Skip to content

Privacy Policy

Last updated: September 2026

Hirafy is a platform that connects clients with home-service professionals in Morocco. This policy explains what data we collect, why, who it is shared with, how long we keep it and how to exercise your rights, in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

1. Data controller

VORLIX GROUP SARL, operator of the Hirafy platform. Bureau 40, 5th floor, Bureaux Andalous, Rue Acila, Lotissement Idrissia, Fès, Morocco. Trade register no. 91269 (Fès Commercial Court). Contact: ⁨contact@vorlix.ma⁩.

2. Data we collect
  • Account: first and last name, phone number, email address, password (encrypted), profile photo, and your Google or Apple identifier if you sign in with those services.
  • Professionals: trade, skills, description, business name, experience, date of birth, service area, photos of past work.
  • Projects and exchanges: description and photos of your requests, job address or neighbourhood, quotes, messages, attachments, voice calls (not recorded) and reviews.
  • Professional wallet: balance, transaction history and top-up receipts.
  • Technical data: IP address, device and browser type, login logs, notification tokens.
3. Why we use it
  • To create and manage your account and sign you in (including by SMS or WhatsApp code).
  • To connect clients and professionals: publishing requests, sending quotes, enabling messaging and calls.
  • To manage professionals' wallets, commissions and subscriptions.
  • To send you notifications about your activity (new quotes, messages, reminders).
  • To keep the platform safe: fighting bots, fraud and prohibited content (project descriptions are checked automatically).
  • To measure audience and the effectiveness of our ads, only if you accept (see section 6).
  • To tell you about offers on our own services, which you can refuse at any time (see section 7).
4. Who sees your data on Hirafy
  • A professional's public profile (name, trade, photos, area, reviews) is visible to all visitors.
  • When a client posts a request, the relevant professionals see the description and the neighbourhood. Contact details are only shared between people who have been connected.
  • Authorised staff of VORLIX GROUP SARL access data according to their role, and only when needed for the service or for support.
  • We never sell your data.
5. Service providers and transfers outside Morocco

To run Hirafy, we use providers that process some data on our behalf and following our instructions. Several are based outside Morocco. These transfers are subject to the formalities required by the CNDP.

ProviderRoleCountry
Vercel Inc.Website hosting, file storage, audience measurementUnited States
Neon Inc.DatabaseServers in Germany (EU)
ResendSending emailsServers in Ireland (EU)
AdaSMS, EnvoiSMSSending SMSMorocco
YCloud, Meta (WhatsApp)WhatsApp messagesSingapore, United States
GoogleGoogle sign-in, maps and addresses, automatic content checksUnited States
AppleApple sign-inUnited States
ExpoMobile and web notifications (including browser notification services)United States
LiveKitVoice callsUnited States
AblyReal-time messagingUnited Kingdom
CloudflareBot protectionUnited States
Meta, TikTokAd measurement (only with your consent)United States, Ireland, Singapore
6. Cookies and ad measurement

We use cookies that the site needs to work (login session, language, theme) and anonymous audience measurement. Meta and TikTok advertising tools are only switched on if you click “Accept” in the cookie banner. In that case, they receive information about your visit and, when you sign up, an encrypted, irreversible version of your email and phone number, so we can measure how well our ads work. You can change your mind at any time using the “Cookies” link at the bottom of the page.

7. Promotional messages

If you have a Hirafy account, we may send you offers about our own services by WhatsApp, SMS or email (for example a commission discount). You can refuse at any time, free of charge: reply “STOP” on WhatsApp, or use the unsubscribe link in every email. We never send offers on behalf of other companies. If you filled in a Hirafy form on TikTok or Meta, we use your contact details to get back to you about your request.

8. How long we keep data
  • Account data, projects and messages: for as long as the account exists, then for at most 12 months after it is deleted.
  • Wallet and financial transaction history: 10 years after the transaction (accounting obligations).
  • Login codes: deleted as soon as they expire.
9. Your rights

Under Law No. 09-08, you have:

  • a right of access to the data concerning you;
  • a right of rectification of inaccurate or incomplete data;
  • a right to object on legitimate grounds, to the processing of your data, and without giving a reason to direct marketing;
  • the right to withdraw your consent at any time, where processing is based on it.

To exercise your rights, write to ⁨contact@vorlix.ma⁩. We may ask you to prove your identity in order to protect your data.

10. Security

All communications are encrypted (HTTPS/TLS). Access to data is limited by role, administrative actions are logged, and our providers are bound by confidentiality commitments.

11. Contact and CNDP

For any question: ⁨contact@vorlix.ma⁩. Hirafy has started the declaration and authorisation formalities with Morocco's National Commission for the Protection of Personal Data (CNDP). Their references will be added here once issued. You can also contact the CNDP: ⁨www.cndp.ma⁩.

Account deletion

You can delete your account and personal data at any time. See our account deletion page