Privacy policy

Data controller

The data controller is the Kaishin company, based in Morocco. For any question about your data: hello@kaishin.net.

This policy covers the kaishin.net website. Data that our customers store in the Physio.ai, ClerkIT and Boursefolio platforms is covered by their contract with the Kaishin company.

What we collect

When you request a demo

The details you enter in the form: name, business, email, phone, the platform you are interested in, any estimate you made on the pricing page and your message. We also record when you gave your consent, the site language, the page you sent it from, the page you first landed on, the referring site, the campaign parameters in the link (utm) and the pages you viewed on the day of your request.

We store these details to answer your request: to contact you, arrange a demo, send you a proposal and follow up. Processing is based on your consent, given by ticking the box on the form.

The emails we send

After your request, you receive a confirmation email and our sales team receives an email with your request. We may then write to you about it (appointment, proposal, follow-up). We never sign you up to a newsletter.

Internal alerts

So that no request goes unanswered, the sales team receives internal reminders by email and, when these alerts are switched on, through the Telegram messaging app. They give your name, your business and a link to your request in our administration area.

Cookieless audience measurement

To learn which pages are useful, we count page views and clicks on the main buttons, with the language, device type, referring site and campaign. No cookie is set and no third-party tool is used. Each visit is linked to a hashed identifier computed from a random value of the day, your IP address and your browser: your IP address is not stored and the day’s value is deleted every night, so you cannot be recognised from one day to the next. We measure nothing when your browser sends “Do Not Track” or “Global Privacy Control”. This measurement is based on our legitimate interest in improving the site.

Security and abuse prevention

The form is protected against automated submissions: a hidden field traps bots, a minimum filling time is checked, and an irreversible fingerprint of your IP address, kept with each request, limits the number of requests per hour. Like any website, our servers keep technical logs (IP address, requested page, date) for a limited period, for security.

Cookies

The site sets no analytics or advertising cookies. If you change language with the FR / EN switcher, a functional cookie remembers that choice for one year; it is only used to show the site in your language. Kaishin team members signed in to the administration area also receive a technical session cookie.

Who receives your data

• The Kaishin company’s team, who handle your request.
• The email provider of our kaishin.net domain, which carries the emails.
• Telegram, when internal alerts are switched on, for the details described above only.
• Our hosting provider, Hostinger, which rents us the server that stores the site and its database.

Your data is never sold or used for advertising.

Transfers outside Morocco

The servers of our hosting provider, our email provider and Telegram may be located outside Morocco. We limit the data sent to what is strictly needed and make sure these transfers comply with law no. 09-08.

How long we keep it

• Demo requests: as long as needed to handle your request and follow it up, then deleted or anonymised.
• Audience measurement: 13 months at most.
• Random value used for the visit identifier: deleted every night.
• Server technical logs: a limited period, for security.

Your rights

Under Moroccan law no. 09-08 you have the right to access and correct your data and to object, on legitimate grounds, to its processing. You can also withdraw your consent at any time. Write to hello@kaishin.net and we will reply as soon as possible.

If you believe your rights are not respected, you can contact Morocco’s data protection authority, the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP), www.cndp.ma.

Visitors from the European Union

If you live in the European Union, the General Data Protection Regulation (GDPR) also gives you the right to erasure, to restriction of processing and to data portability. Our processing is based on your consent (demo form) or on our legitimate interest (audience measurement, security). You can exercise these rights at the same address and lodge a complaint with the data protection authority of your country.

Security

The site is served over HTTPS only. Access to the administration area is limited to the team and protected by two-step login.

Updates

We may change this policy as the site evolves. Last updated: 14 November 2026.