Khlass
Language
Sign up

Privacy policy

Last updated: 5 October 2026

1. Data controller

[NOM COMPLET], auto-entrepreneur, [ADRESSE]. Contact: [email protected].

CNDP declaration number: [N° DÉCLARATION CNDP].

2. Data we collect

Account: name, email, phone, password (hashed), language.

Business: legal name, ICE, IF, auto-entrepreneur number, CNIE, professional tax number, address, bank details, logo and stamp.

Clients: name, ICE, trade register number, country, contact details, logo.

Documents and payments: quotes, invoices, credit notes, lines, notes, amounts, currencies, dates and payment methods.

Subscription: payment history. Card details are handled directly by YouCan Pay and are never stored by Khlass.

Messages: contact and feedback forms, including any attachments.

Technical data: IP address, access logs and cookies required for the service to work.

3. Purposes

Your data is used to provide the service (documents, PDFs, emails, ceiling, threshold and tax calculations), manage your subscription, send you account-related emails and alerts, answer your messages and keep the service secure (fraud and bot prevention).

Your data is never sold or used for advertising.

4. Hosting and subprocessors

Hetzner Online GmbH (Germany): hosting of the application and database.

Cloudflare, Inc.: file storage (Cloudflare R2) and bot protection on forms (Turnstile).

Resend: email delivery.

YouCan Pay: card payments.

These providers only process your data for the purposes of the service. Data transfers outside Morocco are carried out under the CNDP declaration mentioned above.

5. Retention

Your data is kept for as long as your account is active. When you delete your account, it is erased; technical backups are deleted within [DURÉE DE CONSERVATION DES SAUVEGARDES].

Information about subscription payments may be kept for as long as required by legal obligations.

6. Your rights (Law 09-08)

You have the right to access, rectify, object to (on legitimate grounds) and delete your data.

To exercise these rights, email us at [email protected] from your account’s address. You can also file a complaint with the CNDP (www.cndp.ma).

7. Export and account deletion

You can export your invoices and payments (CSV) and all your PDFs (ZIP archive) from the Accounting exports page.

You can delete your account at any time from your profile. Remember to export your documents first: keeping them for your own obligations remains your responsibility.

8. Cookies

Khlass only uses necessary cookies: session, form security and language. Public forms use Cloudflare Turnstile to check that you are not a bot. No advertising or analytics cookies are used.

9. Security

Connections are encrypted (HTTPS), passwords are stored hashed, and access to data is limited to what is strictly necessary.