Privacy Policy
Last updated: September 2026
Hirafy is a platform that connects clients with home-service professionals in Morocco. This policy explains what data we collect, why, who it is shared with, how long we keep it and how to exercise your rights, in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.
1. Data controller
VORLIX GROUP SARL, operator of the Hirafy platform. Bureau 40, 5th floor, Bureaux Andalous, Rue Acila, Lotissement Idrissia, Fès, Morocco. Trade register no. 91269 (Fès Commercial Court). Contact: contact@vorlix.ma.
2. Data we collect
- Account: first and last name, phone number, email address, password (encrypted), profile photo, and your Google or Apple identifier if you sign in with those services.
- Professionals: trade, skills, description, business name, experience, date of birth, service area, photos of past work.
- Projects and exchanges: description and photos of your requests, job address or neighbourhood, quotes, messages, attachments, voice calls (not recorded) and reviews.
- Professional wallet: balance, transaction history and top-up receipts.
- Technical data: IP address, device and browser type, login logs, notification tokens.
3. Why we use it
- To create and manage your account and sign you in (including by SMS or WhatsApp code).
- To connect clients and professionals: publishing requests, sending quotes, enabling messaging and calls.
- To manage professionals' wallets, commissions and subscriptions.
- To send you notifications about your activity (new quotes, messages, reminders).
- To keep the platform safe: fighting bots, fraud and prohibited content (project descriptions are checked automatically).
- To measure audience and the effectiveness of our ads, only if you accept (see section 6).
- To tell you about offers on our own services, which you can refuse at any time (see section 7).
4. Who sees your data on Hirafy
- A professional's public profile (name, trade, photos, area, reviews) is visible to all visitors.
- When a client posts a request, the relevant professionals see the description and the neighbourhood. Contact details are only shared between people who have been connected.
- Authorised staff of VORLIX GROUP SARL access data according to their role, and only when needed for the service or for support.
- We never sell your data.
5. Service providers and transfers outside Morocco
To run Hirafy, we use providers that process some data on our behalf and following our instructions. Several are based outside Morocco. These transfers are subject to the formalities required by the CNDP.
| Provider | Role | Country |
|---|---|---|
| Vercel Inc. | Website hosting, file storage, audience measurement | United States |
| Neon Inc. | Database | Servers in Germany (EU) |
| Resend | Sending emails | Servers in Ireland (EU) |
| AdaSMS, EnvoiSMS | Sending SMS | Morocco |
| YCloud, Meta (WhatsApp) | WhatsApp messages | Singapore, United States |
| Google sign-in, maps and addresses, automatic content checks | United States | |
| Apple | Apple sign-in | United States |
| Expo | Mobile and web notifications (including browser notification services) | United States |
| LiveKit | Voice calls | United States |
| Ably | Real-time messaging | United Kingdom |
| Cloudflare | Bot protection | United States |
| Meta, TikTok | Ad measurement (only with your consent) | United States, Ireland, Singapore |
6. Cookies and ad measurement
We use cookies that the site needs to work (login session, language, theme) and anonymous audience measurement. Meta and TikTok advertising tools are only switched on if you click “Accept” in the cookie banner. In that case, they receive information about your visit and, when you sign up, an encrypted, irreversible version of your email and phone number, so we can measure how well our ads work. You can change your mind at any time using the “Cookies” link at the bottom of the page.
7. Promotional messages
If you have a Hirafy account, we may send you offers about our own services by WhatsApp, SMS or email (for example a commission discount). You can refuse at any time, free of charge: reply “STOP” on WhatsApp, or use the unsubscribe link in every email. We never send offers on behalf of other companies. If you filled in a Hirafy form on TikTok or Meta, we use your contact details to get back to you about your request.
8. How long we keep data
- Account data, projects and messages: for as long as the account exists, then for at most 12 months after it is deleted.
- Wallet and financial transaction history: 10 years after the transaction (accounting obligations).
- Login codes: deleted as soon as they expire.
9. Your rights
Under Law No. 09-08, you have:
- a right of access to the data concerning you;
- a right of rectification of inaccurate or incomplete data;
- a right to object on legitimate grounds, to the processing of your data, and without giving a reason to direct marketing;
- the right to withdraw your consent at any time, where processing is based on it.
To exercise your rights, write to contact@vorlix.ma. We may ask you to prove your identity in order to protect your data.
10. Security
All communications are encrypted (HTTPS/TLS). Access to data is limited by role, administrative actions are logged, and our providers are bound by confidentiality commitments.
11. Contact and CNDP
For any question: contact@vorlix.ma. Hirafy has started the declaration and authorisation formalities with Morocco's National Commission for the Protection of Personal Data (CNDP). Their references will be added here once issued. You can also contact the CNDP: www.cndp.ma.
Account deletion
You can delete your account and personal data at any time. See our account deletion page