Privacy policy

occasions.ma is in beta: some features are not open yet, and the service and this page will change as it grows. We will tell you about important changes.

This policy explains what personal data occasions.ma collects, why, how long it is kept, who receives it and what your rights are under Moroccan law 09-08 on the protection of individuals with regard to the processing of personal data.

Who is responsible for your data

The controller of your personal data is:

occasions.ma

E-mail: contact@occasions.ma

For any question about your data, write to privacy@occasions.ma.

What we collect

Your account: the name, e-mail address and account identifier that Google gives us when you sign in with it. From your name we make the name other members see, for example “Samir A.”.
Your profile and settings: that public name, an optional username, the city you choose, your privacy and notification choices, and your phone number if you add one.
Your ads: their text, photos, category, price and city. We remove the hidden data of photos, such as the place where they were taken.
Your activity: the ads you save, your messages, the members you block, the ads you report and the phone numbers you reveal (we record that a number was revealed, never the number).
Sign-in and security: a session cookie, the date of your sign-in and the description your browser gives of itself (its “user agent”). Your IP address is not stored with your session; our security records keep only a fingerprint of it that cannot be reversed.
Searches: the words and filters of each search, recorded without your account, your IP address or any identifier.
Measurement, only if you agree: the pages and ads viewed, under a random identifier, and the audience and advertising tools you accept (see the section on cookies below).
Voice drafts, if you use them: your voice note, its transcript and the draft written from it.
The WhatsApp assistant, if you use it: your WhatsApp number and the messages, voice notes and photos you send it.
Technical logs: like any website, our servers record the requests they receive, including the IP address and the browser, to keep the service running and secure.

We do not collect your national identity card (CIN) or any payment data at this stage.

Why we use it

To provide the service you ask for: your account, your ads, messages, saved ads, phone number reveal and drafts. This is necessary to carry out our terms of use.
To keep occasions.ma safe: moderating ads, handling reports, preventing fraud and scams and protecting accounts. This is our legitimate interest, and that of our members, in a trustworthy marketplace.
To make search work and improve it, with searches recorded without any identifier: our legitimate interest.
To measure visits and our advertising: only with your consent, which you can withdraw at any time.
To meet our legal obligations, for example when a competent authority asks us for information.

We never sell your data. Automatic checks can flag an ad for review, but no decision that affects you (refusing an ad, suspending an account) is taken without a person from our team.

How long we keep it

Your account and profile: as long as your account exists. When you delete it, your name, e-mail address, phone number and sign-in details are erased at once.
Sessions: they end 30 days after your last visit, and are then deleted.
Ads: as long as they are online. The photos of a removed ad are deleted 30 days after it is removed; its text is kept to handle disputes and prevent fraud.
Messages: two years after the last message of the conversation.
Searches and measurement data: about three months, never more than 100 days. After that, only daily totals are kept, with no search words.
Voice notes: deleted as soon as they are transcribed, and within a day in any case. The transcript and the draft are deleted one day after the request.
WhatsApp assistant: the messages you send it are deleted 24 hours after they are processed, its replies after 7 days, and the conversation 90 days after its last message.
Reports, moderation decisions and sanctions: three years after the case is closed. Security records: five years.
Technical logs: a short time, after which they are overwritten automatically.

When you delete your account, the messages you sent stay visible to the people who received them until the end of the period above, and reports and security records are kept to protect other members.

Who receives it

Other members see what you make public: your ads and your public profile (your public name, your username, when you joined and, if you allow it, when you were last online). Your phone number only if you choose to show it.

Our team sees what it needs to moderate the site and to help you, each person according to their role.

Service providers who work for us, under contract and only for the needs of the service:

Contabo GmbH hosts our servers in Germany: the website, the database and the photos.
Google, when you sign in with your Google account.
OpenAI, ai33.pro and Groq turn voice notes into text, and Anthropic writes drafts from the text and up to three photos, only if you use these features. They receive no name, e-mail address or phone number.
Google (Google Analytics), Microsoft (Clarity) and Meta (Meta pixel), only if you accept them and once we turn them on.
Twilio sends the sign-in codes by text message, only when that sign-in is offered.

Public authorities, when the law requires it.

Transfers outside Morocco

Our servers are in Germany, and some of the providers above are in the European Union or in the United States. Law 09-08 allows transfers to countries that ensure an adequate level of protection, such as the member states of the European Union (article 43). Transfers to other countries, such as the United States, take place only in the cases allowed by article 44: with your consent, when they are needed for the service you ask for, or with the authorisation of the CNDP.

Security

Connections to occasions.ma are encrypted (HTTPS). Only the people who need it can access your data, according to their role, and what our team does is recorded.

WhatsApp numbers and messages are encrypted in our database, with keys kept apart. One-time codes, and the IP addresses of our security records, are kept only as fingerprints that cannot be reversed.

Your rights

Under law 09-08, you have the right to:

access the personal data we hold about you;
have it corrected, completed, updated or deleted when it is inaccurate or incomplete;
object, for legitimate reasons, to its use, and object at any time, free of charge, to its use for advertising;
withdraw your consent to measurement at any time.

You can already change your profile and delete your account in Settings, and change your measurement choices with the Cookies link at the bottom of every page.

For anything else, write to privacy@occasions.ma from the e-mail address of your account, so that we can check it is you.

If you think your rights are not respected, you can file a complaint with the CNDP (www.cndp.ma).

Cookies and storage on your device

occasions.ma stores on your device only what it needs:

a session cookie that keeps you signed in; it is deleted when you sign out and expires after 30 days without a visit;
in your browser’s storage: your preferences (theme, colour, language, city), your consent choices and whether you are signed in;
if you accept measurement: a random identifier for our own measurement, renewed at least every 13 months, and the cookies of the tools you accepted.

No measurement or advertising cookie is used without your consent. You can change your choice at any time with the Cookies link at the bottom of every page.

Our fonts and images come from our own servers. Without your consent, opening a page sends nothing to Google or to other companies, except the pages where you sign in with Google, which load its button.

Children

occasions.ma is for adults: you must be at least 18 to create an account. We do not knowingly collect data about children. If you think a child has given us personal data, write to us and we will delete it.

Changes to this policy

We will update this policy as the service changes, for example when payment, delivery or identity verification opens. The new version will be published on this page, and we will tell you of any important change before it applies.