1. Who controls your data?
Estichara.ma controls personal data processed through the platform. Contact contact@estichara.ma to request access, correction or deletion.
2. Information we collect
We collect information needed to operate and secure the service.
- Account details: name, email, profile image, phone and city when provided.
- Google sign-in: the name, email and image you authorize; we never receive your Google password.
- Content: questions, answers, reviews, reports and support messages.
- Transactions: token balance, orders, unlocks, rewards, withdrawals and payment references.
- Technical data: browser, device, sessions, security logs and errors.
- Expert documents: identity, résumé, diplomas and licences submitted for verification.
3. How we use information
We do not sell your personal information.
- Create, authenticate and protect accounts.
- Route questions to qualified experts.
- Operate token, payment, reward and withdrawal features.
- Verify experts, moderate content and resolve disputes.
- Provide support and service notifications.
- Improve performance and prevent misuse.
- Comply with valid legal obligations.
4. Legal bases
We process information to perform our agreement with you, with consent where required, for legitimate security and anti-fraud interests, and to comply with applicable Moroccan law.
5. Providers and international processing
Service providers may process information in other countries under their safeguards and terms.
- Supabase: database, authentication and storage.
- Netlify: website hosting and deployment.
- Google: optional OAuth sign-in.
- Hostinger Email: professional email.
- Payment or transfer providers you choose.
7. Retention and deletion
We keep information while the account is active and as needed for accounting, security and dispute resolution. Certain records may be retained where required by law or a legitimate security need.
- Request account deletion through support or contact@estichara.ma.
- Account deletion removes associated information subject to necessary legal retention.
8. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or objection, and withdraw consent where consent is the basis. We may verify your identity first.
9. Security and cookies
We use database access policies, encrypted connections, audit logs and access controls. No electronic system is completely risk-free. Necessary cookies or local storage support sessions, language, appearance and security.
10. Children and changes
The service is not intended for children who cannot legally agree to these terms without a guardian. We may update this policy and will post a new date and notify users of material changes.