Privacy Policy

OSIS SARL, operating under the Faarli brand from Casablanca, Morocco (“Faarli”, “we”, “us”), determines how personal data is processed to operate the Faarli Rentals mobile application, its website, customer support, payment orchestration, identity verification, and marketplace services. You can contact us at contact@faarli.com.

This policy applies to renters, prospective renters, account holders, and people who contact us. A rental agency that receives your booking data also processes it for its own rental, vehicle, insurance, accounting, and legal purposes. Its own privacy notice may therefore apply in addition to this policy.

Depending on how you use Faarli Rentals, we process:

• Account and sign-in data: email address, password hash, display name, profile photo, account identifiers, sign-in provider, login dates, and account status.
• Rental profile data: first and last name, phone number, date of birth, country, city, postal and street address, driving-licence number and issue date, identity-document type and number, copies of those documents, and an identity-verification selfie.
• Booking and rental data: selected vehicle and agency, dates, pickup and return locations, delivery address, extras, prices, currency, booking status, contract, reviews, support history, and a vehicle walk-around video recorded at pickup.
• Payment data: amount, currency, transaction and customer identifiers, payment status, refund information, and guarantee-authorisation status. Faarli does not receive or store your full card number or card security code.
• Location and device data: approximate or precise location when you grant permission, IP address, device and operating-system information, app version, push-notification token, language, currency choice, crash/security logs, and interaction events needed to operate and improve the app.
• Rewards and referral data: referral code, referrer relationship, points balance, transaction history, reward milestones, and expiry dates.

We collect data directly from you when you create an account, submit your rental profile, select permissions, make a booking, upload a video, leave a review, or contact support. We also receive data from:

• Google or Apple when you choose social sign-in;
• Stripe regarding payments and guarantee authorisations;
• partner rental agencies regarding booking and rental status;
• your device and Firebase Cloud Messaging for notifications; and
• security, hosting, mapping, currency, and communications providers used to deliver the Service.

We process personal data to:

• create, authenticate, secure, and support your account;
• check rental eligibility, verify identity and driving documents, prevent impersonation, fraud, theft, and unsafe rentals;
• show nearby vehicles, calculate availability and prices, transmit booking requests, process payments, and administer guarantees;
• facilitate pickup, record the vehicle’s condition, provide the rental contract, manage the booking lifecycle, and resolve disputes;
• send transactional messages about verification, payments, pickup, returns, security, and account changes;
• operate loyalty points, referrals, and customer rewards;
• maintain, troubleshoot, secure, measure, and improve the app and protect Faarli, users, agencies, and the public; and
• meet accounting, tax, judicial, regulatory, and other legal duties.

Our processing is governed principally by Moroccan Law No. 09-08 and its implementing rules. Depending on the activity, processing is necessary to perform or prepare your contract, comply with law, pursue legitimate interests such as platform security and fraud prevention without overriding your rights, or is based on your freely given, specific, and informed consent.

We request consent for optional device permissions and direct marketing where required. Withdrawing consent does not affect earlier lawful processing, and contractual or legal processing may continue where another valid ground applies.

A selfie, identity document, and valid driving licence are required before a booking can be placed. Authorised reviewers compare the submitted information, record an approval or rejection status, and may provide a reason so that you can correct the submission. Phone ownership may also be checked through a one-time code delivered by WhatsApp.

These checks protect renters, agencies, and vehicles and help agencies meet insurance, contractual, and legal requirements. We do not use the selfie to build an advertising profile. If biometric matching is introduced in the future, we will provide a specific notice and obtain any consent or authorisation required before doing so.

• Location is used while you use the app to rank nearby vehicles and help arrange delivery. It is not required for basic browsing when a manual location is available.
• Camera and photos let you submit your selfie, identity document, driving licence, profile image, and required pickup inspection video.
• Microphone may be captured as part of the pickup video. Avoid recording bystanders or private conversations.
• Notifications deliver security, verification, booking, payment, pickup, return, and reward updates.

You can change permissions in your device settings. Some features may not work without the permission they need.

Stripe processes card details and may retain a payment method to complete the booking and, only if the agency accepts it, place the disclosed refundable guarantee authorisation. Stripe acts under its own privacy terms for the payment services it controls. Faarli receives limited transaction and status data needed to reconcile the booking, manage the guarantee, prevent fraud, and support you.

A guarantee authorisation is not a charge when it is only reserved on your card. It may be captured only in accordance with the rental contract, the agency’s disclosed conditions, applicable law, and the card-network rules.

We disclose only what is reasonably necessary to:

• the selected rental agency, so it can evaluate and fulfil the booking, prepare the contract, verify eligibility, hand over and recover the vehicle, comply with insurance duties, and handle claims;
• service providers supporting hosting and object storage, authentication, Stripe payments, Google and Apple sign-in, Firebase notifications, maps, email, customer support, and WhatsApp phone verification;
• professional advisers, insurers, banks, card networks, and authorities where needed for a claim, dispute, audit, transaction, legal request, or to protect persons and property; and
• a successor organisation in a merger, restructuring, financing, or sale, subject to appropriate confidentiality and notice requirements.

We do not sell personal data and do not disclose identity documents or precise location for third-party behavioural advertising.

Faarli provides agencies with software and marketplace services, but each agency independently determines how it uses personal data to enter into and perform its vehicle-rental contract, satisfy insurance requirements, manage incidents, and keep mandatory business records. Direct requests about an agency’s use should be sent to that agency; its contact details appear in your booking where available.

Faarli and an agency may each be responsible for different parts of the same booking journey. We will help route a request if it concerns processing controlled by the agency.

Data may be hosted or accessed in Morocco and in countries where our carefully selected service providers operate. Any transfer of personal data outside Morocco is carried out subject to Articles 43 and 44 of Law No. 09-08, applicable CNDP formalities, and appropriate contractual, organisational, and technical safeguards.

You may contact us for information about the relevant destination or safeguards, subject to legitimate confidentiality and security limits.

We retain personal data only for the time required for the purpose described above, considering active bookings, statutory limitation periods, tax and accounting duties, insurance claims, disputes, security needs, and CNDP-approved retention periods.

• Account and profile data is kept while the account is active. When you delete the account in the app, direct profile identifiers, sign-in links, location, marketing choice, and notification tokens are cleared or anonymised from the active account.
• Booking, payment, contract, agency, and transaction records may be retained separately for mandatory legal, accounting, fraud, insurance, and dispute purposes, then deleted or anonymised.
• Identity documents, selfies, and pickup evidence are restricted and retained only for verification, the rental lifecycle, claims, and a legally justified period thereafter.
• Push tokens are removed when unregistered or the account is deleted. Marketing records are retained until you opt out, plus the minimum suppression record needed to honour that choice.

We use access controls, encrypted transport, protected credentials, scoped staff permissions, private storage practices, payment-token separation, logging, backups, and organisational controls designed for the sensitivity of the data. Identity documents and pickup evidence are not intended for public access.

No system is risk-free. Keep your device and credentials secure, avoid sharing verification codes, and report suspected account misuse promptly to support@faarli.com.

Subject to Law No. 09-08 and verification of your identity, you may request access to data about you and its source, correction or updating, and deletion or blocking of data processed unlawfully. You may object on legitimate grounds and object at any time to direct marketing. You may also withdraw consent where consent is the basis of processing and delete your Faarli account in the app.

Send requests to contact@faarli.com. We may ask for information necessary to confirm your identity and locate the relevant data. If you believe your rights have not been respected, you may complain to the Moroccan Data Protection Commission (CNDP). Rights available under another applicable privacy law remain unaffected.

You can update profile information, change device permissions, turn off push notifications, sign out, or delete the account through the app and device settings. You can unsubscribe from promotional email or messages through the provided opt-out or by contacting us.

We may still send service messages required for security, payment, booking performance, pickup, return, or important legal changes while you have an account or active booking.

The app automatically calculates availability, prices, distance, reward eligibility, and certain fraud or security signals. Identity and document approval is designed to include authorised human review. We do not currently make a decision based solely on automated processing that produces legal effects or similarly significant effects for you.

Faarli Rentals is intended only for adults who have legal capacity to rent and drive a vehicle and who satisfy the selected agency’s age and licence requirements. We do not knowingly create rental accounts for children. Contact us if you believe a minor has submitted personal data improperly.

We may update this policy to reflect legal, technical, or service changes. We will post the new date and give additional notice in the app or by email where a change materially affects your rights or requires renewed consent.

Privacy or rights requests: contact@faarli.com
Customer support: support@faarli.com
Postal location: OSIS SARL, Casablanca, Morocco