Privacy policy

EFact processes invoicing data on behalf of its customers. This page explains what data is collected, why, for how long, and your statutory rights.

Data controller

IT Zenata SARL, Les Orchidées 3, Imm. C, Bureau 12, 28810 Mohammedia, Maroc. Contact for personal data queries: contact@itzenata.tech, +212 6 63 00 27 63.

For data transmitted via the API, EFact acts as a data processor: you remain the data controller for your own customers' data.

Processed data

Account and service billing: identity, professional email, company name, login data, technical logs.

Invoicing data transmitted via the API: party identifiers (ICE, IF), company names, addresses, line items, amounts, and taxes, as well as signed XML documents and associated transmission proofs.

Purposes

Providing the service: conversion to UBL 2.1 XML format, electronic signature, submission for clearance, status delivery, and archiving.

Complying with statutory retention requirements, securing the platform, preventing abuse, managing contractual relations, and providing support.

Retention periods

Invoices and associated proofs: the archiving duration specified in your subscription, as indicated on the pricing page (1 year on the Starter plan, 10 years on paid plans).

Account data: permanently deleted upon account closure. No inactive copy is retained.

Security

Technical safeguards - encryption, signing key isolation, multi-tenant partitioning, and append-only audit logging - are detailed in our security documentation.

Your rights

In accordance with Law 09-08, you have the right to access, rectify, and object to the processing of your personal data. These rights can be exercised by contacting contact@itzenata.tech or via the contact page.