Modus Central
Get Started
Modus Central
Privacy Policy

Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains how Modus Central ("we", "our", "the app") collects, uses, retains, and protects personal data of users of the Modus mobile app, the web dashboard, and the online storefront available at moduscentral.online (together, the "Services").

Modus Central is business management software (point of sale, inventory, orders, and customer management) built for merchants and small businesses in Morocco. Each merchant using the Services ("Business Customer") acts as the data controller for their own end customers' data entered into the app; Modus Central acts as a data processor for that data, and as data controller for account data (owners, managers, staff).

To complete: the publisher's legal name, RC/ICE registration numbers, and registered address below need to be filled in before publishing, along with a dedicated privacy email address if you set one up (otherwise contact@moduscentral.online is used). Also check whether a CNDP declaration is required for your processing — see the "Supervisory authority" section below.

1. Data Controller

Publisher of the Services: Modus Central — [full legal company name], [legal form], registered under RC number [to complete] and ICE [to complete], with registered office at [address to complete], Morocco. Contact: contact@moduscentral.online.

2. Data We Collect

Depending on how you use the Services, we process the following categories of data:

  • Staff accounts (owners, managers, staff): full name, email address, password (stored encrypted), role, account status.
  • Business account data: business name, contact details, currency, subscription plan.
  • End-customer data (entered by the merchant): name, phone, email, address, business tax ID (ICE) where applicable, order history, account balance, invoices, estimates, and recorded checks.
  • Transaction data: orders, purchased items, amounts, status, refunds, status history.
  • Technical data: push notification token (Firebase Cloud Messaging) used to alert staff of new orders, IP address and server logs for security purposes.

We do not collect health data, biometric data, or other special categories of sensitive data under Law 09-08.

3. Purpose of Processing

  • Provide, operate, and secure the Services (point of sale, inventory, orders, customer management).
  • Authenticate users and manage role-based access (owner, manager, staff).
  • Send operational notifications (e.g. new order) to the Business Customer's staff.
  • Provide technical support and improve the Services.
  • Comply with our legal and accounting obligations.

4. Legal Basis

Processing is based on performance of the contract with the Business Customer (access to the Services), our legitimate interest in keeping the app secure and functioning correctly, and, where applicable, the data subject's consent.

5. Data Sharing

We do not sell personal data. Data may be shared with:

  • Our cloud hosting provider, for storage and technical operation of the Services.
  • Firebase Cloud Messaging (Google), solely to deliver push notifications to staff devices.
  • Competent authorities, where required by law.

6. Data Retention

Data is retained for the duration of the contractual relationship with the Business Customer, then archived or deleted in line with applicable legal and accounting obligations in Morocco, unless an earlier deletion request is made in accordance with Law 09-08.

7. International Data Transfers

Depending on the technical hosting provider used, some data may be processed on servers located outside Morocco. Where this is the case, we commit to implementing the safeguards required under Law 09-08 for any transfer of personal data to a third country.

8. Security

We implement reasonable technical and organizational measures (password encryption, encrypted HTTPS connections, role-based access control) to protect data against unauthorized access, loss, or alteration.

9. Your Rights

Under Law No. 09-08 on the protection of individuals with regard to the processing of personal data, you have the right to access, rectify, object to, and request deletion of your data. To exercise these rights, contact us at contact@moduscentral.online. If you are an end customer of a merchant using Modus Central, you may also address your request directly to that merchant, who is the controller of your data.

10. Cookies and Local Storage

The web dashboard only uses cookies/local storage strictly necessary to maintain your login session. We do not use advertising or third-party tracking cookies.

11. Children

The Services are intended for business/professional use and are not directed at children. We do not knowingly collect data relating to minors.

12. Supervisory Authority

You may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP), Morocco's data protection authority (www.cndp.ma). If the processing described above has not yet been declared to, or authorized by, the CNDP, we recommend completing that formality before this app goes live in production.

13. Changes

This policy may be updated from time to time. The "last updated" date at the top of this page reflects the most recent revision. We encourage you to review it periodically.

14. Contact

For any question about this policy or your personal data: contact@moduscentral.online