Privacy Policy
Last updated: July 2026
Introduction
Afrah ("we", "us") operates a Moroccan event marketplace connecting customers with event service providers. This policy explains what personal data we collect, why, and the rights you have over it. By using Afrah you agree to this policy.
Data we collect
Account data: full name, email address, phone number, city, and password (stored as a secure hash). Provider business data: business name, description, photos, prices, address and map location, WhatsApp number and social links. Activity data: bookings, reviews, favorites and messages you exchange through the platform.
How we use your data
We use your data to operate the marketplace: showing provider listings, transmitting booking requests between customers and providers, enabling chat, and sending service notifications. We do not sell your personal data and we do not use it for third-party advertising.
What is shared with other users
When you contact a provider (booking or message), that provider sees your name and the details of your request. Provider business profiles, including contact details they choose to publish, are visible to all visitors. Your email and phone number are never publicly visible.
Storage and security
Data is stored with Supabase (PostgreSQL) with row-level security controlling who can read each record. Connections are encrypted in transit (HTTPS). Access to production data is restricted to authorized operators.
Your rights
You can view and edit your profile data at any time from your account page, and permanently delete your account and associated data using the "Delete account" option. You may also contact us to request a copy of your data or corrections.
Data retention
We keep your data while your account is active. When you delete your account, your profile, bookings, favorites, messages and reviews are permanently removed. Limited records may be retained where required by law.
Contact
For any privacy question or request, contact us at contact@afrah.ma.