Nomoo
← Home
← Back

Privacy Policy

Last updated: April 2026 · Governed by the laws of the Kingdom of Morocco.

1. Who we are

Nomoo (“Nomoo”, “we”, “us”) is a software service provided by an entity established in Morocco. We help restaurants connected to delivery platforms (such as Glovo) understand their performance and act on it via WhatsApp. For any question about this policy or your data, contact us at the address published on our home page.

2. Legal framework

We process personal data in accordance with Loi n° 09-08 du 18 février 2009 relative à la protection des personnes physiques à l'égard du traitement des données à caractère personnel, ainsi que ses textes d'application (Décret n° 2-09-165), under the supervision of the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP). Where applicable, we also align our practices with Loi n° 53-05 on electronic exchanges of legal data and the EU GDPR for users located in the European Economic Area.

3. Data we collect

We collect only what we need to operate Nomoo:

  • Account data : name, email, phone number, the restaurant brand you operate, the role of your team members.
  • Operational data : order, menu, ad and revenue data imported from the delivery platforms you connect (such as Glovo) or uploaded as CSV.
  • Communication data : messages exchanged with the Nomoo WhatsApp account and our support channels.
  • Technical data : IP address, browser type, pages viewed, anonymous usage analytics (we use Plausible, a privacy-friendly analytics provider that does not use cookies and does not collect personal identifiers).

4. Why we process this data

  • To provide and operate the Nomoo service.
  • To compute the recommendations and reports we send you on WhatsApp or in your dashboard.
  • To respond to your requests and keep your account secure.
  • To improve the product through aggregated, non-identifying analytics.
  • To comply with our legal and regulatory obligations in Morocco.

5. Legal basis

We rely on the following bases (per Loi 09-08, art. 4):

  • Performance of a contract : when you create an account and use Nomoo.
  • Your consent : for optional channels such as WhatsApp messaging or marketing communications, which you can withdraw at any time.
  • Legitimate interest : to secure the service, prevent fraud, and improve features.
  • Legal obligation : when required by Moroccan law.

6. Sharing of data

We do not sell your data. We share it only with:
  • Sub-processors that operate parts of our infrastructure (hosting, database, email delivery, AI inference, WhatsApp Business API). They are contractually bound to confidentiality and to process data only on our instructions.
  • Public authorities when required by Moroccan law.

A current list of sub-processors is available on request.

7. International transfers

Some sub-processors may be located outside Morocco (notably in the European Union and the United States). When such transfers occur, we rely on the safeguards required by the CNDP, including standard contractual clauses where applicable, and we limit transfers to what is strictly necessary to operate the service.

8. Retention

We keep account and operational data for the duration of your subscription plus a reasonable archive period required to meet our legal obligations (typically up to 5 years after account closure for accounting records). Aggregated, non-identifying data may be kept indefinitely for analytics purposes.

9. Your rights

Under Loi 09-08 (articles 7, 8, 9) you have the right to access, rectify, oppose and request the deletion of your personal data, as well as the right to data portability where applicable. To exercise any of these rights, contact us via the address listed on our home page. We respond within 30 days.

If you believe we have not handled your data correctly, you may file a complaint with the CNDP at www.cndp.ma.

10. Security

We apply technical and organisational measures aligned with the CNDP recommendations and the Directive Nationale de la Sécurité des Systèmes d'Information (DGSSI), including encryption in transit (TLS), encryption of sensitive credentials at rest, least-privilege access, audit logs of administrative actions, and regular dependency updates.

11. Cookies and analytics

Nomoo does not use advertising cookies. We use a small number of strictly necessary cookies for authentication and session management. Anonymous usage statistics are collected via Plausible Analytics, which does not use cookies and does not track individuals across sites.

12. Changes to this policy

We may update this policy as the service evolves. We will publish the new version on this page and update the “Last updated” date. Material changes will be communicated via email or WhatsApp.

13. Contact

For any question about this policy or to exercise your rights, please contact us at the address published on our home page.