This policy explains how Youssef Lghoumaigui, a Moroccan auto-entrepreneur trading as Semavora (“we”, “us”), handles personal data when you visit our website or use the Service. Questions: support@semavora.com.
What we collect
- Account data: name, email address, workspace name and role.
- Workspace data you provide: website domains, source URLs, settings, remediation notes and evidence you upload.
- Audit data: content we fetch from the public pages of your verified website and of competitors it names, a business profile derived from that content, and the results we compute. Page text is kept only while an audit runs; reports keep short quotes as evidence.
- Website visits: on semavora.com we count page views with Cloudflare Web Analytics, which uses no cookies and does not track individual visitors; it reports only aggregate numbers such as pages visited, referrers, country, device type and page load speed.
- Usage and security data: sign-in events, IP address, browser type and logs of actions in the Service, used to secure and operate it.
- Billing data: Lemon Squeezy, our Merchant of Record, processes payments. We receive your name, email, country, plan and payment status. We never receive or store full card numbers.
Why we use it
To provide the Service (accounts, audits, reports, collaboration); to secure it and prevent abuse; to communicate with you about your account, service changes and support; to process subscriptions through our reseller; and to meet legal obligations. We do not sell personal data and we do not use your data for advertising.
Service providers
We use trusted providers who process data on our behalf:
- Amazon Web Services — application hosting, database and storage, in the EU (Frankfurt, Germany).
- Hetzner — hosting of our website and web interface, in the EU.
- Cloudflare — DNS, network security, email forwarding and cookie-free website statistics for semavora.com.
- OpenAI — during an audit we send excerpts of public website pages to build the business profile and review content, and send buyer questions with your business name to obtain web-search answers, which we compare with quotes from your website. No account or payment data is sent.
- Lemon Squeezy — payment processing, taxes and invoicing as our Merchant of Record.
Some providers may process data outside your country, including in the United States; where required we rely on appropriate safeguards such as standard contractual clauses.
Retention
Account and workspace data are kept while your account is active and as needed to provide the Service. During early access, contact support@semavora.com to request account closure or deletion. We may keep limited billing, security or legal records where required to meet legal obligations, resolve disputes or protect the Service.
Security
Data is encrypted in transit and at rest, access is limited by role, and workspaces are isolated from each other. No system is perfectly secure; we will notify affected customers of a breach as required by law.
Your rights
Depending on where you live (including under Moroccan Law 09-08 and the EU GDPR), you can ask to access, correct, delete or export your personal data, or object to certain processing. Email support@semavora.com; we respond within 30 days. You may also complain to your data protection authority (in Morocco, the CNDP).
Children
The Service is for businesses and is not directed at children under 16.
Changes
We will post updates on this page and give reasonable notice of material changes through the channels available to us.