N
Nmorocco

Legal

Privacy Policy

Last updated: September 24, 2026

At Nmorocco, we are committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have as a user of our platform.

1. Who We Are & Data Controller

Nmorocco is an online travel platform that connects travelers with trusted local guides, drivers, and hosts across Morocco's cities, mountains, deserts, and coastal regions. Nmorocco is operated by MarrakechTips LLC, a limited liability company registered in the United States (registered address: 5830 E 2nd St, Ste 7000 #30489, Casper, WY 82609, USA), with its operations based in Marrakech, Morocco. MarrakechTips LLC is the controller responsible for your personal data. We process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and, where it applies to travelers in the European Union, the EU General Data Protection Regulation (GDPR). For any privacy-related question, contact our privacy team at contact@nmorocco.com.

2. Information We Collect

When you use Nmorocco, we may collect the following types of information: Account information: your name, email address, phone number (including WhatsApp number), and date of birth when you register. Booking information: tour details, selected dates, group size, pickup or accommodation location you pin on the map, and payment information processed securely via Stripe. Profile information: any optional information you add, such as preferences, languages, or travel history. Sign-in information: if you sign in with Google, Apple, Facebook, X, or LinkedIn, we receive basic profile data (such as your name, email, and profile picture) from that provider. Host and guide information: if you offer experiences, we also collect an identity document (national ID card or passport) to verify your identity, your bank account details (account holder, bank, and RIB or IBAN) to pay you, and your availability. If you connect Google Calendar, we read your busy times and add your bookings to your calendar. Reviews: reviews you write are published on the platform with your first name and country. Some listings also show reviews that travelers left on other platforms (such as GetYourGuide), labeled with their source. Mobile app data: if you use our mobile app, we may collect device identifiers and push-notification tokens so we can send you booking updates. Usage data: pages visited, search queries, device type, browser, IP address, and interaction data used to improve and secure our platform. Diagnostic data: when an error occurs on the website or in our apps, we record technical details (the page or screen, browser or device type, app version, and your account ID if you are signed in) so we can fix it. Communications: messages between you and guides, and between you and our support team. If you choose to use the AI writing tools in messages (reply suggestions, translation, or tone rewriting), the text you select is processed to generate the result.

3. How We Use Your Data & Legal Bases

We use your personal data for the purposes below, each with its legal basis: • Setting up your account, managing bookings, and enabling communication between travelers and guides: to perform our contract with you. • Verifying your phone number and sending booking confirmations, reminders, and updates by WhatsApp, SMS, email, or app notification: to perform our contract and for our legitimate interest in a secure, reliable service. • Processing payments (via Stripe) and host payouts (via Wise): to perform our contract and to comply with legal, tax, and accounting obligations. • Verifying the identity of hosts and guides: to perform our contract with them and to comply with legal, tax, and anti-fraud obligations. • Providing the optional AI writing tools in messages, only when you use them: to perform our contract with you. • Improving the platform, detecting and fixing errors, fraud prevention, and security: for our legitimate interests. • Measuring how the platform is used with Google Analytics: only with your consent, given through our cookie banner. • Sending optional newsletters and marketing: only with your consent, which you can withdraw at any time. • Meeting legal obligations under Moroccan, US, and applicable international law: to comply with the law.

4. WhatsApp & SMS Messages

By providing your phone or WhatsApp number, you consent to receive transactional messages from Nmorocco by WhatsApp and/or SMS related to your bookings and account, including verification codes (OTP), booking confirmations, reminders, updates, and support replies. These are service messages, not marketing. Message frequency varies, and standard message and data rates may apply. Some transactional messages (such as security codes and booking confirmations) are necessary to use the service. You can opt out of non-essential messages at any time by contacting us at contact@nmorocco.com, or, where supported, by replying STOP; reply HELP for assistance.

5. Signing In with Google, Apple, Facebook, X, or LinkedIn

You can create an account or sign in using Google, Apple, Facebook, X, or LinkedIn. When you do, that provider shares basic profile information (such as your name, email address, and profile picture) with us, and their own privacy terms apply in addition to this policy. • Google: https://policies.google.com/privacy • Apple: https://www.apple.com/legal/privacy/ • Facebook (Meta): https://www.facebook.com/privacy/policy/ • X: https://x.com/en/privacy • LinkedIn: https://www.linkedin.com/legal/privacy-policy If you sign in with Apple, you can choose to hide your email address; we then receive a private relay address from Apple. We use this data only to create and secure your Nmorocco account. We never post to your social accounts.

6. Who We Share Your Data With

We do not sell your personal data. We share limited information only as needed to run the platform: Local guides & hosts: when you book, we share your first and last name and a link to your profile so the host can confirm the booking; once confirmed, we share your phone number so they can coordinate the tour. If the host has connected Google Calendar, your first name, the experience, and the booking time are added to the host's calendar. Your billing details are never shared with a host. Payment providers: Stripe processes traveler payments; Wise processes payouts to hosts and receives the host's bank details. We do not store your full card details. Technology providers: we use trusted providers to operate the service: Hostinger (website hosting), Supabase (database, authentication, and file storage), Google (Maps, sign-in, Calendar, and Firebase Cloud Messaging for app notifications), Apple (sign-in and app notifications), Meta/WhatsApp (messaging), an email delivery provider, and OpenRouter, which passes the text you choose to process with the AI writing tools to an AI model provider (such as Anthropic, Google, or OpenAI) to generate the result. These providers act on our instructions and under confidentiality obligations. Analytics: with your consent, we use Google Analytics to understand how the platform is used. Public content: reviews and host profiles are visible to other users and visitors. Affiliate partners: if you book through an affiliate or referral link, the partner sees the experience, date, and booking amount so they can be credited, but never your name, contact, or payment details. Legal requirements: we may disclose information if required by law, or to protect the rights, property, or safety of Nmorocco, our users, or the public.

7. International Data Transfers

Nmorocco is operated by MarrakechTips LLC, a US company, with operations in Morocco. Your data is therefore processed in Morocco and the United States, and some of our providers also process it in the European Union and other countries (for example Stripe, Supabase, Wise, Hostinger, Google, Apple, Meta/WhatsApp, and the AI model providers reached through OpenRouter). When your data is transferred across borders, we take steps to ensure it receives an adequate level of protection, including using providers that offer recognized safeguards such as the EU Standard Contractual Clauses or an equivalent framework.

8. Data Retention

We keep your personal data only as long as your account is active or as needed to provide our services. You can request deletion of your account and associated data at any time from your Account Settings. Specific retention periods: • Booking, payment, and payout records: up to 5 years, to meet legal, tax, and accounting obligations. • Host identity documents and bank details: while you are an active host, then only as long as needed for the payout and tax records above. • Messages between travelers and hosts: while the accounts involved are active. • Error and diagnostic logs: up to 12 months. • Analytics data: up to 14 months, under our Google Analytics settings.

9. Your Privacy Rights

You have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete information • Delete your account and associated personal data • Object to or restrict certain types of processing • Withdraw consent for marketing at any time • Data portability: you can download a copy of your personal data (in JSON or HTML) at any time from your Account Settings To exercise any of these rights, use your Account Settings or contact us at contact@nmorocco.com. You also have the right to lodge a complaint with the Moroccan data protection authority, the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel, www.cndp.ma). Travelers in the EU may also contact their local data protection authority.

10. Deleting Your Account

You can delete your account and all associated data at any time: On the website: open Account Settings from your profile menu and use the account-deletion option, or visit nmorocco.com/account-deletion and follow the instructions. In the mobile app: open Settings from the account menu and use the account-deletion option. When you delete your account, you are logged out on all devices and your account is disabled. Some records may be retained where required by law (see Data Retention). For help, contact contact@nmorocco.com.

11. Data Security

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Our platform uses encrypted connections (HTTPS), and passwords are stored using secure hashing. No method of transmission over the internet is 100% secure. We encourage you to use a strong password and keep your login credentials private. If a data breach affects your personal data, we will notify you and the relevant authorities where legally required, without undue delay.

12. Cookies

We use strictly necessary cookies to keep you logged in and remember your preferences. With your consent, given through our cookie banner, we also use Google Analytics cookies to measure how the platform is used. You can change your choice at any time with the "Cookie settings" link at the bottom of every page. See our Cookie Policy for full details.

13. Children's Privacy

Nmorocco is not intended for children. You must be at least 18 years old to create an account. We do not knowingly collect personal data from children; if you believe a child has provided us with personal data, contact us at contact@nmorocco.com and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and, if the changes are significant, notify you by email. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions or concerns about how we handle your personal data, please contact: MarrakechTips LLC (Nmorocco), Privacy Team Email: contact@nmorocco.com Registered address: 5830 E 2nd St, Ste 7000 #30489, Casper, WY 82609, USA Operations: Marrakech, Morocco