Privacy policy

1. Data we collect

Account: name, company, email, phone and password (stored in hashed form).

Orders: contact details, delivery address for physical SIMs and any notes you add.

SIM data: identifiers (ICCID, EID, number), status, data usage, network and time of the last connection, and an approximate location derived from the network.

Payment: handled by Paddle. We never see or store your card numbers.

2. Why we use it

To provide the service (activate and manage your SIMs, show your console), bill you, answer your requests, secure accounts and meet our legal obligations. We rely on the performance of our contract with you, our legal obligations and our legitimate interest in protecting the service.

3. Who we share it with

We do not sell your data. We share it only with the providers the service needs: Vercel (website hosting), Supabase (database and customer accounts), our IoT connectivity partner platform and network operators (SIM management), and Paddle (payment). We may also disclose it to authorities when the law requires it.

4. Transfers outside Morocco

Some of these providers process data outside Morocco, including in the European Union and the United States. These transfers are covered by their contractual data protection commitments.

5. Retention

Account data is kept while your account is open. Billing data is kept for the period required by accounting law. SIM usage data is kept as long as needed for billing and for handling any disputes.

6. Cookies

We only use necessary cookies: keeping you signed in, the selected account and the light or dark theme. The site uses no advertising cookies and no audience measurement tools.

7. Your rights

You can ask to access, correct, delete or port your data, and object to some processing, by writing to Contact@tracky.ma. These rights come from Moroccan law no. 09-08 and, for people in the European Union, from the GDPR.

You can also complain to the CNDP in Morocco or to the data protection authority in your country.

8. Security

Traffic to the site is encrypted (HTTPS), passwords are stored in hashed form and access to data is limited to the people who need it.

9. Changes

We may update this policy. The date at the top of the page shows the latest version. For any significant change, we will email you.