How Wassit collects, uses and protects your personal data, in accordance with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data.
Template document — legal review required
This text is a working template. It has not yet been validated by Moroccan legal counsel, nor has it been declared to the CNDP (Morocco's data protection authority); the French version is the authoritative text. Have it reviewed before any production use.
Wassit is the controller of the data collected through the platform. Any request relating to your data may be addressed to the contact point indicated at the end of this document.
We collect only the data necessary for the service to operate.
Data is processed in order to perform the contract between us (management of accounts, orders and payments), to meet our legal and accounting obligations and — where you consent to it — for audience measurement and communication purposes.
Non-essential trackers (audience measurement, advertising) are only set after your explicit consent, obtained through the consent banner. You may change your choice at any time.
Trackers strictly necessary for the service to operate (session, security) do not require consent.
Account data is retained for as long as the account is active. Accounting records and invoices are retained in accordance with the retention periods required under Moroccan law. Verification data is deleted once verification has been completed or refused.
Data is neither sold nor rented. It may be disclosed to the service providers strictly necessary to operate the service (hosting, payment, e-mail delivery), who are bound by confidentiality obligations, and to the authorities where the law so requires.
In accordance with Law 09-08, you have rights that you may exercise at any time from your account or by writing to us.
Exercise your rights from your account
A JSON export of your account, correction of your details and permanent deletion are available directly inside your Wassit account, with no prior written request.
Open my personal dataPasswords are stored as hashes (bcrypt) and are never readable. Communications are encrypted in transit. Access to production data is restricted and logged.
You may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP), Morocco's data protection authority, if you consider that your rights are not being respected.
You can exercise your rights from your account or write to us directly.