Privacy policy

1. Data controller

4YA SARL AU — 4YA SARL AU, a Moroccan company, publisher of the TapNpay service.

Address : Available on request
Email : contact@tapnpay.ma
Phone : +212 779 795111

2. Data collected

As part of commercial prospecting (contact form, demo request, WhatsApp or email contact), we collect the following data:

• First and last name of the person in charge
• Restaurant or business name
• City and address of the establishment
• Business phone number
• Business email address
• Content of exchanges (WhatsApp messages, emails)

As part of the use of the TapNpay service by your end customers (web app), order and session data are collected. This processing is the subject of separate documentation provided when the service contract is signed.

3. Purposes of processing

• Respond to demo requests and inquiries
• Establish a quote and a service contract
• Provide onboarding and training
• Provide technical and commercial support
• Improve the product by incorporating feedback from partner restaurants
• Comply with our legal and regulatory obligations

4. Legal basis

Processing is based on:

• Consent : for sending commercial communications.
• Performance of a contract : for the provision of the subscribed service.
• Legitimate interest : for commercial prospecting with professionals (art. 4 and 5 of law 09-08).

5. Data recipients

Your data is processed by:

• The commercial and technical team of 4YA SARL AU (restricted access).
• Supabase (database hosting, EU) — privacy policy. supabase.com/privacy
• WhatsApp / Meta (communication channel) — in case of contact via WhatsApp, data is subject to Meta's terms.

We do not sell or rent your data to third parties.

6. Retention period

• Prospect data (without signed contract): 3 years from last contact.
• Customer data (with contract): contract duration + 5 years for accounting and legal purposes.
• Fiscal transaction data: 10 years in compliance with DGI (Moroccan tax authority) regulations.

7. Your rights (law 09-08)

In compliance with law 09-08, you have the following rights:

• Right of access : obtain a copy of your personal data held by 4YA SARL AU.
• Right of rectification : correct inaccurate or incomplete data.
• Right to object : oppose the processing of your data for commercial prospecting purposes.
• Right to erasure : request deletion of your data, subject to legal retention obligations.

To exercise these rights:

Send your request to contact@tapnpay.ma specifying your identity. Response within 30 days.

8. Cookies

This site uses cookies strictly necessary for operation (session, language preferences). No advertising tracking cookie is used.

Cookies present:

• tnp_lang — remembers the chosen language (localStorage, not transmitted to the server).
• tnp_cookie_consent — remembers your acceptance of this policy (localStorage).

You can delete this data at any time from your browser settings.

9. Supervisory authority

If you believe your rights are not being respected, you may lodge a complaint with the:

National Commission for the Protection of Personal Data (CNDP)
Angle Avenue Annakhil and Rue Annoujoum — Hay Riad, Rabat
cndp.ma