Privacy & Cookie Policy

Storeino is a Moroccan e-commerce SaaS platform headquartered in Agadir, built first for cash-on-delivery (COD) selling. Merchants create stores on *.storeino.com subdomains or their own domain, with an apps marketplace of 30+ apps, multi-currency stores, shipping carrier integrations and the “COD in Africa” service for selling with cash on delivery in African markets.

The controller for the processing described in this policy is Storeino, reachable by email at support@storeino.com.

• Controller for storeino.com visitors, merchant accounts, billing and partners.
• Processor on behalf of the merchant for the data of merchants’ customers (buyers) collected through their stores. The merchant is the controller towards its customers and must inform them through its own store privacy policy; we process this data on the merchant’s instructions and only to provide the service.

• Account: name, email, phone, country, password (hashed), or Google/Apple sign-in data where used.
• Store: store name, domain, products, settings, installed apps and published content.
• Billing: signup requires a payment method (Visa or Mastercard card, or PayPal). Card data is processed directly by trusted payment service providers; we do not store full card numbers, only limited details such as card type, last digits and transaction status.
• Merchants’ customers (as processor): name, phone, address, city, ordered products, order, shipping and delivery status.
• Abandoned carts: when a merchant enables this feature, the order form data on their store is saved as soon as the buyer has entered a name and phone number, even if the order is not submitted, so the merchant can follow up. Merchants must inform their customers.
• Partners: identity, partner code, referrals, commissions and payout details (bank or PayPal).
• Technical and usage data: IP address, browser, device, pages visited, visit source (utm, gclid, fbclid) and cookies (see section 8).
• Communications: support messages and contact forms.

• Providing the service (contract): account, store, orders, shipping, support.
• Billing: subscriptions, trial, fees and fraud prevention (contract and legitimate interest).
• Partner program: attribution, commission calculation and payouts.
• Measurement and advertising: traffic, campaigns and site improvement (consent or legitimate interest, depending on applicable law).
• Communications: necessary service messages, and marketing you can unsubscribe from at any time.
• Legal obligations: accounting, tax and lawful requests from authorities.

We do not sell your personal data. We share it only with:

• trusted hosting and technical service providers (hosting, email, error monitoring) bound to protect the data;
• payment processors (cards and PayPal);
• shipping carriers the merchant connects, to deliver orders;
• apps installed by the merchant, e.g. order sync to Google Sheets in the merchant’s own Google account, or ad tracking tags the merchant adds;
• third parties for analytics, advertising and retargeting, partner/affiliate tracking and session recording, according to your choice in the consent banner;
• authorities where required by law.

Some service providers and third parties we work with (payment, hosting, measurement, advertising) are located outside Morocco (including the United States, the European Union and elsewhere), so your data may be transferred outside Morocco. We carry out these transfers in accordance with Law No. 09-08 and the conditions of the Moroccan data protection authority (CNDP), including any required authorization or declaration, and, for EU users, in accordance with the GDPR (standard contractual clauses or adequacy decisions).

• Account and store data: for the duration of the subscription, then for as long as needed for the purposes described or required by law, before deletion or archiving.
• Billing and accounting records: as required by Moroccan law.
• Merchants’ customer data: per the merchant’s instructions, deleted or anonymized within a reasonable time after store closure, unless the law requires retention.
• Cookies: see the table below.

We use cookies that are necessary for the site and signup plus our own and third-party cookies in four optional categories: analytics & measurement, advertising & retargeting, partner & affiliate tracking, and session recording & UX. The table below describes these categories. It does not cover merchants’ stores; each merchant chooses its own tags.

Consent and cookie settings: if you browse from the European Economic Area, the UK or Switzerland, a banner lets you accept or reject all categories, or choose; until you consent, measurement and advertising tools default to “denied” and other third-party tools load only after you consent to the relevant category. In other regions these categories are on by default and you can object at any time. We estimate the region from your browser’s time zone. Your choice is kept for 6 months and always overrides the defaults; you can change it or withdraw consent at any time via the Cookie settings link at the bottom of every page.

You can also delete or block cookies in your browser settings. Blocking necessary cookies may prevent signup.

Under Law 09-08 you have the rights to information, access, rectification and to object on legitimate grounds, including to direct marketing. If you are in the EU, the GDPR also gives you the rights to erasure, restriction, portability and to withdraw consent at any time.

To exercise them, email support@storeino.com; we may ask for proof of identity. We will reply promptly and within the time limits set by applicable law. You may also complain to the CNDP (www.cndp.ma) or to your EU data protection authority.

If you are a customer of a merchant’s store, contact the merchant first as the controller; we will help them respond.

We apply appropriate technical and organizational measures, including encryption in transit (HTTPS), hashed passwords and restricted access. No system is perfectly secure; we will notify affected people and authorities of serious breaches as required by law. You are responsible for keeping your login credentials confidential.

We may send you information about Storeino features and offers by email, SMS or WhatsApp. You can unsubscribe at any time through the link in the message or by contacting us. Necessary service messages (billing, security, changes to terms) continue while your account is active.

Our services are intended for professionals and adults; we do not knowingly collect data from minors.

Storeino undertakes to complete the formalities required by the CNDP under Law 09-08.

We may update this policy; material changes will be announced on this page or by email. Questions: support@storeino.com.