Privacy policy
Last updated: 6 November 2026
What we collect
When you join the waitlist: your name, your business name, city, WhatsApp number, and email if you give one. We also store when you consented. We don't keep your IP address, only an encrypted fingerprint to block abuse.
Why
Only to contact you about the waitlist and the SARMD pilot. We don't sell your data or share it with anyone for their own use.
Where it's stored
In a database in the European Union (Paris). Providers we use: Supabase (database), Hostinger (website hosting), Resend (email), PostHog (cookie-free analytics).
Facebook and Instagram
If you connect your Facebook Page and Instagram account, we store the Page and account ids and names, and an access token kept encrypted in a secure vault, never in plain text. We use it only to publish posts you approved, answer messages sent to your business, and read your page statistics for your daily report. We don't use it for advertising and don't share it.
Deleting your data
Send /disconnect to the SARMD bot in Telegram, or remove SARMD in Facebook (Settings → Business integrations): we then delete your Facebook and Instagram access tokens automatically. To delete everything we hold about you, email us and we'll confirm within 30 days.
Your rights
You can access, correct or delete your data under Moroccan Law 09-08. Email us and we'll reply.