Privacy policy

1. Definition of personal data

Personal data means any information that allows you to be identified directly or indirectly: name, email address, phone number, etc. mawaid is committed to collecting only the data strictly necessary for the platform to work.

2. Categories of data collected

We collect the following data depending on your account type:

Customers:

• Profile information: name, email, password (hashed)
• Appointment data: date, time, service, chosen professional
• Dependant profiles (if added)

Professionals:

• Business information: name, category, address, hours, services
• Contact details: email, phone, wilaya
• Financial data related to payments (processed by Stripe)

3. Purposes of collection

Your data is used to:

• Create and manage your user account
• Process and confirm your appointments
• Send confirmations, reminders and notifications by email
• Enable communication between customers and professionals
• Improve the quality and security of our services
• Meet our legal obligations

4. Legal basis for processing

The processing of your data is based on:

• Performance of the contract: managing your account and your appointments
• Consent: for sending marketing communications
• Legitimate interest: improving services and preventing fraud
• Legal obligations: data retention required by law

5. Data sharing

Your data is never sold to third parties. It may be shared with:

• Professionals: name and contact details needed to book an appointment
• Our technical subprocessors: hosting (Vercel, Supabase), email (Resend), payment (Stripe) — all bound by confidentiality obligations
• Competent authorities: on legal request only

6. Retention period

Data is kept as long as your account is active, then deleted within a reasonable time after its closure, unless a legal obligation requires longer retention. Appointment data is kept for a maximum of 3 years.

7. Data security

We put technical and organizational measures in place to protect your data:

• Passwords hashed with bcrypt
• Communications encrypted via HTTPS
• Two-factor authentication (2FA) available for professional accounts
• Protection against brute-force attacks (rate limiting)
• Validation and sanitization of all user input

8. Cookies

We use only session cookies necessary for the platform to work (keeping you signed in). No advertising or analytics tracking cookie is used. The maximum lifetime of a session cookie is 30 days.

9. Your rights

In accordance with the legislation in force, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to object: object to the processing of your data
• Right to portability: receive your data in a structured format

To exercise these rights, contact us via the Contact page.

10. Changes

mawaid reserves the right to modify this privacy policy at any time. Changes take effect as soon as they are published on this page. Continued use of the platform after a change constitutes acceptance.

11. Contact

For any question about your personal data or this policy, contact us via the Contact page or by email at ammarilinoa7@gmail.com.