Privacy Policy

This policy explains what we do with personal data when you visit our website or use Qualis. We have written it to be specific rather than reassuring: it names the actual cookies, the actual companies that touch your data, and the actual things we store. If anything here is unclear, ask us and we will answer plainly.

1. Who is responsible

Qualis is operated by BERRYNOON SARLAU (trading as BerryNoon), registered in Morocco at Oasis Offices Latitudes, Route de l’Oasis, Bureau 304, Maarif, 20103 Casablanca, Morocco, RC 733061, ICE 003979715000027. For the data described in section 3 we are the data controller. For privacy questions, contact contact@berrynoon.ma, call +212 660 402 200, or use our contact page.

2. Your data, and your customers’ data

There are two different relationships here, and they matter:

Data about you. Your account, your organization, your use of the service. We decide how that is handled, so we are the controller and this policy applies directly.
Data you put into Qualis. Your clients, suppliers, staff, orders and documents. That is your data. You are the controller, and we are your processor: we handle it on your instructions, to run the service for you, and for nothing else. We do not mine it, sell it, or use it to train models.

One practical consequence worth flagging: Qualis sends emails on your behalf to your own contacts, for example purchase orders to suppliers and invoices, statements and payment reminders to your customers. Those messages carry the contact data you entered. Telling those people how you use their data is your responsibility as their controller.

3. What we collect

Account and organization data

Your name, email address, and password (stored only as a salted hash, never in a form we can read). Your organization membership, permissions and teams. Whether your email is verified. Your avatar, if you upload one. If you were invited, we hold the invitation record: the email it went to, who invited you, when you accepted.

Usage and audit data

Qualis is enterprise software, so it keeps an audit trail: who changed what record, when, and what the value was before and after. Every document also keeps a version history. This is a deliberate product feature that your own administrators rely on, and it means your actions inside an organization are visible to that organization’s administrators.

Files you upload

Documents and images you upload are stored in our document management system, along with the derived thumbnails Qualis generates. Whatever personal data your files happen to contain is stored with them.

Our public website

If you send us a message through the contact page, we store your name, email address, the message, and the IP address it came from, so we can reply and so we can block abuse.

If you read our blog, we record how far you read, how long you spent, and the country and city your network resolves to, so we can tell which articles are worth writing. That record carries a random identifier generated fresh for each page load, so it cannot be linked to you or to your other visits, and we do not store your IP address, your browser user agent, or the page you came from. Nothing is stored on your device for this.

If you comment, we store the name, email address and comment you submit, plus your IP address, so we can handle abuse. If you clap for a post, we store only a one-way hash of your IP and browser, never the IP itself.

Payment data

We never see or store your card details. When you buy a paid subscription, payment is taken by Paddle.com, our Merchant of Record, on its own systems. We receive only the resulting subscription state, such as the plan, its status, and the amounts Paddle reports back. See section 7.

4. Why we use it, and on what legal basis

To provide Qualis (accounts, tenancy, the features you use). Basis: performance of our contract with you.
To bill you for paid subscriptions and storage. Basis: performance of our contract, and legal obligations around accounting.
To secure the service (audit trails, abuse prevention, rate limiting). Basis: our legitimate interest in a service that is not abused, and your interest in one that is not breached.
To communicate with you about your account, security, and material changes. Basis: performance of our contract.
To understand our website and blog. Basis: your consent for analytics cookies, and our legitimate interest in knowing which content is useful.

We do not sell personal data, and we do not use your data for automated decision-making with legal effects.

5. Cookies and local storage

These are all the cookies Qualis itself sets:

payload-token: keeps you signed in. Strictly necessary. Not readable by JavaScript.
active-org: remembers which organization you are working in. Strictly necessary. Expires after 30 days.
qualis_consent: remembers your cookie choice, so we do not ask again. Strictly necessary. Expires after 1 year.

Google Analytics sets its own cookies (_ga and _ga_ followed by our measurement id) on our public website, and only after you consent to analytics. Their lifetime is Google’s default, currently 2 years. Our own staff signing in to our internal control panel get session cookies from our authentication provider; these never reach customers or visitors.

We also keep some things in your browser’s local storage rather than in cookies, because they never need to reach our servers: your light or dark theme choice, your language, a copy of your cookie choice, and small interface preferences such as which panels you collapsed. This is not used to track you.

You can change your cookie choice at any time by clearing the qualis_consent cookie for this site, which brings the banner back.

6. Analytics, described honestly

We use Google Analytics 4 on our public website only. The signed-in Qualis application is not tracked with analytics at all.

We run Google Consent Mode v2 with every signal denied by default, before Google’s script loads. In practice that means no analytics or advertising cookies are set, and no analytics identifier is stored, unless and until you accept. Our banner offers “Reject all” as prominently as “Accept all”, plus a preferences panel.

To be precise rather than flattering: Google’s script is still loaded on our public pages even if you reject, and loading it means Google’s servers receive the request, including your IP address, along with the fact that you denied consent. What denial prevents is storage and identification, not the request itself. If that is not acceptable to you, a browser-level blocker is the effective control, and our site works fine with one.

7. Who else touches your data

We keep this list short on purpose. These are the companies that can hold or handle personal data on our behalf:

Worth saying plainly first: your records live in our own database, which we run ourselves rather than renting a managed database service. It sits on a server we rent from the hosting provider below, in the United Kingdom. No outside company queries or analyses your ERP records.

Paddle.com (Ireland/UK): our reseller and Merchant of Record. Takes payments, handles tax, issues invoices, and holds the billing contact and payment details for paid subscriptions.
Amazon Web Services (S3): stores the files you upload, in the eu-west-3 (Paris, France) region.
Amazon SES (eu-west-3 (Paris, France)): delivers transactional email such as verification, invitations, and the documents Qualis sends on your behalf. We do not put tracking pixels in our emails.
Hostinger (the United Kingdom): rents us the server that runs Qualis and holds our database, so your records sit on its disks. It does not access or use them.
Google: analytics on the public website only, and only with your consent, as described in section 6.

AI providers are your choice, not ours. Qualis’s optional AI features are off until your organization turns them on and supplies its own API key for a provider it selects, such as Anthropic, OpenAI, Google or xAI. Once enabled, the content those features use, which can include your ERP records, goes to that provider under your account and its terms. We do not pick the provider and we hold no key on your behalf. Leave the AI features off and nothing is sent.

Exchange-rate lookups fetch published rates from public sources. Those requests carry a currency code and no personal data.

8. International transfers

We operate from Morocco and our customers include businesses in the European Economic Area and the United Kingdom, so personal data may be transferred outside the country you are in. Concretely, here is where your data actually sits:

Your records (the database): the United Kingdom, on our server at Hostinger.
Files you upload: the eu-west-3 (Paris, France) region, so inside the EU.
Transactional email: sent via eu-west-3 (Paris, France).
Our own team administers the service from Morocco, so our staff access data from there.

The United Kingdom is covered by a European Commission adequacy decision, so moving personal data from the EEA to our UK-hosted database does not require additional safeguards. For transfers to Morocco, and for any transfer outside the EEA or the UK that adequacy does not cover, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses. Ask us and we will tell you what applies to your organization.

9. How long we keep it

We keep your account and organization data for as long as your organization exists. Cancelling a paid subscription does not delete anything: your organization simply moves to Qualis Start and keeps its records, which is a deliberate promise, not an oversight.

Two details worth being straight about. First, deleting a record in Qualis moves it to the trash rather than erasing it, so that your administrators can undo mistakes; it is removed for good when it is permanently deleted, which also deletes its attached files. Second, because Qualis keeps version history and audit trails by design, superseded values persist in that history until the record itself is permanently deleted. That is what makes the audit trail trustworthy, and it is worth knowing before you assume an edit erased something.

If you want your organization and everything in it permanently deleted, ask us and we will do it. We may keep the minimum needed to meet legal obligations, for example records required for accounting or tax.

10. Security

Passwords are stored only as salted hashes. Sessions use cookies that JavaScript cannot read. Every organization’s data is isolated, access is enforced by granular permissions on every request rather than only in the interface, and changes are recorded in an audit trail. Traffic to Qualis is encrypted in transit. No system is perfectly secure, but if a breach ever affects your personal data we will tell you and the relevant authority within the timescales the law requires, and we will tell you what we actually know rather than the least alarming version of it.

11. Your rights

Depending on where you live, and in particular under the GDPR if you are in the EEA or the UK, you can ask us to:

give you a copy of the personal data we hold about you;
correct it if it is wrong;
delete it;
give it to you, or another provider, in a portable format;
restrict or object to how we use it, including anything based on legitimate interests;
withdraw consent you gave, such as for analytics, at any time.

Email contact@berrynoon.ma and we will respond within one month. There is no charge. If the request concerns data your employer or another organization put into Qualis, we will point you to them, since they control it and we cannot act over their heads.

If you think we have handled your data badly, please tell us first. You also have the right to complain to your data protection authority.

12. Children

Qualis is business software and is not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, tell us and we will delete it.

13. Changes to this policy

We will update this page when our data handling changes. The “last updated” date at the top always reflects the current version, and if a change materially affects you we will tell you by email or in the app rather than quietly editing the page.

14. How to contact us

For anything in this policy, email contact@berrynoon.ma, call +212 660 402 200, write to us at Oasis Offices Latitudes, Route de l’Oasis, Bureau 304, Maarif, 20103 Casablanca, Morocco, or use our contact page. Our Terms of Service and Refund Policy cover the commercial side.