Privacy Policy
Last updated: 30/09/2026
GoDeals ("we", "our" or "us") operates a customer relationship and sales management platform for WhatsApp aimed at Moroccan merchants. This Privacy Policy explains what personal data we collect, for what purpose, who we share it with, and what your rights are, in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.
1. Data We Collect
Merchant account data: name, email address, phone number, business name, business address, billing information.
Data flowing through WhatsApp Business: when you connect your WhatsApp Business number, we process your WhatsApp Business account identifier, the access tokens required to send and receive messages, and the content of conversations exchanged with your own customers (customer name, customer phone number, text messages, attachments, order status).
Data from enabled integrations: depending on the connectors you choose to enable, product catalog and orders coming from WooCommerce, Shopify, YouCan or Google Sheets.
Technical data: IP address, browser type, pages visited, technical cookies necessary for the site to function, and connection and usage logs of the Service.
2. How We Collect This Data
We collect this data directly when you create an account, set up your store, or connect an integration; automatically when you or your customers use the Service (sending and receiving WhatsApp messages, creating orders); and through Meta during the official WhatsApp Business connection process (Embedded Signup).
3. Purposes and Legal Basis for Processing
We process this data to: perform the contract that binds us to you by providing the Service (managing conversations, orders, campaigns); comply with our legal and accounting obligations; ensure the security of the Service and prevent misuse; and, on the basis of our legitimate interest, improve our features and inform you of Service developments.
The processing of your end customers' data (people who message you on WhatsApp) is carried out on your behalf and under your responsibility, in your capacity as data controller toward your own customers; GoDeals then acts as a technical processor.
4. WhatsApp, Meta and AI Integration
Messages exchanged via WhatsApp pass through Meta's infrastructure (WhatsApp Cloud API) before reaching our platform; their processing by Meta is also subject to Meta's own privacy policy, which we encourage you to review.
If you enable the automated conversational assistant, the content of incoming messages may be transmitted to the AI provider you have chosen to configure (OpenAI, Anthropic, Meta, or a provider accessible via OpenRouter) in order to generate a reply. This transmission is limited to the text necessary to produce the reply; we do not transmit your account credentials or billing data to these providers. Processing carried out by these providers is governed by their own respective terms of use and privacy policies.
5. Sharing Data with Third Parties
We do not sell or rent your personal data to third parties for advertising purposes. We share certain data only in the following cases: with Meta, strictly within the operation of the WhatsApp Business API; with the AI provider you configure, when the automatic assistant is enabled; with our hosting and technical infrastructure providers, bound by confidentiality obligations; with the third-party platforms (WooCommerce, Shopify, YouCan, Google) you explicitly choose to connect; and when required by law or a competent authority.
6. International Data Transfers
Some of our technical providers (hosting, Meta, AI providers) operate servers located outside Morocco. When this is the case, we ensure that these providers offer appropriate security and confidentiality guarantees, in accordance with their own policies and industry standards.
7. Data Retention Period
We retain your data for as long as your account is active and for the period necessary to perform the Service. After your account is terminated, your data is retained for a reasonable period allowing us to meet any legal or litigation-related obligations, and is then deleted, unless you request earlier deletion via our dedicated data deletion page.
8. Cookies and Similar Technologies
Our site uses cookies strictly necessary for its operation (authentication, language preference, security), as well as, where applicable, audience measurement cookies allowing us to understand how our site is used. You can configure your browser to reject non-essential cookies; some features of the site may then no longer work correctly.
9. Data Security
We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration, including encryption of sensitive access tokens, account- and role-based access control, and data segregation between merchants on our multi-tenant platform. As no system is entirely foolproof, we cannot guarantee absolute security.
10. Your Rights
In accordance with Law No. 09-08 and its implementing texts, you have the right to access, rectify, and object to the processing of, and, under certain conditions, to request the deletion of, personal data concerning you. You may exercise these rights by contacting us at the address below, or by submitting a request via our dedicated deletion page. You also have the right to refer any unresolved dispute to the National Commission for the Control of the Protection of Personal Data (CNDP).
11. Protection of Minors
The Service is intended for professionals and is not designed for use by minors as merchants. We do not knowingly intend to collect personal data from minors in the context of creating a merchant account.
12. Changes to This Policy
We may modify this Privacy Policy to reflect legal or technical developments or changes to our practices. Any substantial change will be communicated to you before it takes effect. The date of the last update appears at the top of this page.
Contact
For any questions regarding this Privacy Policy or to exercise your rights, contact us at privacy@godeals.ma.