Privacy policy
2026-09-27
1. Controller
N'Guessan Manasse N'DRI, Casablanca, Maroc. Contact: hello@margokit.com.
2. Data we process
Account: name, email, password (hashed, never readable), language and time zone.
Content: your business details, clients, products, quotes, invoices and payments you enter. For your clients’ data, you are the controller and Margokit acts as a processor.
Subscription: purchase information sent by Gumroad (email, product, amount, country).
Technical: security logs, IP address (abuse prevention), anonymous visit statistics (Vercel Analytics, cookieless).
The calculator runs in your browser: the numbers you type are not stored.
3. Purposes and legal bases
Providing the service (contract); securing it and preventing fraud (legitimate interest); managing subscriptions (contract); sending account emails (contract) and, if you sign up, the newsletter (consent, unsubscribe anytime).
4. Processors
Vercel (hosting), MongoDB Atlas (database, European Union region), Resend (email delivery), Gumroad (payments), Google (Sign in with Google, if you use it). Some may process data outside the EU with appropriate safeguards (standard contractual clauses).
5. Retention
As long as your account exists. When you delete your account, your data is erased from the live database; backups are overwritten according to their rotation cycle.
You must keep your invoices for the legal period of your country: export them before deleting your account.
6. Your rights
Access, rectification, erasure, portability (JSON export in Settings), objection and restriction. Write to us at the address above.
You can lodge a complaint with your data protection authority (for example the CNIL in France, the CNDP in Morocco).
7. Cookies
Only the cookies required to keep you signed in (secure session). No advertising cookies.
8. Security
Encrypted connections (HTTPS), hashed passwords, random revocable share links, encrypted license keys, rate limiting, access control on every request.