1. Who is responsible
Yaliko is the controller for its users' data (the businesses that create a workspace and their team members). For the end customers of those businesses, Yaliko acts as a processor: the business remains the controller.
For any question about your data: support@dber.app.
2. What we collect
Account data: name, email, password (hashed), business name, address, language, business WhatsApp number.
Usage data: pages viewed in your workspace, actions taken, IP address, browser type, approximate country, and the technical logs needed for security.
Billing data: plan and payment history. Card numbers never pass through our servers; our payment provider handles them.
Your customers' data, processed on your behalf: orders, conversations, contact details, purchase history. You decide what you collect and for how long.
3. Why we use it
To provide the service (host your store, route your messages, run the AI agent), keep the platform secure, bill you, support you, and improve the product from aggregated statistics.
AI features send the necessary content (a customer message, a product sheet) to a model provider to generate a reply. Those exchanges are not used to train public models.
We never sell your data and never advertise to your customers.
4. Who we share it with
Only with the providers the service cannot run without, bound by contract: hosting and database, email delivery, payment processing, AI providers, and the platforms you choose to connect (Meta for WhatsApp, for example). Some are located outside Morocco and the European Union; we make sure they offer adequate safeguards.
We may also disclose data where the law requires it.
5. Cookies
dber.app uses strictly necessary cookies only: login session, preferences (language, currency), security. We use no advertising cookies on the platform. Our customers' stores may enable their own analytics tools; they are responsible for them.
6. How long we keep it
Your account data is kept while the account is active, then deleted within 90 days of closure, except where the law requires retention (invoices). Technical logs are kept for at most 12 months. Backups roll over on a 30-day cycle.
7. Your rights
Under Moroccan law 09-08 on the protection of individuals with regard to the processing of personal data, and under the GDPR where it applies, you can access your data, correct it, have it deleted, object to a processing or ask for portability. Most of this is possible directly from your settings; for the rest, write to support@dber.app.
If you are a customer of a business that uses Yaliko, contact that business first; we help them answer you.
8. Security
Encryption in transit (TLS) and at rest, hashed passwords, data isolation between workspaces, access logging and regular permission reviews. No system is infallible: if an incident affects your data, we inform you without undue delay.
9. Changes
We update this policy as the service evolves. The date at the top shows the current version; material changes are notified by email.
Questions?
Write to us at support@dber.app. We reply within two business days.