Your data remains protected, useful and under control.

When you browse and register on LeBonPro, we may collect certain personal information about you:

Your data is never sold to data brokers or advertising third parties. It is used exclusively to:

• Assurer le service de mise en relation sécurisée entre les clients et les prestataires.
• Faciliter le règlement des conflits et la médiation.
• Améliorer l'expérience utilisateur et lutter contre la fraude.
• Vérifier manuellement l'identité des prestataires qui demandent le badge vérifié.

If you subscribe to the LeBonPro newsletter, your email address, language and dated proof of consent are used only to send home advice, news and LeBonPro offers. Delivery is handled by Resend.

Transcribe voice notes and translate messages into the recipient's preferred language to make communication easier. The original text and audio remain available in the conversation.

When a provider submits a national ID card or passport, the file is stored privately, checked for security, and may be read by Google Vision OCR or Google's document analysis service to assist our review team. OCR never makes the final decision: only human review can grant the verified badge.

We do not store the full document number in plain text. When needed to prevent duplicates or document the audit trail, we keep a server-side HMAC fingerprint and only the last characters.

Identity documents are kept for as long as the provider account exists in order to secure the platform, handle disputes, and support any necessary legal action. They are purged only when the account is permanently closed, unless a block, active job, open dispute, or legal obligation requires continued retention. A minimal audit trail is kept to justify granting or removing the badge. Relevant CNDP formalities are followed, especially if a technical transfer to Google is needed for OCR.

For the service to work, some data must be shared with other users. For example:

When these features are enabled, audio files are sent to Deepgram for transcription and text is sent to Google Cloud's translation service. These providers act as technical processors; LeBonPro only sends them the content needed for processing.

Data storage is entrusted to servers certified via Supabase and PostgreSQL. All your sensitive information and passwords are hashed asymmetrically, making any exfiltration impossible to reuse. Our exchanges with our servers use TLS/HTTPS protocols.

Identity documents are never public. Uploads go through private quarantine, real file type checks, size checks, a SHA-256 hash, antivirus when configured, and PDF-specific hardening. Administrators can view them only through short-lived signed URLs.

Voice notes are stored in private storage. Playback uses short-lived signed links available only to authorized conversation participants.

In accordance with the legislation on the protection of personal data, in particular the CNDP in Morocco and the principles of the GDPR, you have at any time a total right of access, rectification and forgetting.

You can withdraw your consent at any time through the unsubscribe link included in every newsletter. A minimal record of the unsubscribed address is retained to prevent further unsolicited messages.

Requests sent from the Contact page (first and last name, email, phone, subject and message) are retained for no more than 12 months. Administrators may delete them earlier and a monthly automatic purge runs; its audit record contains no personal data.

When an author deletes a voice note, the player and transcription are hidden and deletion of the private file is triggered. Archiving or locally deleting a conversation does not delete the message for the other participant.

You can request account deletion from your settings, or send a complete technical request to dpo@lebonpro.ma. For a service provider account, final closure is immediate only in the absence of an active mission or open dispute; otherwise the account is blocked and the necessary data is kept while the situation is handled.