Privacy policy

1. Introduction

At Wayo, we are committed to collecting and using your data responsibly, in compliance with applicable data protection laws, including moroccan law no. 09-08 and, when applicable, the gdpr (eu 2016/679).

By using our platform, you agree to the collection, processing, and use of your data as described in this privacy policy.

2. Data we collect

We only collect data that is necessary, in accordance with law 09-08 and, where applicable, the gdpr.

3. Purpose of using your data

We use your data to:

• Provide, maintain, and improve our services (course access, video hosting, progress tracking).
• Personalize the learning experience and recommend relevant content.
• Manage contractual relationships (accounts, subscriptions, billing, support).
• Communicate service information (updates, changes, alerts).
• Ensure platform security and integrity (abuse/fraud detection).
• Perform usage analysis (audience measurement, r&d) with aggregated or anonymized data whenever possible.

All use is in accordance with applicable laws (law 09-08, gdpr if relevant).

4. Legal bases for processing

Depending on the case, we rely on:

• Your consent ( e.g., non-essential cookies, newsletters, optional data).
• Performance of a contract Or pre-contractual measures (e.g., registration, course access, billing).
• Compliance with a legal obligation ( e.g., invoice retention, tax/accounting obligations).
• Our legitimate interest ( e.g., security, service improvement, internal analyses).

5. Sharing your information

Wayo does not sell your personal data. limited sharing may occur:

• Essential service providers:
  • Stripe ( secure payments): processes only necessary payment data.
  • Hosting providers ( servers preferably within the eu): content storage and delivery, databases.
  • Emailing tools ( e.g., brevo/mailchimp): transactional emails and, with consent, marketing.
  • Analytics ( e.g., google analytics): audience measurement, subject to consent for non-essential cookies.
• With mentors: Learner data strictly necessary for course delivery (name, email, progress, results).
• Legal reasons: If required by law or in response to a legitimate request from a competent authority.

Where applicable, contractual clauses impose confidentiality, security, and compliance guarantees on our subprocessors (law 09-08 / gdpr).

6. Data security

• Tls/https encryption for data in transit.
• Access controls based on need-to-know.
• Regular backups and restoration procedures.:
• Security updates and periodic audits.
• Logging and detection of abnormal activities.

In case of a data breach, we will inform affected users promptly and provide recommended protective measures, in accordance with applicable laws.

7. User responsibilities and content protection

• Respect the intellectual property rights of mentors and Wayo.
• Do not copy, share, redistribute, or resell content without authorization.
• Understand that any violation may result in account suspension and, if applicable, legal action.

8. Cookies and tracking technologies

We use:

• Essential cookies ( site functionality, security, session).
• Analytical cookies ( e.g., google analytics) for audience measurement.
• Marketing cookies ( if applicable) to personalize the experience.

Non-essential cookies are only set with your consent via a cookie banner on your first visit. you can withdraw or modify your preferences at any time via the banner or your browser settings. for more information, see our cookie policy.

9. Links to third-party sites

The platform may contain links to external sites. Wayo is not responsible for their content or privacy practices. we encourage you to review their respective privacy policies.

10. Data retention periods

We retain your data only for as long as necessary for the purposes described above or as required by law. afterward, data is deleted or anonymized.

11. Children's privacy

For users under 18, collection and processing are done only with explicit consent of a parent/guardian. parents/guardians can access, correct, or request deletion of their child's data by writing to info@wayo.cloud.

12. Your rights

Under law 09-08 (and gdpr if applicable), you have the following rights:

• Access: obtain confirmation that data concerning you is processed and receive a copy.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal obligations.
• Objection: Object to processing for legitimate reasons (including marketing).
• Restriction: Request temporary limitation of processing in certain cases.
• Portability (gdpr): Receive your data in a structured, commonly used format.
• Withdraw consent: At any time, without affecting the legality of prior processing.

To exercise your rights: info@wayo.cloud. Proof of identity may be required. we will respond within 30 days (legal timeframe).

Moroccan supervisory authority (cndp): www.cndp.ma – You may contact the cndp if you believe your rights are not respected. for eu users, you may contact your member state authority.

13. International data transfers

We prefer hosting and processing within the eu or morocco. when data is transferred to third countries (e.g., tools provided by companies outside the eu/morocco), we implement appropriate safeguards (e.g., eu standard contractual clauses, contractual commitments, additional technical measures) to ensure an adequate level of protection.

14. Changes to this policy

Wayo may update this policy to reflect legal, technical, or operational changes. users will be informed of significant changes via the platform and/or email. the last update date is shown at the top. continued use of the platform constitutes acceptance of the updated policy.

Contact information

Data controller: Wayo
Email: Info@wayo.cloud
Address: [r320 umm hurair 2, dubai, uae]