1. Who We Are
This Privacy Policy explains how VORAXS ("we", "us", or "our") collects, uses, and protects your personal data when you use our platform and services.
- Data Controller: Rachid Alaoui Selsouli
- Address: Casablanca, Morocco
- Privacy Contact: vora.app2025@gmail.com
2. Scope & Legal Framework
We process your personal data in strict compliance with Moroccan Law No. 09-08 of 18 February 2009 relating to the protection of individuals with regard to the processing of personal data.
[INTERNATIONAL PRIVACY REVIEW REQUIRED: Include GDPR/CCPA references here ONLY if actively targeting users in those jurisdictions.]
3. Data We Collect
We only collect information necessary to operate the VORAXS platform. This includes:
Account Information
Name, email address, password credentials, and authentication data required to secure your account.
Sports & Profile Information
Preferred sports, skill level, Merit score, match history, and community participation metrics.
Activity & Booking Information
Matches joined, venues booked, specific times, and participation status.
Location Information Optional
Approximate or precise location (only if device permission is explicitly granted) to show nearby matches and venues.
Communications & Content
Messages sent via in-app chat, uploaded media (photos/videos), and community posts. We access this strictly as technically necessary to deliver the service or for moderation purposes.
Technical Information
IP address, device type, operating system, and security logs required to operate and secure the platform.
4. How We Collect Data
We collect data directly from you when you create an account, update your profile, join matches, or communicate within the app. We also collect technical data automatically when you navigate and use our services.
5. Why We Use Data
- Service Provision: To create your account, match you with players, and facilitate venue bookings.
- Platform Integrity: To calculate Merit scores and track player reliability (e.g., showing up to matches).
- Security & Moderation: To prevent abuse, enforce our terms of service, and protect our community.
- Communication: To send you critical updates about your matches, bookings, or account status.
7. Data Sharing & Service Providers
We do not sell your personal data.
We only share data with:
- Other Users: Your public profile and relevant activity (like joining a match) are visible based on your privacy settings.
- Venues: Necessary booking and identification information is shared with venues to secure your pitch and verify entry.
- Service Providers: We use trusted third-party providers for cloud hosting, email delivery, and platform security. These providers act strictly on our behalf and are bound by confidentiality contracts.
8. International Transfers & Hosting
VORAXS utilizes secure cloud infrastructure hosted in the Netherlands.
Consequently, your personal data is transferred, processed, and stored outside of Morocco. We conduct these transfers in compliance with Law 09-08 requirements for international transfers to jurisdictions that the CNDP recognizes as ensuring an adequate level of protection. By using VORAXS, you acknowledge this transfer to our servers in the Netherlands.
9. Security
We implement technical and organizational safeguards—including encryption in transit, secure access controls, and logging—to protect your data against unauthorized access, loss, or alteration. However, please note that no internet-connected system is entirely impenetrable.
10. Data Retention
We retain your data only for as long as necessary to fulfill the purposes outlined above or to comply with legal obligations.
11. Your Rights
Under Moroccan Law 09-08, you have specific rights regarding your personal data:
Right to Information
Be informed about how and why your data is collected and used.
Right of Access
Request a copy of the personal data we hold about you.
Right of Rectification
Correct any inaccurate or incomplete personal information.
Right of Opposition
Object to specific types of processing for legitimate reasons.
To exercise any of these rights, please contact our Privacy Contact at the address listed below. We may require proof of identity to process your request securely.
12. Account Deletion
You may request account deletion at any time via your account settings or by contacting us. Upon request, we will delete your profile and associated data, except where we are legally required to retain specific records (e.g., financial transactions) or need them temporarily for security audits and backups.
13. Children
VORAXS is not intended for individuals under the age of 13. For users under 18, parental consent and guidance is strongly recommended. We do not knowingly collect personal data from minors under 13 without authorized parental consent.
14. Sensitive Data
We do not require you to provide sensitive data (such as health or medical information) to use VORAXS. If you voluntarily share such information in chats, profiles, or posts, you do so at your own risk.
15. Third-Party Services
Our platform may contain links to third-party websites or services (e.g., payment processors or external venues). We are not responsible for their privacy practices, and we encourage you to review their policies.
16. Security Incidents
In the event of a security breach that compromises your personal data, we will take immediate steps to contain the threat and notify you and the CNDP as required by applicable law.
17. Changes to This Policy
We may update this policy periodically. If we make material changes, we will notify you via the platform or email. The "Last Updated" date at the top of this document will always reflect the most recent revisions.