Privacy Policy
Last updated: 17 June 2026
Kriliya ("we") provides a SaaS car-rental management platform for agencies in Morocco. This policy explains what data we process and how, in line with Morocco's Law No. 09-08 on the protection of personal data (CNDP).
1. Data we process
Account data (name, email, phone), agency data (legal name, ICE, RC, contact details), and the data an agency enters to run its business: customers, ID documents, vehicles, reservations, contracts and payments.
2. Purposes
To provide and secure the service, manage accounts and billing, deliver support, and improve the platform. We never sell your data.
3. Roles
For data an agency enters about its own customers, the agency is the data controller and Kriliya acts as a processor, handling that data on the agency's instructions.
4. Hosting & sub-processors
Data is hosted with our infrastructure providers (Supabase, Vercel). Optional features may use third-party providers (AI document extraction, email delivery) only when enabled.
5. Retention
Data is kept while the account is active, then deleted or anonymized after termination, except where law requires retention (e.g. accounting/tax).
6. Security
Encryption in transit, per-tenant data isolation (RLS), restricted access and audit logs. Sensitive documents are stored privately and served via short-lived signed links.
7. Your rights
You have the right to access, rectify, object to and delete your data under Law 09-08. Contact us to exercise these rights.
8. Cookies
We use strictly necessary cookies (authentication session, active-company and language choice). No third-party advertising.
9. Contact
For any data question: privacy@kriliya.com.