Privacy policy | Siyaha Pro

This privacy policy explains how Siyaha Pro, publisher of the Siyaha Pro platform available from https://siyahapro.com, collects, uses, stores and protects personal data. It applies to website visitors, people who contact us, free trial users and subscribing clients.

We process personal data in accordance with Moroccan law no. 09-08 on the protection of individuals with regard to the processing of personal data, under the supervision of the National Commission for the Control of Personal Data Protection (CNDP). Where our services are directed at people located in the European Union, we also apply the principles of the General Data Protection Regulation (GDPR).

1. Data controller

The controller of data collected on the website and in the course of our business relationship is Siyaha Pro. For any question about your data, you can reach us through our contact page: Contact.

2. Data we collect

Depending on how you use our services, we may collect the following categories of data:

Identification and contact data: first and last name, business email address, phone number, company name, job title, country.
Account data: username, role, language preferences, workspace settings. Passwords are stored in encrypted form and can never be read by our team.
Commercial and billing data: chosen plan, subscription history, invoices, information required for payment and accounting.
Usage and technical data: IP address, browser and device type, pages viewed, login and security logs.
Content of your communications: messages sent through the contact form, demo requests and exchanges with support.

We do not knowingly collect sensitive data within the meaning of law no. 09-08 through the public website.

3. Why we process your data

We use your data to:

respond to contact, demo or information requests;
create and manage your account, free trial and subscription;
provide, maintain, secure and improve the platform;
deliver assistance and technical support;
issue invoices and meet our accounting and tax obligations;
inform you of significant changes to the service;
measure website traffic, only where you have given consent;
prevent fraud, abuse and security incidents.

4. Legal basis

Each processing activity relies on an appropriate basis: performance of a contract or pre-contractual steps (account, trial, subscription, support), compliance with a legal obligation (invoicing, accounting records), our legitimate interest (security, service improvement, reasonable business prospecting) or your consent (audience measurement, certain communications). You may withdraw your consent at any time, without affecting processing already carried out.

5. Data entered by our clients in the platform

Our clients use Siyaha Pro to run their own operations: customer records, passengers, bookings, suppliers, drivers, documents and invoices. For this data, the client acts as data controller and Siyaha Pro acts as processor, solely on the client's instructions and in order to provide the service.

In this context, we undertake to:

use this data for no purpose other than providing the service;
never sell or rent it to third parties;
restrict access to the people who need it for support or maintenance;
implement appropriate security measures;
assist the client in responding to data subject requests;
return or delete the data at the end of the contract, as set out in the terms and conditions.

The client is responsible for ensuring it has a lawful basis for the data it enters and, where required, for completing its own formalities with the CNDP.

6. Who receives your data

Your data is accessed by authorised staff of Siyaha Pro. It may be shared with technical service providers who help us deliver the service (hosting, email delivery, payment, audience measurement), strictly within the limits of their assignment and under confidentiality commitments. It may also be disclosed to public authorities where required by law. We never sell personal data.

7. International transfers

Some of our providers may be located outside Morocco. Where data is transferred to another country, we ensure that the transfer complies with the conditions of law no. 09-08 and, for individuals covered by the GDPR, that it is subject to appropriate safeguards such as suitable contractual clauses.

8. How long we keep data

We keep data only for as long as necessary for the purposes pursued:

prospect data is kept for a reasonable period after the last contact, then deleted or anonymised;
account data is kept for the whole duration of the contractual relationship;
billing data is kept for the period required by applicable accounting and tax rules;
technical and security logs are kept for a limited period proportionate to their purpose.

Data entered by clients in the platform is kept according to the rules set out in the terms and conditions and deleted at the end of the return period.

9. Security

We apply technical and organisational measures designed to protect data against unauthorised access, loss, alteration or disclosure: encrypted connections, secure access with personal credentials, role based permissions, logging of sensitive actions and staff awareness. As no system is completely infallible, we encourage you to choose a strong password and never share it.

10. Your rights

Under law no. 09-08, you have the right to information, access, rectification and to object on legitimate grounds, as well as the right to object to direct marketing. If the GDPR applies to you, you also have the right to erasure, to restriction of processing and to data portability.

To exercise these rights, contact us via Contact and describe your request. We may ask you to prove your identity. We respond within the time limits set by applicable law. You may also lodge a complaint with the CNDP or, if you live in the European Union, with the data protection authority of your country.

If your data was entered in the platform by one of our clients (for example a travel agency whose customer you are), please address your request directly to that company, which is the data controller.

11. Cookies

The website uses cookies that are strictly necessary for it to work and, with your consent, audience measurement cookies. Details are given in our cookie policy. You can change your choices at any time using the "Cookie preferences" link at the bottom of every page.

12. Minors

Our services are intended for professionals. They are not directed at minors and we do not knowingly collect data about them through the website.

13. Changes to this policy

We may update this policy to reflect changes to our services or to the law. The date of the last update appears at the top of the page. If we make a significant change, we will inform our clients by appropriate means.

14. Contact us

For any question about this policy or the way we handle your data, write to us via Contact. You can also return to the home page.