Privacy policy

1. Data controller

The data controller is SoloGestion, Technopark Casablanca, Route de Nouaceur, Casablanca, Morocco, reachable at contact@sologestion.ma. The processing is subject to the required formalities with the CNDP.

For your own clients’ data that you enter in your Workspace (names, ICE, addresses, emails), you are the controller and SoloGestion acts as processor, on your instructions only.

2. Data collected

• Account: name, email address, password (hashed), language, email verification date.
• Workspace: trade name, identity, ICE, IF, auto-entrepreneur number, address, phone, bank details, logo, activity and tax category.
• Content: clients, quotes, invoices, payments, expenses, products, projects, leads and anything you enter.
• Subscription: plan, paid periods, YouCan Pay transaction identifier. Never your card number.
• Technical: IP address, browser type, pages viewed and timestamps in server logs; strictly necessary cookies (see the Cookie policy).
• Correspondence: the emails you send us and our replies.

3. Purposes and legal bases

• Provide the Service and perform the contract: create your account, issue your documents, compute your indicators, process your payments, send transactional emails (verification, reset, end-of-period reminders).
• Comply with legal obligations: keeping payment records, answering requests from competent authorities.
• Legitimate interest: security of the Service (logs, fraud prevention), support, product improvement from aggregated, anonymous statistics.
• Consent: occasional commercial communications about new features, which you can refuse at any time.

4. Retention periods

• Account and Workspace: for the duration of the subscription or trial, then 12 months after closure so you can come back, unless you ask for earlier deletion.
• Issued documents and payments: 10 years, the legal retention period for accounting records (article 211 of the CGI), in archived form after the Workspace is deleted.
• Technical logs: 12 months at most.
• Support correspondence: 3 years after the last contact.

5. Recipients and processors

Your data is never sold, rented or transferred. It is accessible only to authorised SoloGestion staff and to the following providers, solely for the part their task requires:

• o2switch (France): hosting of the application and database.
• Vercel (United States): hosting of the marketing website, which holds no account data.
• YouCan Pay (Morocco): card payment processing.
• Email delivery provider: routing of transactional emails and the documents you send.

6. Transfers outside Morocco

Hosting the application in France and the website in the United States is a transfer of data outside Morocco within the meaning of article 43 of law 09-08. These transfers go to providers offering an adequate level of protection and are governed by contractual confidentiality and security commitments; they were declared to the CNDP as part of the formalities mentioned in section 1.

7. Your rights

Under articles 7 to 9 of law 09-08 you have the right of access, rectification and objection, and the right to request deletion of your data. Most of these rights can be exercised directly from your Workspace settings (profile changes, CSV exports). For the rest, write to contact@sologestion.ma from your account address: we answer within 30 days.

You may also contact the CNDP (cndp.ma) if you believe your rights are not respected.

8. Security

Encrypted connection (HTTPS) across the Service, hashed passwords, strict Workspace isolation, rate-limited login attempts, daily backups and restricted server access. Current measures are detailed on the Security and data page. If an incident affects your data, you are informed without undue delay.

9. Minors

The Service is for adult professionals. We do not knowingly collect data about minors.

10. Changes

This policy may be updated to follow changes in the Service or in regulation. The last update date is shown at the top of the page; significant changes are notified by email or in the application.