Privacy Policy

Dealup S.A.R.L. ("Dealup", "we", "us" or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website (dealup.ma), use our platform or engage with our services.

This policy is drafted in accordance with Morocco's data protection framework, primarily the Dahir n 1-15-23 dated February 18, 2016, which transposes Law 09-08 on the protection of individuals with regard to the processing of personal data (the "DGPD"), as well as guidelines issued by the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP).

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this policy, please discontinue use of our website and services immediately.

We collect information that you provide directly, information generated through your use of our services, and information from third-party sources.

Information You Provide

• Full name, email address, phone number and business name
• Job title, role and company information
• Account credentials (username, password)
• Billing and payment information (processed securely via our payment providers)
• Content you upload or transmit through our platform (messages, media, contact lists)
• Communications you send to us (support requests, feedback, survey responses)

Information Collected Automatically

• IP address, browser type and version, operating system
• Device information (type, model, screen resolution, language settings)
• Usage data (pages visited, features used, timestamps, click patterns)
• Referring URLs and exit pages
• Log data and error reports

Information from Third Parties

• WhatsApp Business Platform data (message delivery status, conversation metadata)
• Meta Platform data (ad performance, click-to-WhatsApp ad metrics)
• Payment processor data (transaction confirmations, billing status)
• Public databases and business directories

Under the DGPD, we process your personal data only when we have a valid legal basis to do so. The legal bases we rely on include:

• Consent: You have given us clear, informed and explicit consent to process your data for specific purposes. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual necessity: Processing is necessary for the performance of a contract to which you are a party, or to take pre-contractual steps at your request.
• Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate interest: Processing is necessary for our legitimate interests or those of a third party, provided such interests are not overridden by your fundamental rights and freedoms.

When we process sensitive personal data (which we generally do not collect), we obtain your explicit prior consent or rely on another valid legal basis under the DGPD.

We use your personal data for the following purposes:

• Providing, operating and maintaining our platform and services
• Processing transactions and managing your subscription
• Creating and authenticating your account
• Sending service-related communications (updates, security alerts, support messages)
• Personalizing your experience and improving our platform
• Analyzing usage patterns to develop new features and improve existing ones
• Preventing fraud, unauthorized access and other security threats
• Complying with legal obligations and responding to lawful requests from authorities
• Running campaigns, automations and message delivery on your behalf through WhatsApp
• Providing customer support and responding to your inquiries

We do not sell your personal data. We may share your information in the following limited circumstances:

• Service providers: We share data with trusted third-party vendors who assist in operating our platform (hosting, payment processing, analytics, customer support tools). These providers are bound by contractual obligations to protect your data.
• WhatsApp / Meta Platforms: When you use our WhatsApp-related services, necessary data is transmitted to Meta Platforms to enable message delivery, analytics and ad performance tracking.
• Legal requirements: We may disclose your data when required by law, regulation, legal process or governmental request under Moroccan jurisdiction.
• Business transfers: In the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.
• With your consent: We may share your data for purposes not described here only with your explicit prior consent.

All third-party service providers are required to implement adequate security measures and process your data only on our instructions.

Your data may be transferred to and processed in countries outside Morocco, including countries that may not provide the same level of data protection. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the CNDP or equivalent authorities
• Adequacy decisions for jurisdictions recognized as providing adequate protection
• Your explicit consent where required
• Transfer necessity for the performance of our contract with you

By using our services, you acknowledge and consent to such transfers, subject to the safeguards described in this policy.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Account data: Retained for the duration of your account plus 36 months after the last activity.
• Transaction data: Retained for 5 years in compliance with Moroccan tax and commercial regulations.
• Campaign and message data: Retained for 24 months to enable analytics and reporting.
• Support communications: Retained for 12 months after the last interaction.
• Log and usage data: Retained for 12 months for security and debugging purposes.

When data is no longer required, it is securely deleted or anonymized so that it can no longer be associated with you.

We implement organizational and technical security measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response procedures for data breaches

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly notifying you and the CNDP of any data breach that poses a risk to your rights and freedoms.

Under the DGPD, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right of rectification: Request correction of inaccurate or incomplete data.
• Right of deletion: Request deletion of your data when it is no longer necessary for the purposes collected, or when you withdraw consent.
• Right to restrict processing: Request that we limit the processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used and machine-readable format.
• Right to object: Object to the processing of your data for direct marketing or on grounds relating to your particular situation.
• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact our Data Protection Officer at the address or email listed below. We will respond to your request within 30 days.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us understand how you use our site and improve our services.

For full details on the cookies we use, how to manage your preferences and how to opt out, please refer to our dedicated Cookie Policy.

• Essential cookies: Required for basic website functionality (authentication, session management).
• Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Marketing cookies: Used to deliver relevant advertisements and track campaign performance.
• Preference cookies: Remember your settings and preferences (language, region).

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

We have appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with the DGPD and this Privacy Policy.

Contact our DPO at:

• Email: support@dealup.ma
• Address: Dealup S.A.R.L., Technopark Casablanca, Casablanca, Morocco
• Phone: +212 674 225 240

You may also contact the CNDP directly for complaints or inquiries regarding data protection:

• Website: www.cndp.ma
• Email: contact@cndp.ma

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting a prominent notice on our website or by sending you an email. The "Last updated" date at the top of this page indicates when this policy was last revised.

We encourage you to review this policy periodically to stay informed about how we protect your data.

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@dealup.ma
• Website: dealup.ma/contact
• Address: Dealup S.A.R.L., Technopark Casablanca, Casablanca, Morocco