Who is responsible for your data
Velix Digital, whose details appear in the legal notice, is the data controller for visitors of numa.ma, people who contact us and Numa account holders.
For the data our customers enter into Numa (their customers, suppliers, employees, documents), the customer remains the controller and Velix Digital acts as processor: we process it only on their instructions, under the terms of use.
Any question about your data: contact@numa.ma.
The data we collect
On the numa.ma website
- What you type into our forms (demo, contact, newsletter, idea): name, company, e-mail, phone, subject and message. Nothing else is asked.
- Technical logs kept by the hosting provider, as for any web server: IP address, date, page viewed, browser. They serve security and the operation of the site.
- Anti-spam protection: a hashed fingerprint of your IP address and browser, kept for fifteen minutes to limit bursts of submissions. The IP address is never stored in clear.
- Roadmap votes: a signed cookie, valid one year, that remembers your three votes. It contains no personal data.
- Analytics, if you accept it: pages viewed, where the visit comes from, device and browser, actions on the site (form submitted, demo flow steps), collected by Google Analytics through Google Tag Manager, and by the Meta pixel to measure our ads on Facebook and Instagram.
- Booking a demo: on the last screen of the demo flow, the Google Calendar booking page is loaded from Google; what you enter there (name, e-mail, time slot) is processed by Google to create the invitation.
In the Numa application
- Account data: identity, e-mail, phone, job title, company, assigned role.
- Billing data: company name, ICE, address, history of subscription invoices and payments.
- Usage data: login logs, connected devices, time-stamped actions in the application. They serve security, support and traceability.
- Customer data: everything your company enters into Numa. It belongs to you and is processed on your behalf (see above).
Why we use it
| Purpose | Legal basis |
|---|---|
| Answer your demo or contact request | Your consent, given by sending the form |
| Provide the service, manage your account and support you | Performance of the subscription contract |
| Invoice and keep our accounts | Legal obligation |
| Secure the site and the application (anti-spam, logs, alerts) | Legitimate interest |
| Send you the newsletter and Numa updates | Your consent, withdrawable at any time |
| Measure site traffic and the effectiveness of our ads, and show you our ads on Facebook and Instagram | Your consent, withdrawable at any time |
| Improve the product from aggregated, anonymous statistics | Legitimate interest |
We never use your data for any other purpose, and we make no automated decision with legal effects on you.
Cookies and trackers
The numa.ma website uses Google Tag Manager to measure its traffic (Google Analytics), and the Meta pixel to measure the effectiveness of our ads on Facebook and Instagram and to show you some. Nothing starts without your consent: on your first visit, a banner lets you accept or refuse, one as easily as the other.
Until you accept, Google is told that consent is denied: no analytics or advertising cookie is set, and only signals without cookies or persistent identifiers may be sent to it. The Meta pixel is not loaded at all. If you accept, Google Analytics sets its cookies (_ga, _ga_*) for 13 months at most, and the Meta pixel its _fbp cookie for 3 months.
If you have accepted and you send a demo request or a message, our server also reports it to Meta (Conversions API), with your e-mail, phone number and first name in hashed form (made unreadable with the SHA-256 algorithm), your IP address and your browser, to link the request to our ads. Without consent, nothing is sent.
Your choice is kept for six months in your browser, then you are asked again. You can change it at any time with the “Manage cookies” link at the bottom of every page; refusing deletes the analytics cookies already set. The technical voting cookie described above needs no consent: it only serves the vote you cast.
The Numa application uses only the cookies and session tokens strictly necessary to keep you signed in.
How long we keep it
| Data | Retention |
|---|---|
| Demo or contact requests with no follow-up | 12 months after the last exchange |
| Numa account and usage data | Duration of the subscription, then 30 days to allow export |
| Billing data | 10 years, as required by accounting obligations |
| Newsletter subscription | Until you unsubscribe, at most 3 years without interaction |
| Hosting provider technical logs | 12 months at most |
| Anti-spam fingerprint | 15 minutes |
| Google Analytics cookies, if you accept them | 13 months at most |
| Meta pixel cookie, if you accept it | 3 months |
| Your cookie choice | 6 months |
Who can access it
Your data is accessible only to the people at Velix Digital who need it to handle your request, provide support or invoicing. They are bound by confidentiality.
Our technical processors act only on our instructions:
- Hostinger International Ltd: hosting of the site and the application, servers located in France.
- E-mail delivery service: notifications, replies and newsletter.
- WhatsApp (Meta): only if you choose to write to us through that channel.
- Meta Platforms Ireland: measurement of our ads on Facebook and Instagram (Meta pixel and Conversions API), if you accept it.
- Google: analytics (Google Tag Manager, Google Analytics) if you accept it, and the demo booking calendar (Google Calendar).
Your data is never sold or rented. It may be disclosed to an authority upon a lawful request. In the event of a business transfer, you would be informed beforehand.
Where your data is hosted
The site and the application are hosted on servers located in France, with a provider established in the European Union and subject to the General Data Protection Regulation (GDPR).
This transfer outside Morocco is governed by law no. 09-08. Registration with the Moroccan data protection authority (CNDP) is currently in progress; the receipt number will be published on this page as soon as it is issued. The transfer comes with safeguards: a contract with the hosting provider, encrypted connections, restricted and logged access.
Your rights
Under Moroccan law no. 09-08 on the protection of individuals with regard to the processing of personal data, you have the following rights:
- Access: obtain a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete information.
- Objection: object to a processing on legitimate grounds, and to marketing at any time.
- Erasure: ask for your data to be deleted, within the limits of our legal obligations.
- Withdrawal of consent: at any time, without affecting what was done before.
To exercise these rights, write to contact@numa.ma or by post to the registered office of Velix Digital. We reply within 30 days; proof of identity may be requested in case of reasonable doubt. You may also lodge a complaint with the CNDP.
If you use Numa as an employee or partner of one of our customers, send your request to that company, which is the controller: we assist them in answering it.
Security
Encrypted connections, hashed passwords, a dedicated database per customer, automatic backups, roles and permissions per user: the measures in place are detailed on the Security page.
CNDP formalities and updates
The processing described here is subject to the formalities required by law no. 09-08 with the CNDP: registration is currently in progress. The receipt number will be published on this page as soon as it is issued.
This policy may change, in particular if new tools are added. The version in force is the one published on this page, with its date. In case of a substantial change, customers are informed by e-mail.