Test mode — payments use the Dodo Payments test environment. No real charges.
Opsacea
Legal

Privacy Policy

Last updated: June 2026. This page describes the data processed by Opsacea and the purposes of that processing.

Data controller

The data controller is EL Mamoun Boumlik (Opsacea), Casablanca, Morocco — full registered address available on request. Contact: support@opsacea.com.

Data collected

We collect only what is strictly necessary for the service to work:
  • Account email and login credentials.
  • Order information (product purchased, amount, date, Dodo Payments order ID).
  • Billing details provided during payment.
  • Requests submitted via contact / support forms.
  • Aggregated technical and analytics data about usage of the site.

Processing purposes

  • Processing orders and digitally delivering purchased products.
  • Processing payments through our Merchant of Record, Dodo Payments (including fraud prevention and tax compliance).
  • Invoicing and accounting obligations.
  • Managing the customer area, downloads and support.
  • Sending transactional emails (confirmation, access, product updates) and, where applicable, opt-in newsletters.

Payment — Dodo Payments (Merchant of Record)

Our order process is conducted by our online reseller Dodo Payments, which is the Merchant of Record for all our orders. Dodo Payments provides all customer-service inquiries related to payments and handles returns. Full payment card data (card number, CVC, expiry date) is entered directly on the Dodo Payments interface and is never stored on our servers. Dodo Payments acts as an independent data controller for payment data under its own privacy policy.

Cookies and analytics

We use functional cookies required for authentication and the shopping cart, plus privacy-respecting audience-measurement cookies. You may disable cookies in your browser; some features may then no longer work.

Processors and recipients

Your data may be transmitted to our technical sub-processors solely for the needs of the service: Dodo Payments (payment / Merchant of Record), our hosting provider (Lovable (Cloudflare infrastructure)), our transactional email provider and our analytics tools. Each is bound by contractual commitments compliant with Moroccan Law 09-08 on the protection of personal data and, where applicable, the GDPR.

Retention period

Order data is retained as long as necessary for performance of the contract and to meet legal obligations (notably accounting, generally 10 years). Account data is retained as long as the account is active and deleted upon request, subject to legal retention obligations.

Your rights

In accordance with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data — and, where applicable, the GDPR — you have rights of access, rectification, erasure, portability, restriction and objection. To exercise these rights, write to support@opsacea.com. You may lodge a complaint with the CNDP (www.cndp.ma).

Changes

This policy may evolve; any substantial change will be posted on this page.