Privacy Policy
Last updated: 2026-09-27
Draft version
TeejaraYan ("we", "the service") is business management software for small and medium Moroccan businesses. This page describes what data we process, why, and how it is protected.
1. Data we collect
User account: name, email address, phone number (optional), preferred language, and password (stored hashed, never in plain text).
Business information: legal name, industry, address, city, ICE, IF, RC, business license (TP), CNSS, business phone and email — only the fields you choose to fill in.
Business data you enter: products, stock, customers, suppliers, sales, purchases, payments, expenses and documents (invoices, quotes, delivery notes). This data belongs to your business; we process it to run the service.
Security logs: login attempts, IP address and browser type at sign-in, used to detect fraudulent access and lock accounts after repeated failures.
Usage data: anonymized technical events (e.g. "a sale was created") to understand which features are useful. These events never contain names, emails, phone numbers, amounts, or free text.
Error reports: when something breaks, technical details (error message, affected page) are sent to our error-tracking tool. Passwords, authentication tokens and other secrets are always stripped before sending.
2. Why we process this data
To provide the service (create your account, keep your business data isolated from other businesses, generate your business documents), for security (prevent unauthorized access), and to improve the product (understand real usage, fix bugs).
To apply our limited offers fairly (for example the founding places), we check that the same person does not benefit from them more than once, using the account and business data we already hold. No decision is automatic without the possibility of review: every decision is made or reviewed by a person, and recorded. You can write to us to learn more, or to object on legitimate grounds.
3. Who we share data with
We do not sell any data. A small number of technical processors host or process data on our behalf, under contract:
- Neon (PostgreSQL database, hosted in the European Union)
- Fly.io (application hosting)
- Cloudflare R2 (file and image storage, EU jurisdiction)
- Resend (transactional email: verification, password reset)
- PostHog (anonymized usage analytics)
- An error-tracking service (Sentry-compatible protocol)
4. Cookies
We use a single essential cookie required for sign-in (secure, HttpOnly session). The public TeejaraYan site currently uses no advertising or marketing-tracking cookies.
5. Artificial intelligence
TeejaraYan does not currently process any of your data through an AI system. An AI assistant is planned for a future phase; this policy will be updated before it is enabled, with the exact details of what data it can access.
6. Security
Encrypted connections (HTTPS), strict database-level isolation between businesses, role- and permission-based access control, an audit log of sensitive actions, request rate limiting, and account lockout after repeated failed sign-in attempts.
7. Your rights
You can export your products, customers and suppliers at any time as CSV from within the app. For any other request (access, correction, deleting your account or data), contact us at the address below — a full self-service flow is under development.
8. Data retention
[To be defined with legal counsel: how long data is kept after an account closes, and the deletion procedure.]
9. Governing law
This policy is intended to align with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data. [Full compliance, including any required CNDP filing, must be confirmed by qualified Moroccan legal counsel before publication.]
10. Contact
For any question about this policy: [contact email to be defined].