This Privacy Policy explains how Master Syndic (“we”, “our”, “us”) collects, uses, stores, transfers, and protects personal information when you access or use our platform, mobile application, and services (“Service”).
We are committed to international data protection standards, including GDPR, CCPA, and other global regulations.
By using the Service, you consent to this Privacy Policy.

1. INFORMATION WE COLLECT

We may collect the following categories of data:

Personal Information

• Name and surname
• Email address
• Phone number
• Profile picture (optional)
• Authentication information

Property & Residence Data

• Residence names, blocks, and apartments
• Owner and tenant information
• Unit details
• Additional units (parking, garages, shops)

Financial & Administrative Data

• Payments and transactions
• Expenses and invoices
• Budget documents
• Meeting minutes and decisions

Technical Information (Collected Automatically)

This information is collected automatically when you use the Service:

• IP address
• Device information
• Browser type
• Operating system
• Log files
• Usage analytics

Sensitive Data

We do not intentionally collect sensitive data unless strictly required by law or provided voluntarily by users (such as legal documents uploaded by users).

2. HOW WE USE YOUR INFORMATION

We process your data for the following purposes:

Service Delivery

• Managing residences, units, payments, and documents
• User authentication
• Notifications and communication

Service Improvement

• Analytics
• Performance optimization
• Detecting errors and bugs

Legal Compliance

• Fraud prevention
• Security audits
• Fulfilling regulatory obligations

User Communication

• Account updates
• Support and technical assistance
• Subscription notices
• Billing notifications

3. LEGAL BASIS FOR PROCESSING (GDPR)

We process personal data based on the following legal grounds:

• User consent
• Contractual necessity to provide the Service
• Legitimate interests (security, service improvement, fraud detection)
• Legal obligations

International users benefit from equivalent data protection safeguards where applicable.

4. HOW WE STORE AND PROTECT YOUR DATA

Security Measures

We implement industry-standard security measures including:

• Encryption at rest and in transit
• Firewalls
• Secure access controls
• Cloud security standards
• Regular security audits

Data Retention

We retain personal data only for as long as necessary for:

• Providing the Service
• Legal and regulatory compliance
• User requests

Users may request data deletion at any time.

5. INTERNATIONAL DATA TRANSFERS

Your data may be transferred to and processed in the following regions:

• European Union
• North America
• Middle East and Africa
• Data centers used by our service providers

All international transfers comply with applicable safeguards, including:

• GDPR Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Industry-standard security measures

6. SHARING OF INFORMATION

We may share limited personal data under the following circumstances:

Service Providers (Subprocessors)

We work with trusted third-party providers such as:

• Cloud hosting providers (AWS, Azure, Hetzner, etc.)
• Email delivery services
• Payment processors
• Analytics tools
• Security services

These providers are contractually prohibited from:

• Selling your data
• Using data for advertising
• Sharing data with unauthorized third parties

Legal Authorities

We may disclose data when required by law.

This includes court orders and legal investigations.

• We do not share data with advertisers
• We do not share data with data brokers
• We do not share data with third-party marketing companies

7. YOUR PRIVACY RIGHTS

Depending on your location (GDPR, CCPA, and similar regulations), you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (Right to be Forgotten)
• Export your data (Data Portability)
• Object to certain data processing
• Restrict data processing
• Withdraw consent at any time

To exercise any of these rights, please contact us.

Email: privacy@master-syndic.ma

8. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies for:

• Session management
• Analytics and performance monitoring
• Security purposes

You may disable cookies through your browser settings, but some features may not function properly.

9. CHILDREN’S PRIVACY

Master Syndic does not target or knowingly collect personal data from individuals under 16 years of age.

If such data is discovered, it will be deleted immediately.

10. DATA BREACH NOTIFICATION

In the event of a data breach:

• Affected users will be notified promptly
• Relevant authorities will be informed within 72 hours where required by law

11. THIRD-PARTY LINKS

The Service may contain links to third-party websites.

We are not responsible for the privacy practices of those external sites.

12. MODIFICATIONS TO THIS POLICY

We may update this Privacy Policy from time to time.

Significant changes will be communicated via email or in-app notifications.

Continued use of the Service constitutes acceptance of the updated policy.

13. CONTACT INFORMATION

For privacy or data protection inquiries: privacy@master-syndic.ma

For general support: support@master-syndic.ma