Privacy policy

Udrive processes the data necessary for operating the platform. The agency also processes, as an independent manager, the data necessary for its rental relationship. This policy covers the site, accounts, reservations, SaaS tools and associated exchanges.

We may process your identification and contact data, account information, reservation data, identification documents, license, passport, payment information, inventory records, exchanges, notices, technical logs and vehicle location data where the agency's equipment and conditions provide for this.

Any automated collection, scraping or bulk extraction of personal data or service content is prohibited except where required by law or authorised in writing. Technical measures (rate limits, robots.txt) do not limit this contractual prohibition.

The processing is used to create and secure an account, search for and manage a reservation, execute the contract, prevent fraud, produce the necessary documents, provide assistance, administer agency subscriptions, improve the service and meet legal obligations. Promotional communications and unnecessary trackers are based on your choice when required.

If this functionality is activated after completion of the applicable CNDP formalities, a report linked to a reservation may be submitted by an agency, moderated before any visibility and contested by the person concerned. Consultations are logged; the evidence remains limited to the declarant and the authorized administrators. Approved reports expire depending on their severity, between 12 and 60 months. This feature does not produce any automated decisions.

Equipped vehicles can transmit their position, speed and technical events during use;GPS history is kept for 90 days, unless legally necessary or in dispute. CIN, passport or license images can be read by an OCR service to assist with document capture and verification, without replacing the agency's human control.

The recipients are the authorized Udrive teams, the agency concerned, authorized users, legally authorized authorities and our subcontractors: Supabase, Vercel, Stripe, CMI, Resend, Sentry, Upstash and Google Cloud Vision depending on the service used. Everyone only accesses the data necessary for their mission.

Some providers may process data from abroad. Udrive supervises these transfers with the required contractual, technical and administrative guarantees and completes, when necessary, the formalities provided for by Law No. 09-08 with the CNDP.

Account data is kept for the life of the account and then for the periods necessary for the defense of rights. Accounting documents are kept for 10 years. GPS logs are kept for 90 days and risk register data for 12 to 60 months after approval. Other durations are determined by the purpose, the contract and legal obligations.

We apply appropriate technical and organizational measures: access control, authentication, logging, flow encryption, backups, rate limitation and separation of data between agencies. No system is infallible, we invite you to preserve the confidentiality of your identifiers.

You can request access, rectification, opposition for legitimate reasons and, when the conditions are met, erasure of your data. The customer area allows the export of certain data in JSON format and the deletion request results in the anonymization of the profile, subject to the data that must be retained. Write to privacy@udrive.ma and you can enter the CNDP.

Udrive uses cookies necessary for operation and, depending on your choice, analytical or marketing cookies. Your preference is kept for 180 days. You can change the settings via the cookie manager or your browser; refusing certain cookies may limit certain functions.

Rental Services are not intended for independent use by minors. We may update this policy; the update date indicates the applicable version. For any questions or requests: privacy@udrive.ma.