1. Who We Are
ReyStay is a real estate marketplace operating in Morocco. References to "ReyStay", "we", "us", or "our" in this policy refer to the entity operating the Platform. For questions about this policy, contact us at privacy@reystay.com.
2. Data We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, username, email address, password (hashed) | Account creation and authentication |
| Profile data | Profile photo, phone number, bio | Public profile display |
| Listing data | Property details, photos, location, price | Publishing and displaying listings |
| Message data | Conversation content between users | Enabling in-app communication |
| Usage data | Searches, viewed listings, session duration | Improving platform relevance and performance |
| Device data | Device type, OS, language preference | Providing a consistent experience across devices |
| Settings data | Language, notification preferences, timezone | Personalising your experience |
3. How We Use Your Data
- To create and manage your account.
- To display and deliver listings across the Platform.
- To enable messaging between users.
- To send notifications about messages or listings (when enabled).
- To improve search relevance and platform performance.
- To detect and prevent fraud, spam, and abuse.
- To comply with applicable Moroccan law.
4. Legal Basis for Processing
We process your personal data under the following legal bases as defined by Moroccan Law No. 09-08 on the Protection of Personal Data:
- Contract performance — processing necessary to provide you with the service you signed up for.
- Legitimate interest — improving the Platform, preventing abuse, and ensuring security.
- Consent — for optional features such as marketing communications.
- Legal obligation — where required by Moroccan authorities.
5. Data Sharing
We do not sell your personal data. We may share data with:
- Other users — your public profile and listing information is visible to all Platform users.
- Service providers — third-party vendors who assist in operating the Platform (hosting, analytics, email delivery) under strict confidentiality obligations.
- Legal authorities — when required by Moroccan law or in response to a valid legal request.
6. Data Retention
We retain your personal data for as long as your account is active. Upon account deletion, we remove your data within 30 days, except where retention is required by law (e.g. transaction records, legal disputes).
Messages are retained for the duration of the conversation and deleted upon request by both parties.
7. Your Rights
Under Moroccan Law No. 09-08, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data, subject to legal obligations.
- Objection — object to certain types of processing.
- Portability — receive your data in a portable format.
To exercise any of these rights, email us at privacy@reystay.com. We will respond within 30 days.
8. Security
We apply industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, and access controls. No method of transmission over the internet is completely secure; while we strive to protect your data, we cannot guarantee absolute security.
9. Cookies and Tracking
The Platform uses session cookies strictly necessary for authentication and to maintain your login state. We do not use third-party advertising trackers or sell browsing data to third parties.
10. Children's Privacy
The Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date above and notify registered users by email for material changes. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.
12. Contact and Complaints
For privacy-related questions or complaints, contact us at privacy@reystay.com.
You also have the right to lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP), Morocco's data protection authority, at www.cndp.ma.