR principles, you have the following rights regarding your personal data:
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your data ("right to be forgotten").
Right to Object
Object to processing based on legitimate interest.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restrict
Limit how we process your data in certain circumstances.
To exercise any of these rights, contact us at privacy@usemoroccantech.com. We will respond within 30 days. You also have the right to lodge a complaint with the CNDP (Commission Nationale de contrôle de la Protection des Données à caractère Personnel).
8. Security
We implement industry-standard technical and organizational measures to protect your personal data, including:
- HTTPS/TLS encryption for all data in transit
- Firebase Authentication with token-based session management
- PDO prepared statements to prevent SQL injection
- CSRF token protection on all state-changing operations
- Regular security reviews and dependency updates
Despite our efforts, no system is 100% secure. In the event of a data breach affecting your rights, we will notify you and the CNDP within 72 hours as required by applicable law.
9. Children's Privacy
Use Moroccan Tech is not directed to individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it promptly.
10. International Data Transfers
Some of our service providers (Firebase, Algolia, Formspree) may process data outside Morocco and the EU. Where such transfers occur, we ensure they are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) where applicable under GDPR, and equivalent protections under Moroccan law.
11. Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will always reflect the most recent revision. For material changes, we will notify registered users by email at least 30 days before the change takes effect.
Continued use of the platform after a policy change constitutes your acknowledgment of the updated policy.
12. Contact & Data Protection Officer
For any privacy-related questions, data subject requests, or concerns, please contact our Data Protection Officer (DPO):
Data Controller
Refja SARL
Avenue Tarik Ibn Ziad N°38, Étage 6, Bureau 32 — Tanger, Maroc
DPO Email
privacy@usemoroccantech.comWe respond within 30 days.
You may also file a complaint with the CNDP.
Also read our Terms of Service
Terms of Service