Privacy policy
AICommerce.ma is a learning platform and a set of AI tools for Moroccan online sellers: courses, product research, ad and sales-page creation, order, delivery and campaign management. This policy explains which data we process, why, who we share it with and what your rights are. It covers aicommerce.ma, the merchant panel, the admin panel and the sales pages merchants publish.
1. Who is responsible
The data controller is Jokesigner, Casablanca, Maroc (RC 350889 · ICE 001618837000086). You can write to jokesigner@gmail.com or on WhatsApp at +212 638 675 050.
2. The data we process
Depending on how you use the platform, we process:
- Account data: name, WhatsApp number, e-mail (optional), password (stored hashed), language, assessment level, role.
- Boutique data: name, city, logo, boutique phone number, plan, payment dates.
- Content you create: products, photos, briefs, creatives, sales pages, campaigns, settings.
- Data of your end customers, entered by you or received through your sales pages, CSV imports or Google Sheets: name, phone, city, address, order, amount, confirmation and delivery status. For this data you are the controller and we act on your behalf as a processor.
- Payment data: amount, reference and screenshot of the bank transfer. We never collect card numbers.
- Support messages: text and images you send us, and our replies.
- WhatsApp messages sent to your customers through an official provider (AiSensy or Meta): template content, replies and button clicks, delivery statuses, recipient number.
- Meta advertising data, when you connect your account: ad account, Page and pixel identifiers, campaigns, ads, spend and statistics.
- Technical data: IP address, browser type, pages visited, error logs, timestamps.
- Strictly necessary cookies: login session, anti-bot protection (reCAPTCHA), chosen language and theme.
3. Why, and on what basis
We process this data in accordance with Moroccan law no. 09-08 on the protection of individuals with regard to the processing of personal data and, for people located in the European Union, the General Data Protection Regulation (GDPR).
- To provide the service you subscribed to: account, courses, tools, orders, delivery, payments, support (performance of the contract).
- To generate copy and visuals with AI models from your products and instructions (performance of the contract).
- To send your order-confirmation messages and manage your ad campaigns when you connect those services (performance of the contract and your consent at connection).
- To secure the platform, prevent fraud and abuse, and keep our logs (legitimate interest).
- To meet our accounting and legal obligations (legal obligation).
- To keep you informed about your account and requests by WhatsApp or e-mail (performance of the contract). Commercial messages are sent only with your agreement, which you can withdraw at any time.
4. Artificial intelligence
To produce product research, ad copy, visuals and sales pages, we send AI model providers (Anthropic, OpenAI) the information needed for the generation: product description, product photos, instructions and, where relevant, your aggregated sales figures. We do not send your end customers' data to these providers unless you include it yourself in an instruction.
These providers process data as processors under their API terms, which exclude training their models on your data. Generated results belong to you; you remain responsible for checking them before publication.
5. Who we share your data with
We never sell your data. We share it only with:
- SKSystem (delivery): name, phone, city, address and amount of the orders you ship as parcels, and your boutique number to create or link your delivery account.
- Meta Platforms (WhatsApp Business Platform, Facebook and Instagram Ads): when you connect your WhatsApp number or your ad account, the data needed to send messages and manage campaigns. We use data received from Meta APIs only to provide you the service, in line with the Meta Platform Terms and the WhatsApp Business Terms.
- AiSensy (official WhatsApp Business provider): confirmation message content and recipient numbers, when you connect your AiSensy account.
- Google: reCAPTCHA on the sign-up form, Google Sheets when you connect an orders sheet.
- AI model providers (see section 4).
- Our hosting provider, which stores data on servers it operates for us under a confidentiality agreement.
- Authorities, where the law requires it.
6. Data from Meta platforms
When you connect your WhatsApp Business account or your Meta ad account to AICommerce, we access the data you authorise at connection time. We use it exclusively to display and manage your messages and campaigns in your panel. We do not use it for advertising to third parties, we do not resell it, and we do not keep it after disconnection, except the logs needed for billing and security.
You can revoke access at any time from your panel (Integrations) or from your Facebook account settings. Deletion of data obtained through Meta follows the procedure described on the "Delete your data" page.
You undertake to send WhatsApp messages only to customers who agreed to be contacted, for example by placing an order on your sales page, and to comply with Meta and WhatsApp policies.
7. Retention
- Account and content: for the life of the account, then 12 months after closure, unless you ask for earlier deletion.
- Orders and end-customer data: as you instruct; by default, as long as your account is active.
- Payments and transfer proofs: for the legal accounting retention period.
- Technical logs: 12 months.
- WhatsApp messages and advertising data: while the service is connected, then deleted with the account.
8. Security
Encrypted connections (HTTPS), hashed passwords, encrypted API keys, strict separation of each boutique's data, limited and logged admin access, regular backups. No system is infallible: if an incident affects your data, we inform you as soon as possible.
9. Your rights
You may at any time request access to your data, its rectification or deletion, restriction of processing, object to processing based on our legitimate interest, and receive your data in a readable format. Write to jokesigner@gmail.com or use the "Delete your data" page. We answer within 30 days. You may also lodge a complaint with the Moroccan data protection authority (CNDP) or, if you live in the European Union, with your national supervisory authority.
10. Minors
The platform is reserved for adults running or preparing a commercial activity. We do not knowingly collect data from minors.
11. Changes
We may update this policy. The update date appears at the top of the page; for significant changes we inform you in your panel or by message.