01.Introduction
Scanova ("we", "us") is a Morocco-based business operating the Scanova platform. This Privacy Policy explains how we handle personal information for merchants who sign up for an account, customers who scan a Scanova card, and visitors to our marketing site.
02.What we collect
Account data (name, email, password hash, WhatsApp number). Business content you upload (card details, logo, menu, QR configurations). Usage events (which pages you visit on your dashboard, which QR a customer scans). Device info (browser, OS, approximate location derived from IP). Customer feedback you receive — including any name, phone, or comment a customer leaves.
03.How we use it
To provide the service you signed up for, route feedback to you, generate analytics, send transactional emails (password reset, feedback alerts, daily summary), and bill you. We do not sell your data, and we do not run ad networks on your customers.
04.Cookies
We use a small number of strictly necessary cookies — session, theme preference, and locale. See our Cookie Policy for the full list.
05.Third-party processors
We rely on Supabase (database hosting, EU region), Cloudinary (image storage), Resend (transactional email), Vercel (web hosting), and either OpenAI or Anthropic (AI features, opt-in per request). Each is bound by a data-processing agreement; details on request.
06.Retention
Account data and content are retained for as long as your account is active. After account deletion, primary records are wiped immediately; encrypted backups roll off within 90 days. Feedback older than 24 months is automatically anonymized.
07.Security
Data in transit is encrypted via TLS 1.2+. Passwords are stored as bcrypt hashes (cost factor 10). Database access is role-restricted, and admin actions are logged in an immutable audit trail.
08.Your rights
You can access, correct, export, restrict, or delete your data at any time from /dashboard/settings or by emailing privacy@scanova.ma. We respond to verified requests within 30 days.
09.Children
Scanova is intended for users aged 16 and older. We do not knowingly collect personal information from children.
10.International transfers
Some processors operate outside Morocco (EU and US data centers). We rely on standard contractual clauses where applicable to ensure equivalent protection.
11.Changes
Material changes are announced by email at least 30 days in advance and via a banner on the dashboard. Continued use after the effective date constitutes acceptance.
12.Contact
Privacy questions? Email privacy@scanova.ma. For binding requests, please include enough information for us to verify your identity.