Privacy Policy

Last updated : 5 October 2026

This policy explains what data RDV Pilot processes, why, and your rights. It follows Moroccan Law No. 09-08 and, for data subjects in the European Union, the GDPR.

1. Roles

For your agency account data, RDV Pilot is the controller. For your clients' data (visa applicants), your agency is the controller and RDV Pilot acts as processor, only to book and track their appointments.

2. Data we process

• Agency account: email, agency name, phone, invited members, activity log.
• Agency clients: name, date of birth, passport number and dates, nationality, contact details, photo, chosen visa type and centre, and what the appointment requires.
• BLS accounts managed for the agency: email addresses, passwords (encrypted) and emails received from the visa centre (codes, confirmations).
• Payment: handled by Paddle. We never see or store your card number.
• Technical: IP address and service logs, needed for security and troubleshooting.

3. Why

To provide the service (monitoring, booking, appointment follow-up), manage the licence and payment, keep it secure, answer support and meet legal obligations. We sell no data and run no targeted advertising.

4. Service providers

• Paddle (payment, invoicing), Supabase (database, EU), our server hosted in Germany, Vercel (website), Forward Email (email receiving), Telegram (support bot).
• Your clients' data is sent to the visa centre only for the booking you request.

5. Retention

• Emails received from the visa centre: 3 days.
• Client data and BLS accounts: while the licence is active, then deleted within 30 days of account deletion.
• Billing records: as long as the law requires.

6. Security

Encrypted connections (HTTPS), passwords and sessions encrypted at rest, data separated per agency.

7. Your rights

Access, correction, objection and deletion: write to support@rdvdesk.com. An agency's clients should contact their agency first. You may also complain to the CNDP (Morocco) or, in the EU, your data protection authority.