Privacy Policy

Elaicar ("we", "us", "our") is a car rental management platform operated by Elaitech, a company registered in Casablanca, Morocco. This Privacy Policy describes how we collect, use, share, and protect personal information when you use our software (the "Service"), the public booking websites we operate for our customers, or our WhatsApp Assistant. By using the Service, you agree to the practices described in this Policy.

We collect the following categories of personal information: • Account data: name, email address, phone number, business name, and password (hashed) when a dealer signs up. • Customer data uploaded by dealers: client names, phone numbers, emails, identity document details, driver's license details, booking history, and notes. • Conversation data: messages exchanged through our WhatsApp Assistant between dealers and their customers. • Payment data: we record payment status, amounts, method and metadata for rental transactions; we never collect or store card numbers. • Vehicle telemetry: GPS location and trip history if you subscribe to the GPS add-on. • Technical data: IP address, browser type, device information, and server log files.

We use personal information to: • Provide, operate, and maintain the Elaicar platform. • Process bookings, payments, and rental transactions. • Power the AI Rental Assistant, which sends WhatsApp messages and customer-uploaded reservation context to OpenAI's API to generate replies. • Communicate with users about their account, payments, support requests, and product updates. • Detect fraud, abuse, and security incidents. • Comply with legal, regulatory, and tax obligations.

We share data with the following processors, each bound by data-processing agreements: • OpenAI — AI text generation for the WhatsApp Assistant. OpenAI states it does not use API data to train its models. • Meta / WhatsApp Business — delivery of WhatsApp messages between dealers and their customers. • Traccar / GPS hardware vendors — vehicle tracking, when the GPS add-on is enabled. • Hosting providers — secure cloud infrastructure in Europe and Morocco. We do not sell personal data to third parties.

We keep personal data for as long as your account is active. After account closure, we delete or anonymize personal data within 90 days, except where local law requires longer retention — for example, Moroccan tax law generally requires accounting and invoicing records to be retained for 10 years.

Under Moroccan Law 09-08 on the protection of personal data, and the GDPR for residents of the European Economic Area, you have the right to: • Access the personal data we hold about you. • Correct inaccurate or incomplete data. • Request deletion of your data. • Object to or restrict certain processing. • Data portability (a machine-readable copy of your data). • Lodge a complaint with your local data protection authority (in Morocco: the CNDP). To exercise these rights, contact [email protected]. We respond within 30 days.

We use minimal cookies, limited to session authentication and basic, anonymized analytics. We do not use third-party advertising or tracking cookies.

We protect personal data using industry-standard measures: TLS encryption in transit, encryption at rest for databases, hashed passwords, role-based access controls, and regular security reviews. No system is 100% secure; in the event of a personal-data breach, we will notify affected users and authorities as required by Moroccan law and the GDPR.

The Service is intended for users aged 18 and older. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a child under 18, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be announced via email or an in-app banner at least 30 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

Elaitech — Casablanca, Morocco Privacy inquiries: [email protected] General support: [email protected] Website: https://elaitech.com