Privacy Policy
Last updated: 29 July 2026
1. Who processes your data
Gigs.ma connects individuals with home-service providers in Morocco. We take no part in performing a job or in settling it. This policy describes the data we process in that role and nothing beyond it: we do not process data on behalf of third parties and we sell no data.
2. Data we collect
Account: name, phone number, email address where given, password (stored as a hash, never in clear), city. Providers: bio, profile photo, rates, availability, published work. Bookings: job address, date and time, description of the need, the amount proposed and then accepted. Exchanges: messages sent through the platform, published reviews, messages to support. Technical: a session identifier, its expiry and a description of the browser it was issued to, so that you can revoke a session.
3. Identity documents
A provider requesting the "verified" badge submits their national ID card. That document is held in private storage and is never reachable by a public URL: only the team reviewing it can open it, through a short-lived link generated on demand and logged. It is never shown on a profile, never passed to a client, and used solely to verify an identity.
4. How we use it
To run your account, publish and search listings, handle booking requests and the agreement on price, let the parties communicate, notify you about your bookings, review applications and identity documents, and handle disputes. We carry out no advertising profiling and no automated decision producing legal effects for you.
5. Sharing
Your data is neither sold nor rented. Your phone number reaches the other party only once a booking exists between you; before that, contact goes through the platform messaging. A provider’s public name, city, reviews and listings are public by nature. We use technical subprocessors (hosting, SMS and email delivery) who access only what their service requires. Data may be disclosed to the authorities where the law requires it.
6. What we do not collect
No banking data: settlement happens directly between client and provider, off the platform, and Gigs.ma offers no online payment. We therefore store no card number, no bank details and no transaction history. No advertising tracker, no third-party analytics and no tracking cookie is installed on the site.
7. Security
Passwords are stored as bcrypt hashes and cannot be read back, including by us. The site is served over HTTPS only. Identity documents live in separate private storage. Sessions rely on a cookie JavaScript cannot read, revocable at any time, and replaying an already-rotated token automatically invalidates the whole session family. Sensitive administrative actions are written to an append-only log.
8. Retention
Account data is kept for as long as the account exists. Booking data and reviews are kept beyond that, as a record between the parties. Identity documents are kept for as long as the verification and its justification require. One-time login codes expire within minutes. Sessions expire after thirty days at the latest.
9. Your rights
Under Law 09-08 on the protection of individuals with regard to the processing of personal data, you have rights of access, rectification, objection and erasure. Some data may be retained despite an erasure request where a legal obligation or the record of a completed job justifies it; we will tell you which and why. You may also refer the matter to the CNDP, Morocco’s data protection authority. To exercise your rights, write to us through the contact form: contact us
10. Cookies
Two cookies only, both strictly necessary. A session cookie ("gigs_refresh"), unreadable by JavaScript, which keeps you signed in and expires after thirty days. A language cookie, which remembers your choice of fr, ar or en. No advertising or analytics cookie is set, so no consent banner is required.