Privacy Policy
Last updated: 27 février 2026
EXOS DATA SARL, publisher of the OKTRA platform (hereinafter "we", "our" or "OKTRA"), is committed to protecting the privacy of its users. This privacy policy describes how we collect, use, store and protect your personal data, in accordance with Law No. 09-08 on the protection of individuals with regard to the processing of personal data.
1. Data Controller
The data controller for your personal data is:
EXOS DATA SARL
Limited liability company with share capital of [X] MAD Registered office: [Full address], Casablanca, Morocco Trade Register (RC): [Number] — Casablanca Tax ID (IF): [Number] Common Business ID (ICE): [Number] Email: contact@oktra.ma Phone: +212 XXX XXX XXX
2. Data Collected
We collect the following categories of data:
Account Data
Full name, email address, phone number, company name (if applicable)
Browsing Data
IP address, browser type (user-agent), pages visited, session duration, cookies
Alert Data
Saved search criteria, notification preferences, sectors and regions of interest
Payment Data
Processed exclusively by our payment provider (NAPS/CMI). No credit card data is stored on our servers.
3. Processing Purposes
Your data is processed for the following purposes:
- Providing and managing the OKTRA service (account, alerts, searches)
- Sending personalized alerts based on your criteria
- Generating anonymized usage statistics
- Continuous improvement of the platform and user experience
- Communicating important service updates
- Managing billing and subscriptions
4. Legal Basis
The processing of your data is based on:
- Law No. 09-08 on the protection of personal data
- Your explicit consent when creating your account
- Performance of the service contract (Terms of Use)
- Our legitimate interests (service improvement, security, fraud prevention)
5. Data Recipients
Your data may be shared with:
- OKTRA internal team (support, technical, development)
- Technical subcontractors: Amazon Web Services (hosting), Firebase/Google Cloud (authentication)
- Payment provider: NAPS/CMI (transaction processing)
We never sell, rent or share your personal data for commercial purposes with third parties.
6. International Transfers
Some data is processed by subcontractors located outside Morocco:
- Amazon Web Services (AWS) — Region eu-north-1 (Stockholm, Sweden): hosting and email sending via Amazon SES
- Firebase (Google Cloud): authentication service
These transfers are governed by appropriate safeguards in accordance with Law 09-08 and international data protection standards.
7. Data Retention
We retain your data for the following periods:
8. Data Security
We implement the following security measures to protect your data:
- TLS (HTTPS) encrypted communications
- Secure password hashing (bcrypt)
- Restricted data access (principle of least privilege)
- Regular encrypted backups
- Continuous access monitoring and anomaly detection
9. Your Rights
Under Law 09-08, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right of rectification: correct inaccurate or incomplete data
- Right of objection: object to the processing of your data for legitimate reasons
- Right of deletion: request the erasure of your data
- Right to portability: receive your data in a structured format
To exercise your rights, contact us at: dpo@oktra.ma
We are committed to responding to your request within 30 days.
You may also file a complaint with the CNDP (National Commission for the Control of Personal Data Protection): www.cndp.ma
10. Cookies and Trackers
To learn more about our use of cookies, please see our Cookie Policy.
In summary, we use three categories of cookies:
- Essential cookies: necessary for the site to function (session, language, security)
- Analytics cookies: anonymized audience measurement (with your consent)
- Functional cookies: user interface preferences (with your consent)
11. Changes to This Policy
We reserve the right to modify this privacy policy at any time. In the event of a substantial change, we will inform you by email and/or through a visible notification on the platform. The date of the last update is indicated at the top of this page.
12. Contact
For any questions regarding the protection of your personal data, you may contact us:
- DPO Email: dpo@oktra.ma
- General Email: contact@oktra.ma
- Address: [Full address], Casablanca, Morocco