Privacy policy

1. Data controller

Atlasocom, a service operated by Salah Ed.Dine Farij, an individual (see “Service operator” below). For any question: contact@atlasocom.com.

2. Data processed and purposes

Demo request (public website): name, company, work e-mail and main need (required); phone, job title, industry, number of sites, modules of interest and message (optional); page language and date of the request. Purpose: answer the request and organise the demo. A notification is sent to the team by e-mail.

Account and application: e-mail, password (handled by the authentication service, never stored in clear by Atlasocom), display name, company and role; business data entered by the company (items, stock, purchasing, suppliers, maintenance, documents, comments) and activity log. Purpose: provide and secure the service.

E-mails: account messages (confirmation, password) and notifications chosen in the application (low stock, orders), sent from contact@atlasocom.com.

Subscription and payment: to open the payment page, Atlasocom sends Dodo Payments the e-mail of the person subscribing, the company name and the chosen plan. Dodo Payments collects the billing address and card details directly. Atlasocom receives and keeps only the subscription status, the customer and subscription identifiers at Dodo Payments, the period dates and, for each payment, its status, amount, currency and date. Purpose: manage the subscription and access to the service, keep the billing history.

AI assistant (signed-in users): the questions asked and the extracts of company data needed for the answer are sent to the AI provider to generate the answer; a usage counter is kept to apply quotas. The assistant does not change any data.

Integrations (if the company connects any): the credentials for the connected shop or service are stored in an encrypted vault and never shown again; synchronised items and orders are stored in the company’s workspace.

3. Providers (processors)

• Netlify: hosting of the website and the application.
• Supabase: database, authentication, document storage, server functions.
• Namecheap (Private Email): sending and receiving e-mail.
• Groq: generating the AI assistant’s answers.
• Dodo Payments: subscription payments, as reseller.

These providers may process data outside Morocco (in particular in Europe and the United States). Atlasocom does not sell any data and does not use it for advertising.

4. Retention

• Account and company data: for as long as the service is used, then deleted on request (see the terms of sale, section 10).
• Demo requests: as long as needed to follow up the request; deleted on simple request.
• Subscription and payment history: for the period required by accounting and tax obligations.

5. Cookies and local storage

• atl_locale: remembers the chosen language.
• Session cookies (sb-…): keep application users signed in.

No audience measurement, advertising pixel or third-party tracker is used. The payment page, hosted by Dodo Payments, applies its own cookie policy.

6. Security

Encrypted connections (HTTPS); data isolated per company at database level; access according to each member’s role; passwords handled by the authentication service; card details never received by Atlasocom.

7. Your rights

You have the right to access, rectify and object (on legitimate grounds) to the processing of your data. Write to contact@atlasocom.com stating your request; we may ask you to prove your identity. You may also contact the Moroccan data protection authority (CNDP, www.cndp.ma).

8. Changes

This policy may change with the service; the update date is shown at the top of the page. Significant changes are announced to application users.