Your data and privacy

What is it for?

You entrust Billora with information about your company, your clients and your invoices. This article explains, simply, how it is processed and what you can do with it. Billora relies on Moroccan law no. 09-08 on the protection of personal data, whose supervisory authority is the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel, the national commission for personal data protection).

Example. Amine, manager of a travel agency in Oujda, receives a request from a client one day: "What information do you have about me?" Amine finds the client's record in Billora, passes it on, and corrects the address, which was wrong.

1. Who is responsible for what?

• Billora is the data controller for your account data: your name, your email, your company information, your subscription.
• Billora is a processor for the data you enter in the app: your clients, your suppliers, your invoices. This data is yours: you decide how it is used, and your own obligations towards your clients are yours. Billora processes it on your behalf.

2. What data does Billora process?

Category	Examples
Account	Last name, first name, email, password (stored hashed, unreadable)
Company	Company name, ICE, IF, RC, TP, address, logo
Subscription	Plan subscribed, activation history
Technical traces	IP address, browser, activity log
Business data	Invoices, quotes, clients, products (your data)
Mobile app	Notification token, name and system of the connected device
Files	Supporting documents and records you choose to upload
Bank details	RIB / IBAN of your company and your suppliers, entered by you

Billora never collects bank card numbers or card security codes. Billora does not sell, rent or share your data for commercial purposes.

3. Where is your data hosted?

Your data is hosted outside Morocco, in France (host Hostinger; backups in Lithuania), and certain technical providers (emails, notifications, e-invoice archiving, anti-bot protection) may process data outside Morocco, within the limit of what is necessary for the service. The up-to-date list is in the privacy policy.

4. Your rights and how to exercise them

Right	How to proceed
Access: obtain a copy of your data	Export your account (see below) or write to contact@billora.ma
Rectification: correct inaccurate data	Edit your company information in Paramètres → Informations (Settings → Information), or a client / supplier record directly. For account data you cannot find, write to support.
Erasure: delete your account and your data	Paramètres → Gestion du compte (Settings → Account management) (see Delete my account)
Portability: retrieve your data in a structured format	Paramètres → Import / Export → Exporter toutes mes données (Settings → Import / Export → Export all my data)
Objection: object to processing based on legitimate interest	Write to contact@billora.ma

Billora undertakes to respond within 30 days. In case of an unresolved complaint, you can refer the matter to the CNDP.

5. Export all your data, step by step

1. Open Paramètres → Import / Export.
2. At the top, the Exporter toutes mes données (Export all my data) block describes the content: clients, suppliers, products, invoices, quotes, credit notes, purchase orders, expenses, payments, bank accounts, supporting documents, activity log and e-invoicing archives.
3. Check or not Inclure les PDF de mes documents (Include the PDFs of my documents) (takes longer to prepare).
4. Click Télécharger l'archive (Download the archive). Keep the page open: depending on volume, preparation may take several minutes, then a ZIP file downloads on its own.

6. How your data is protected

• Encryption of exchanges (HTTPS) and passwords stored irreversibly.
• Strict separation between companies: each account sees only its own data.
• Roles and permissions: owner, administrator, collaborator, accountant, reader (see Team roles and access).
• Activity log of sensitive actions, kept 12 months.
• Two-step verification available for every user (see Securing your account).

7. How long is your data kept?

• Account data: for the duration of the subscription, then, after a validated deletion request, for a read-only retention period before permanent erasure.
• Your invoices and documents belong to you. Your company must keep them for 10 years (Moroccan accounting obligation): export them before leaving Billora.
• Subscription invoices issued by Billora: kept 10 years in its accounting.
• Activity log: 12 months.
• Test data (test mode): deleted when the account is activated.

8. Cookies

Billora uses essential cookies (login, display preferences) and, on the public website only, an audience measurement that activates only with your consent (cookie banner, refusal possible). No targeted advertising. Details: Cookies page of the website.

Frequently asked questions

Can my clients ask me to erase their data?

These requests are addressed to you, since you are responsible for your clients' data. In practice, you can edit or archive their records in Billora. Beware of invoices already issued: your accounting retention obligations apply. If in doubt, ask your accountant or the CNDP for advice.

Does Billora read my invoices?

Billora processes your data to provide the service (creating documents, sending emails, support), according to the purposes described in the privacy policy, and neither sells nor rents it.

Who do I contact with a question about my data?

The address contact@billora.ma, indicated as the point of contact in the privacy policy.

Next steps