Privacy policy

Last updated: September 1, 2026

1. Who we are

NextConfirmAI is a back-office for cash-on-delivery (COD) orders, published by NextDev Technologies, a company based in Marrakech, Morocco (“we”). This policy explains which data we process when you use NextConfirmAI, why, and what your rights are. It applies to merchants who open a store on NextConfirmAI and to those merchants’ customers whose orders are managed in it.

2. Our roles

  • For your account and store data, NextDev Technologies is the data controller.
  • For your customers’ data (name, phone, address, orders), the merchant is the data controller and NextDev Technologies acts as a processor: we only process it to run the service, on your instructions.

3. Data we process

About merchants:

  • Account: name, e-mail, phone, passkey public key or (hashed) password.
  • Store: name, logo and colours, currency, order prefix, delivery rate table, catalogue and stock.
  • Connections: API keys and tokens for online stores (YouCan, Shopify, WooCommerce, custom store) and carriers (Sendit), and your ingest API keys - stored encrypted and used solely to run the service.
  • Billing: chosen plan and references of bank transfers or CashPlus payments. We collect no card data.

About merchants’ customers:

  • Identity and delivery: name, phone number, city and address.
  • Orders: products, amounts, delivery fees, status and change history, carrier tracking number.
  • Confirmation: call attempts and the answer given through the confirmation link (confirmed or cancelled).
  • Trust profile: deliveries, returns, refusals and flagged numbers, computed per phone number from that store’s own orders only.

Technical data:

  • Server logs (IP address, browser, timestamps) needed to keep the service secure and to diagnose incidents.

4. Why we process it

Exclusively to:

  • Run the order pipeline: confirmation-call queue, confirmation links, parcel creation at the carrier, status updates, COD payout reconciliation.
  • Compute delivery fees and the trust profile of your store’s customers.
  • Prepare your WhatsApp messages and send transactional e-mails (order received, shipped, delivered) and alerts to your team.
  • Manage your account and billing, and answer your support requests.
  • Keep the service secure, prevent fraud and meet our legal obligations.

We do not sell your data, do not use it for advertising and do not share it with third parties beyond the cases described below.

5. WhatsApp and confirmation links

NextConfirmAI prepares your messages (a template per status, order details, confirmation link) and opens them in your own WhatsApp app. We do not access your WhatsApp account, do not send or receive messages on your behalf and do not store the content of your conversations. When your customer opens a confirmation link, we record only their choice (confirm or cancel) and the technical data of the visit.

6. Recipients and processors

Your data may be shared, strictly as needed, with:

  • The carriers you use (Sendit via API; the others only through files you export yourself): name, phone, address and parcel amount, to create and track the shipment.
  • The online stores you connect (YouCan, Shopify, WooCommerce): we read orders and the catalogue there under the access you grant us.
  • Our hosting, database, backup and e-mail delivery providers, which process data on our behalf, under contract and with equivalent security measures.

7. Retention

Your store’s data is kept for as long as your account is active: order history is part of the service. When you close your account, or on request, all your data is deleted within 30 days; backups are overwritten on rotation. Technical logs are kept for at most 12 months.

8. Security

Every store is partitioned at the database level (Row-Level Security): no query can read another store’s data. Data travels encrypted (TLS), API keys and tokens are stored encrypted and never appear in logs, passkey sign-in is available, and daily off-site backups are taken.

9. Your rights

Under Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data, you may:

  • Access: obtain a copy of the data we hold about you.
  • Rectification: have inaccurate data corrected.
  • Erasure: ask for your data to be deleted.
  • Objection: object to a processing activity.
  • Portability: receive your data in a machine-readable format (CSV export from the app for merchants).

If you are a customer of a store that uses NextConfirmAI, contact that store first - it is responsible for your data; you can also write to us and we will forward your request.

To exercise these rights, write to contact@nextconfirmai.ma.

You may also lodge a complaint with the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel), Morocco’s data protection authority.

10. Minors

The service is aimed at professionals and is not intended for people under 16. We do not knowingly collect data about them.

11. Changes

We may update this policy. Merchants are notified by e-mail of any material change; the date at the top of the page indicates the version in force.

12. Contact

For any question about this policy or your data:

NextDev Technologies - publisher of NextConfirmAI
contact@nextconfirmai.ma
WhatsApp
Marrakech, Morocco