Who handles your information
ZZOLV SARL, the Moroccan company that publishes SCALERP, handles enquiries and account applications. If your request concerns a record entered by your employer or a merchant in their own workspace, please identify that business. This helps us locate the right record while protecting other businesses’ data.
Accounts and support
We use your name, business name, email address and mobile number to verify your contact details and review your application. We record the verification steps and your acceptance of the terms. When you contact support, we use your message, any links you include and the conversation history to investigate and follow up on the issue.
Information in your business workspace
Depending on the modules used, a business may enter customer and supplier contact details, quotations, invoices, payment records and supporting documents. HR modules may hold employee attendance, leave and payroll information. The business decides what to record and why. Its service agreement governs the instructions given to SCALERP for processing this information.
Permissions, sharing and exports
Your business administrator grants access according to each person’s duties. An invited accounting firm can view the documents shared with it and download available supporting records. The business can revoke that access. Files already exported remain with their recipients, who must protect access to those copies and manage their retention.
Verification and security
During email verification, we record your IP address and technical browser information to detect abuse. After verification, ipgeolocation.io uses the address to estimate your location. Authorised administrators see the estimate separately from the address you provided. Mobile codes are delivered through Twilio Verify and, if you select that channel, WhatsApp.
Browser preferences and payments
The website stores your theme choice in your browser. The registration form uses session and security cookies. Partner referral tracking is optional and you can change your choice during registration. If Paddle bills your purchase, its privacy policy explains how it handles payment information.
Recipients and retention
Authorised staff and service providers handling hosting, message delivery and verification access the information needed for their work. Verification codes expire after ten minutes. Verified contact details may remain on file if you leave an application unfinished. You can request their deletion. Account records, billing documents and security logs have different retention periods according to their purpose and legal requirements.
Providers and international transfers
Depending on the feature used, an IP address, mobile number or transaction details may be processed by providers abroad. Articles 43 and 44 of Moroccan Law 09-08 govern international transfers. To ask about recipients, countries and safeguards for a particular operation, identify the service you used and the date of the operation.
Closing an account and handling copies
Before closing its workspace, a business can ask how to retrieve the records it needs. Ending access, allowing a code to expire and erasing a record are separate actions. When assessing a deletion request, we consider documents subject to retention requirements, relevant security logs and backup copies.
Your rights
Write to legal@zzolv.com to request access, correction or deletion, or to object to processing on legitimate grounds. Include the email address you used and explain your request. We may need to verify your identity in a way proportionate to the request. You may also contact Morocco’s data protection authority, the CNDP. Read Law 09-08 on the CNDP website.