Privacy policy

What data saqf collects, why, who it is shared with, how long it is kept, and how to exercise your rights.

Updated October 4, 2026

1. Who is responsible for your data

saqf is a real-estate marketplace in Morocco, available on the web and in a mobile app. The service is currently in beta.

The Moroccan company that will publish saqf and be responsible for processing your data is being incorporated. Its name, registered office, trade register number (RC) and common company identifier (ICE) will be published on this page as soon as it is registered. The formalities with the National Commission for the Control of Personal Data Protection (CNDP) will be completed by that company as soon as it is registered.

For any question or request about your data, write to [email protected].

2. The rules that apply

The processing of your data is governed by Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data.

saqf is also meant for Moroccans living abroad: sign-in accepts, among others, numbers from European Union countries. If you live in the European Union, the General Data Protection Regulation (GDPR) also gives you the rights described in §10.

3. What we collect

You can browse listings without an account. An account is only needed to act: see a seller's number, save a favourite, send a message, request a viewing or publish a listing.

Sign-in: Your phone number, or your e-mail address if you choose to sign in by e-mail. There is no password: a one-time code is sent to you, by WhatsApp or SMS for a number, by e-mail for an address.
Profile: First name, last name, e-mail address if you add one, profile photo, preferred language and notification preferences.
Listings: What you enter: property and transaction type, price, area, rooms, condition, amenities, description, photos, link to a video, address and map position, and your contact preferences (calls, WhatsApp, messages, viewings).
Agencies: For a professional account: name, description, logo, address, phone, WhatsApp, e-mail, ICE, RC, website, the agency's members, and the documents provided for verification.
Messages and viewings: The text messages you exchange with another user, and your viewing requests: proposed date, note, the seller's answer.
Reports: When you report a listing: the reason you chose and your comment.
Activity: Your favourites, your saved searches and their alerts, recently viewed listings, and the calls or WhatsApp contacts started from a listing.
Notifications: The notifications meant for you and, if you allow notifications on your phone, your device's delivery identifier.
View counting: The number of views of a listing, per day. So that the same visit is not counted twice, your device sends a value computed from a number drawn at random for the session and from the listing's reference. It is linked neither to your account nor to your IP address (see the Cookies page).
Usage measurement: Pages viewed and the main actions (search, publishing, message sent), described on the Cookies page. Never your name, your number, your e-mail or the text of your messages.
Security: A log of rate-limited actions, such as sign-in code sends: the account or number concerned, the type of action and the time.
Technical logs: Our servers write one line per action handled: request id, action, duration, outcome, and a hashed user id, never your real id or your number.

We collect no banking data: saqf offers no online payment.

4. Why we use it

Providing the service: Signing you in, publishing and showing listings, delivering your messages and viewing requests, saving your favourites and searches. Basis: performance of the terms of use.
Notifications: Telling you about a message, a moderation decision, an answer to a viewing, a listing that matches a saved search. Basis: performance of the service, according to your preferences.
Security and moderation: Rate-limiting code sends, reviewing listings, handling reports, suspending an account that breaks the rules. Basis: our legitimate interest in protecting the service and its users, and our legal obligations.
Statistics: Showing a seller how many times their listing was viewed, and understanding how saqf is used in order to improve it. Basis: our legitimate interest; the usage-measurement id kept on your device, however, depends on your consent.
Error reports: Understanding crashes of the app in your browser or on your phone. Basis: your consent, which you can withdraw at any time.

We do not sell your data, we do not rent it out and we show no targeted advertising.

5. What others can see

A published listing is public: its content, photos and location are visible to everyone, search engines included.

The address you enter is never shown. The map shows an approximate point, a few hundred metres away, unless you choose to show the exact location.
A seller's phone number is shown in full only to a signed-in user; otherwise it is masked (for example +212 6 61 •• •• ••). You can turn calls and WhatsApp off for your listing.
Your messages are visible to you and the person you write to. For an agency's listing, the agency's members also see the conversation.
Your favourites, saved searches and recently viewed listings are visible only to you.
An agency's verification documents are stored in a private space, accessible to the agency's members and to saqf's administrators.

saqf's administrators see what moderation requires: listings (including the exact location), profiles, reports and agency documents. The administration console does not show messages. An administrator can technically access a conversation linked to a listing; we only do so to handle a report, answer your request or meet a legal obligation.

6. Listings from other websites

Some listings on saqf are taken from other real-estate listing websites in Morocco, where their author published them. They carry the label “Imported from” followed by the website's name, and a link to the original listing.

For these listings, we copy the published content (text, price, features, location, up to six photos) and the name and phone number shown by the advertiser, so that interested people can contact them by phone or WhatsApp. As for other listings, the number is shown in full only to a signed-in user.

These listings are checked regularly: when the original listing disappears, it is removed from saqf and its photos are deleted. If you are the advertiser and want your listing or your contact details removed from saqf, write to [email protected] with the listing's link.

7. Our service providers

These providers process data on our behalf, only for the service described:

Supabase: Database, sign-in, photo storage and real-time messaging. Hosted in the European Union (Paris).
Cloudflare: Delivery network in front of the website, and storage of imported listings' photos and of the map tiles. On the website's sign-in page, the Cloudflare Turnstile anti-bot check when it is enabled.
Twilio: Sends sign-in codes by WhatsApp and SMS. Receives your phone number when the code is sent.
Resend: Sends e-mails: sign-in codes by e-mail, unread messages, search alerts. Receives your e-mail address and the content of the e-mail.
Expo: Routes phone notifications to Apple's and Google's services. Receives your device's delivery identifier and the text of the notification.
PostHog: Usage measurement, hosted in the European Union. Without your consent, it works without storing anything on your device; with your consent, it keeps an anonymous id (see the Cookies page).
Sentry: The app's error reports, only with your consent. Errors on our servers may also be sent to it, without your identity.

The website itself is hosted in Europe. Fonts are served by saqf: showing a page sends no request to Google Fonts.

If a listing has a video, the YouTube or Vimeo player is only loaded when you open the listing's gallery and reach the video (see the Cookies page).

We may also disclose data to a judicial or administrative authority when the law requires it.

8. Transfers outside Morocco

The database and files are hosted in the European Union, and several providers listed in §7 are established outside Morocco, in particular in the United States. Your data is therefore transferred outside Morocco. These transfers are part of the formalities the publishing company will complete with the CNDP as soon as it is registered.

9. How long we keep it

Account and profile: As long as your account exists. They are deleted when you delete your account, or on request.
Listings: A published listing expires after 60 days unless you renew it. An expired, sold or archived listing is no longer visible to the public and stays in your account until the account is deleted, or on request.
Messages: As long as the conversation exists for the other person. If you delete your account, your messages remain visible to them as “Deleted account”, without your name or number.
Favourites, searches, viewings requested: As long as your account exists; deleted with it.
Notifications: A read notification is deleted after 30 days, and the record of deliveries (e-mail, phone) after 30 days.
View and contact counting: The values used to avoid counting a view twice, and the details of calls and WhatsApp contacts, are erased after two days. Only totals per listing are kept.
Security log: Erased after one day at most.
Reports: Kept with the listing's moderation history; if you delete your account, your name is no longer attached to them.
Agencies: As long as the agency exists on saqf, verification documents included; deleted on request.
Cookie choice: 180 days, then you are asked again.

After a deletion, copies may remain in the database backups for a limited time.

10. Your rights

Law 09-08 gives you a right of access, rectification and objection. If you live in the European Union, the GDPR also gives you a right to erasure, to restriction of processing and to portability, and the right to withdraw your consent at any time.

Correct your profile: from your account.
Delete your account: yourself, in the app or on the website (see §11).
Withdraw your consent to usage measurement or error reports: from the Cookies page.
Delete your favourites and saved searches, take a listing down: from your account.

saqf offers no automatic export of your data. To get a copy, or for any other request (access, erasure, objection, change of e-mail address), write to [email protected]. We answer within one month.

You can also lodge a complaint with the CNDP and, if you live in the European Union, with the data protection authority of your country.

11. Deleting your account and your data

You can delete your saqf account yourself, at any time, in the saqf app and on the website:

In the app: the “Profile” tab → “My profile” → “Delete my account”. Type DELETE, then tap “Delete for good”.
On the website: the “My account” menu (page /compte) → “Delete my account”, at the bottom of the page. Type DELETE, then click “Delete for good”.
Without signing in: write to [email protected] from your account's e-mail address or giving its phone number. We may ask you to confirm that the account is yours, and we delete it within one month.

If you are the only administrator of an agency, appoint another administrator first: otherwise the deletion is refused.

Deleted immediately: Your profile (name, number, e-mail, profile photo), your sign-in, your favourites, your saved searches and their alerts, your recently viewed listings, your notifications, the viewing requests you sent, the devices registered for notifications, your conversation settings (archived, muted), the blocks between you and other users and the reports about other users that you made.
Your listings: The listings you published as an individual are taken off the website and archived, without address, exact location or photos; their photos are erased within about 24 hours. Listings published for an agency stay with the agency.
Kept, without your name: Your conversations and contact requests with sellers or buyers stay with the people you dealt with, no longer linked to your account: your messages remain readable there as “Deleted account”, without your name or number, as long as the conversation exists for them. Paid orders, if any, are kept anonymised. Your listing reports stay in the listing's moderation history, without your name. Reports made about you stay in the moderation history, no longer linked to your account.
Usage measurement: The measurement data linked to your account is erased at PostHog.
Backups: Copies may remain in the database backups for a limited time.

You can also delete part of your data without deleting your account: remove a favourite, delete a saved search, clear your recently viewed listings, delete a draft listing, or take a published listing down, which archives it. Messages cannot be deleted one by one: for that or any other request, write to us.

12. Security

Exchanges with saqf are encrypted (HTTPS).
Access to data is checked row by row by the database itself: a request can only read what your account is allowed to see.
Sign-in uses a one-time code: there is no password to steal, and code sends are rate-limited.
Error reports are cleaned before anything is sent: number, e-mail, message content, session tokens and cookies are replaced with “[redacted]”, and your identity is removed. No screenshots and no session recording.

13. Minimum age

saqf is for people aged 18 or over. If you learn that an account belongs to a minor, write to [email protected]: we will delete it.

14. Changes

This policy will change with the service, in particular once the publishing company is registered. The date of the last update is at the top of the page; if something important changes, we will tell you in the app.