Marchilo is currently a pilot service operated on an individual basis in Morocco. The controller’s information will be updated when the business is formally registered.
Data controller
Marchilo is operated on an individual basis in Morocco by its founder. The contact point for all personal-data matters is contact@marchilo.com.
This provisional version will be completed with registration details once the business is legally established. Marchilo does not currently present itself as a registered company.
Data we process
- Account data: name, email address, interface language, and information needed for authentication.
- Pilot access requests: name, email, optional business name, and the goal you provide.
- Workspace data: projects, brand profiles, products, uploaded documents, instructions, generated content, media, and publishing calendars.
- Social connections: platform, account or Page ID and name, granted permissions, connection status, and encrypted access tokens.
- Technical data strictly needed for security, diagnostics, and service operation.
Why we use this data
- Create and secure your Marchilo workspace.
- Remember your brand, organize products, and generate content at your request.
- Connect accounts you authorize and carry out publications you have approved and scheduled.
- Handle pilot access, support, and rights requests.
- Prevent abuse, resolve incidents, and improve reliability.
- Meet applicable legal and regulatory obligations.
Legal grounds
Depending on the feature, processing is necessary to provide the requested service, relies on your express authorization—particularly for social connections—on the legitimate interest in securing and improving Marchilo, or on a legal obligation.
Service providers and connected platforms
Marchilo does not sell personal data. Only necessary data may be shared with technical providers operating the service, the AI provider used for a generation, and the social networks you choose to connect.
- Hosting and infrastructure: OVHcloud and Marchilo server components.
- Artificial intelligence: the provider enabled in Marchilo, such as Google Gemini or OpenAI, only when a generation feature requires it.
- Social networks: including Meta (Facebook and Instagram) or LinkedIn, only after your authorization.
International hosting and transfers
Some providers may process or host data outside Morocco. Marchilo limits shared information to what is necessary for the requested feature and applies the formalities and safeguards required by applicable rules, including Moroccan Law No. 09-08.
Retention
- Account and workspace data are kept while you use the service and are then deleted on request, subject to applicable legal duties.
- Social tokens are kept until they expire, the account is disconnected, or deletion is requested. Disconnecting removes the tokens stored by Marchilo.
- Pilot access requests are kept while they are reviewed and followed up.
- After deletion, residual copies may remain in secured backups for their rotation period, currently limited to 14 days.
Cookies and sessions
Marchilo uses strictly necessary cookies to maintain a secure session and remember your selected language. Marchilo currently uses no advertising cookies.
Security
Marchilo uses appropriate technical and organizational measures, including HTTPS, hashed passwords, separated user workspaces, access controls, protected backups, and encryption of social-network tokens. No system can guarantee absolute security.
Your rights
Depending on applicable law, you may request access, correction, objection, or deletion. Email contact@marchilo.com from the address linked to your account. Reasonable identity verification may be required before sensitive action is taken.
Changes to this policy
This policy may change as Marchilo’s features, providers, or future legal status evolve. The date at the top identifies the applicable version.