Privacy policy

Syndikom, Morocco. For any question about your data: contact@syndikom.com or WhatsApp +212 760 440 031.

• Account data: name, e-mail, phone, language, password (hashed), optional profile photo.
• Organisation data: syndic or company, buildings, units, residents, fees, payments, work orders, assemblies and the documents you upload.
• Technical data: IP address, device and browser type, activity logs, push notification token.
• Messages sent through the website contact form (name, e-mail, role, message).

• Providing and securing the service: sign-in, roles and permissions, notifications, backups.
• Performing the contract: subscription management, billing, support.
• Improving the product from aggregated usage statistics.
• Meeting our legal obligations, including the retention of co-ownership documents.

We process your data to perform the contract with your organisation, in our legitimate interest to secure and improve the service, and to meet legal obligations. Processing complies with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data.

When a syndic records residents in Syndikom, the syndic is the controller of that data; Syndikom processes it on the syndic's behalf and only to run the service. Residents have the same rights, which they can exercise with their syndic or with us.

• Hosting of the application, database and backups: Hostinger (servers in the European Union, in France).
• E-mail delivery: Hostinger's mail service (Titan), limited to the address and the message.
• Mobile push notifications: Expo (United States) and Google Firebase Cloud Messaging (United States), limited to the device identifier and the notification text.
• Address search in the web app: OpenStreetMap / Nominatim (United Kingdom), which receives the searched text, no account data.
• Technical error tracking: Better Stack (United States), which receives error reports from the API, the web app and the mobile app: error message, page or address concerned, browser or device type. These reports are used only to fix faults, and e-mail addresses are masked before sending.
• Accounting software, only if your organisation connects one: Zoho Books or QuickBooks Online (Intuit). It receives the name of the resident or customer, the number, dates, lines and notes of invoices, and the amount, date and reference of payments. This data may be hosted outside Morocco, depending on the organisation's account.
• These transfers outside Morocco are limited to the data the service needs.
• No sale or transfer of your data to third parties for commercial purposes.
• Disclosure to authorities only when the law requires it.

Account data is kept for the duration of your subscription. When it ends, or simply on request to contact@syndikom.com, it is deleted or anonymised within 30 days, unless the law requires it to be kept: co-ownership documents (minutes, accounts, contracts) may be kept for the applicable legal period, up to 10 years. Backup copies follow their rotation cycle and are erased after 30 days at most. Deleted data may therefore remain in them until then, and is used for nothing other than a restoration.

Encrypted connections (HTTPS), hashed passwords, two-factor authentication, roles and permissions, activity log, firewall, daily off-site backups and biometric lock on mobile.

You can ask for access to your data, its correction or deletion, restriction of processing, or object to processing, by writing to contact@syndikom.com. We answer within one month. You may also lodge a complaint with the National Commission for the Control of Personal Data Protection (CNDP).

You can also delete your account yourself, in the mobile app (Profile) or at app.syndikom.com/delete-account, through a link sent by e-mail. Your name, e-mail, phone, photo, notifications and sessions are then erased. Records kept by organisations stay and are unlinked from your account: your resident record, units, payments and invoices with the syndic, or your employee record with a company. The text of your support requests may also remain. If you are the only owner of an organisation that has other members, name a new owner first.

syndikom.com uses no advertising or tracking cookies. It only remembers your language and theme in your browser's local storage, and counts visits anonymously (no cookie, no IP address kept). The web app uses the cookies and storage strictly needed for your session.

We may update this policy; the date at the top shows the version in force. Significant changes are announced in the app.