Privacy Policy

Welcome to miam.ma. We are committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our service.

Our processing of personal data is compliant with Moroccan Law 09-08 regarding the protection of individuals with regard to the processing of personal data. For users in the European Union, we also comply with the General Data Protection Regulation (GDPR). Your data is stored in EU data centers (Frankfurt, Germany).

By using miam.ma, you agree to the practices described in this policy. If you do not agree, please do not use our service.

We use your data to:

• Provide and improve our services
• Manage your account and subscription
• Create and manage restaurant deals, reservations, and digital menus
• Generate anonymized usage statistics
• Contact you regarding your account or important updates
• Prevent fraud and ensure security
• Comply with our legal obligations

We implement appropriate technical and organizational security measures:

• TLS 1.3 encryption for all data transmissions
• Role-based access policies for data security
• IP address hashing for analytical data anonymization
• Robust and secure authentication
• Secure storage in EU data centers (Frankfurt, Germany) with SOC 2 Type II certification
• Regular backups of your data
• Regular updates of security systems

We use:

• Essential cookies for authentication and security
• Analytics cookies to understand the use of our service (opt-out available)
• Session cookies to maintain your connection

You can control cookies through your browser settings. Note that disabling certain cookies may affect the service's functionality.

We never sell your personal data. We use trusted third-party service providers to help us operate our service:

• Supabase (database hosting, EU region)
• Stripe (payment processing, PCI-DSS Level 1 compliant - we never store credit card data)
• Resend (transactional emails)
• Vercel (website hosting)
• Google Analytics (anonymized usage statistics)

All processors have signed Data Processing Agreements per GDPR Article 28. Contact us for details or to request data deletion.

In accordance with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data, you have the right to:

• Access your personal data
• Rectify your inaccurate or incomplete data
• Delete your data ("right to be forgotten")
• Limit the processing of your data
• Object to the processing of your data
• Portability of your data in a structured format
• Withdraw your consent at any time
• File a complaint with the National Commission for the Control of Personal Data Protection (CNDP) in case of violation

To exercise these rights, contact us at privacy@miam.ma

These rights are also guaranteed by GDPR if you are a resident of the European Union.

We retain your data:

• During your account lifetime: As long as your account is active
• After account deletion: 30 days (recovery period), then permanent deletion
• Analytical data: Retained anonymously for statistical purposes
• Legal data: Retained in accordance with legal obligations (accounting, taxation)

For any questions regarding this privacy policy or to exercise your data rights, contact us: