- Publisher
- Mostanad
- support@mostanad.ma
Data controller
The Mostanad service is published by the company named in the legal notice. For any question about your data, write to us from the help center or by e-mail.
Data we process
- Account: name, e-mail address, phone (optional), password (stored as a hash), language and preferences.
- Shop: name, logo, contact details, team users.
- Content: the information typed into papers, invoices and CVs (including ID numbers and addresses when a paper needs them), encrypted in our database.
- Security: signed-in devices, IP addresses, activity log.
- Contact: messages sent from the help center.
Why
- To provide the service and your account (performance of the contract).
- To secure accounts and prevent abuse (legitimate interest).
- To invoice subscriptions and meet our accounting obligations (legal obligation).
- To answer your support requests.
Retention
- Unfinished drafts: deleted after 60 days.
- Account data: for the life of the account, then 12 months after a paid subscription ends.
- Platform invoices: 10 years (accounting obligation).
- Support messages: 24 months.
Recipients
Your data is available to your shop according to the roles you set, and to our technical providers (hosting, e-mail delivery, the bank for payments made inside the app), only for this service. Mostanad staff access a shop’s data only through a logged procedure with a stated reason. We never sell your data.
Security
Encrypted connection, encrypted sensitive fields, two-factor authentication, sessions limited per device, tamper-evident audit log and backups.
Your rights
You have the right to access, rectify, object and delete, and to export your data. Use them from your account or by writing to us. You may also contact the National Commission for the Control of Personal Data Protection (CNDP).
Closing the account or erasing your data
Closing the account (shop owner): the account and the team lose access and the shop’s public pages no longer show, but nothing is deleted; support can open it again at your request.
Erasing your personal data (anyone, for their own data, the right in article 8 of law 09-08): ask from Settings › My data; the request can be cancelled for 30 days, then your name, phone, e-mail, devices and preferences are erased. Records the law requires to keep (invoices, sales and accounting documents, 10 years under article 22 of the Commercial Code) are kept, without your name.
Cookies
The public website uses no audience measurement and no advertising. Only strictly necessary cookies are set: the app sign-in session and the protection of the contact form.
Voice dictation
The microphone in the forms uses your browser’s speech recognition, only after you tap it. The browser handles the voice (Chrome, for example, sends the audio to its own recognition service); Mostanad only receives the text you keep in the field and records no sound.
A question about this information? Write to us · support@mostanad.ma