Privacy Policy — Gool

1. Who we are

Gool (gool.li) is a product of Dakee Inc., a corporation incorporated under the laws of Ontario, Canada, which operates the service. For any privacy question, contact us at privacy@gool.li.

2. What we collect

• Your WhatsApp phone number — so we can reply to you.
• Your WhatsApp display name, if your account shares it.
• The content of your request (the car you're looking for) and any preferences you tell us.
• Your language, to answer you in it.
• Seller phone numbers found in public listings are stored only as a one-way cryptographic hash — never in clear — and are used solely to detect duplicate listings.

3. Legal basis and consent

We process your data only after you give consent in the WhatsApp conversation, before anything is stored, in line with Moroccan data-protection law (Loi 09-08 (CNDP)). Our legal bases are your consent and our legitimate interest in providing the service you asked for.

4. How we use your data

• Match your request against used-car listings we aggregate.
• Send you a curated shortlist and alerts over WhatsApp.
• Improve the quality and relevance of the results we return.

5. Who we share it with

• We never sell your data and never share it with sellers without your consent.
• Dealers receive only an anonymized summary of your request and a budget range — your identity and exact budget stay private until you choose to accept an offer.
• We rely on trusted service providers to operate: Meta/WhatsApp and Twilio (to send and receive messages), an email provider (notifications), payment partners to process paid plans (Paddle.com, Merchant of Record for the orders it processes, and YouCan Pay), an AI provider to understand your request, and our hosting provider. They act only on our instructions.

6. International transfers

Some of our providers operate outside Morocco. Where that happens, we rely on the contractual and legal safeguards those providers offer to protect your data.

7. How long we keep it

Active search requests expire after about 30 days unless you renew them. Message history is kept only as long as needed to run the service and meet our legal obligations.

8. Your rights

Under Loi 09-08 (CNDP) you can access, correct, object to, or delete your personal data. You can exercise these rights at any time by replying STOP or "delete my data" in the WhatsApp conversation — this triggers deletion within 72 hours — or by emailing privacy@gool.li.

9. Security

We protect your data with access controls, encryption in transit, and one-way hashing of sensitive identifiers.

10. Cookies and local storage

• Without your consent, our public pages only use functional local storage: your language, a signed-in professional session, and remembering your audience-measurement choice.
• No advertising cookie is used, and no measurement cookie is set until you accept.
• You can change your mind at any time with the “Manage my preferences” link at the bottom of every page.

11. Audience measurement (Google Analytics)

• Who: if you accept, we use Google Analytics 4, provided by Google Ireland Limited (and Google LLC, in the United States). Your data is therefore processed outside Morocco, under the contractual safeguards Google offers.
• What: the pages you view (the address without tokens or personal parameters, which are masked before sending), the buttons you click (for example “Message us on WhatsApp”), your approximate city as inferred by Google from your connection, your device and browser type, and a random identifier stored in the _ga cookie. Never your number, your messages or what you are searching for.
• Why: to learn which pages genuinely help visitors and which lead to a conversation, so we can improve the site. Google signals and ad personalisation are switched off.
• Legal basis: your consent, asked for by a banner where “Accept” and “Decline” carry equal weight. Without an answer, nothing is loaded.
• Retention: data is kept for 14 months in Google Analytics; the _ga cookie expires after 13 months at most. We ask for your choice again at least every 6 months, or if this policy changes.
• Withdrawing consent: click “Manage my preferences” at the bottom of the page, then “Decline” — measurement stops and the _ga cookies are deleted from your browser.
• Cookies and storage used: _ga (Google Analytics, random identifier, 13 months); _ga_<id> (Google Analytics, session state, 13 months); gool.consent.v1 (gool.li local storage, remembers your choice, 6 months).

12. Changes to this policy

We may update this policy from time to time. The date at the top reflects the latest version.

13. Contact

Questions about your privacy? Email privacy@gool.li.