Introduction and Scope

This Privacy Policy explains how Kassaba collects, uses, stores, and protects your personal information when you use our syndic management platform, including the web dashboard, resident portal, and mobile application. By using Kassaba, you agree to the practices described in this policy.

Who We Are

Kassaba is a property management platform operated in Morocco. We act as the data controller for the personal information processed through our services. For residents, your building's syndic may also act as a joint controller for data related to your residence and payment obligations.

Data We Collect

We collect information necessary to provide property management services:

Identity information: name and contact details (phone number, email address)
Residence information: building name, unit number, and address
Financial information: charge amounts, payment status, and payment history (we do not process or store payment card details)
Building data: common expenses, budgets, and expense allocations
Communication preferences: notification settings and language preferences
Audit logs: records of account activity for compliance and dispute resolution

How and Why We Use Your Data

We process your personal information for the following purposes:

Managing resident accounts and building records
Tracking charges, payments, and outstanding balances
Sending payment reminders and building notifications
Providing expense transparency to residents
Improving our services and ensuring platform security

Legal Basis for Processing

We process your data based on:

Contract performance: Processing necessary to provide our services to syndics and residents
Legitimate interests: Improving our platform, preventing fraud, and ensuring security
Legal obligations: Compliance with Moroccan accounting and data protection regulations

Data Sharing and Sub-processors

We may share your information with:

Your building's syndic or property manager, who requires access to manage your residence
Technical service providers who help us operate our platform (hosting, notifications)
Legal authorities when required by law or to protect our rights

We do not sell your personal data to third parties. All service providers are bound by confidentiality obligations.

Notifications and Communications

Depending on your role and preferences, we may contact you via:

Push notifications through our mobile app
Email for important updates and reminders
SMS for urgent payment notifications
WhatsApp for building communications (where enabled)

You can manage your notification preferences in your account settings. Some service-related communications are mandatory and cannot be disabled.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Financial records are retained for the legally required period in Morocco (typically 10 years for accounting purposes). When you delete your account, personal identifiers are removed, though anonymized transaction records may be retained for legal compliance.

Security Measures

We implement appropriate technical and organizational measures to protect your data:

Encryption of data in transit and at rest
Secure cloud infrastructure with access controls
Regular security assessments and updates
Employee training on data protection practices

Your Rights

Under Moroccan data protection law, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete information
Deletion: Request removal of your data (subject to legal retention requirements)
Objection: Object to certain processing activities
Portability: Receive your data in a structured format

To exercise these rights, contact us at kassaba@jeja-it.nl. We will respond within 30 days.

Cookies and Analytics

Our marketing website (kassaba.ma) uses analytics cookies to understand visitor behavior and improve our content. The Kassaba application itself does not use tracking cookies. You can manage cookie preferences through your browser settings.

International Data Transfers

Your data is primarily stored and processed in secure cloud infrastructure. Where data is transferred outside Morocco, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection standards.

Beta Service Notice

Kassaba is currently in beta. During this period, features may change and evolve based on user feedback. We will notify users of significant changes that affect data processing. Your continued use of the service constitutes acceptance of any updates.

Contact Information

For questions about this Privacy Policy or to exercise your data rights, contact us:

Email: kassaba@jeja-it.nl

Website: https://kassaba.ma