Last updated: February 2026
Syndiqo ("we", "our") operates the syndiqo.app platform. This privacy policy describes how we collect, use, and protect your personal information when you use our service.
We collect information you provide directly: full name, email address, phone number, information about your building (address, city, number of apartments), and data related to your calls for proposals and offers. We also automatically collect technical data: IP address, browser type, pages viewed, and visit duration.
Your data is used to: provide and improve our services, manage your account and subscriptions, facilitate communication between property managers and providers, send notifications related to your calls for proposals, and contact you for technical support.
Your data is processed on the basis of: your explicit consent (during registration), contractual necessity (service delivery), our legal obligations (Law 18-00, Law 09-08, accounting obligations), and our legitimate interests (security, fraud prevention). Consent is recorded with timestamp and accepted policy version.
Your data is stored on secure servers hosted by Supabase (cloud infrastructure). We use SSL/TLS encryption for all communications, and passwords are irreversibly hashed. Data access is strictly limited to authorized staff.
We never sell your personal data. We share your information only with: other members of your building (as part of call-for-proposal management), providers (only the information needed to respond to public calls for proposals), and our technical processors (Supabase, Stripe, Resend) strictly for service delivery.
Active accounts: duration of the service. Audit logs: 5 years (Moroccan accounting law). Notifications: 90 days. Closed calls: 2 years after closure. Deleted accounts: 30-day grace period then permanent deletion. Financial data related to Stripe payments is retained in accordance with legal obligations.
Your data is hosted by Supabase (AWS cloud infrastructure, EU region). Payments are processed by Stripe (EU/US). Emails are sent via Resend (US). Maps are provided by Mapbox (US). These providers are bound by Standard Contractual Clauses (SCC) in accordance with Law 09-08 Art. 43-44 and the GDPR. No transfer outside these providers is performed.
In accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to personal data processing, you have the right to access, rectify, delete, and object to the processing of your personal data. To exercise these rights, contact us at [email protected].
You can export all your personal data in JSON format from your settings area. This right is guaranteed by GDPR Art. 20 and Law 09-08.
We use essential cookies for service operation (authentication, language preferences). We do not use advertising cookies or third-party trackers. Cloudflare Turnstile is used for anti-spam protection during registration.
Use of Syndiqo is reserved for adults (18 years and older). No minor data is intentionally collected. If you are a minor, please do not use this service.
The personal data processing carried out by Syndiqo is declared to the National Commission for the Control of Personal Data Protection (CNDP). You can submit complaints to the CNDP: www.cndp.ma.
For any question about this privacy policy, you can contact us at: [email protected]