Privacy Policy
Last updated: October 11, 2026
1. Data controller
The data controller for personal data collected via Cliento (cliento.dev) is Jonathan Dhermand, sole proprietor (auto-entrepreneur), based in Morocco.
Privacy contact: hello@cliento.dev
2. Data collected
Cliento collects the following data categories:
Identification and account data
- Name, first name, email address
- Password (stored in hashed form)
- Profile photo (optional)
Service usage data
- Projects, tasks, notes created on the platform
- Client information (names, emails, project details)
- Imported files and documents
- Data entered in AI features
Technical and navigation data
- IP address, browser type, operating system
- Pages visited, actions performed on the platform
- Login and activity logs
- Audience measurement data (pages viewed, referring source, approximate location derived from IP) collected via Google Analytics, subject to your cookie consent choice
- Technical error reports (error message, technical trace, browser and operating system, the page or route concerned with any secret link token removed, and a pseudonymous account identifier) collected via Sentry when an error occurs. They contain no cookies, no request content and no client or invoice data
Billing data
- Transaction history (amount, date, subscribed plan)
- Credit card data is managed exclusively by our payment providers (LemonSqueezy, Paddle) and is never stored on our servers
3. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Service provision and account management | Contract execution |
| Processing your subscription (Cliento payment) | Contract execution |
| Sending transactional emails (confirmation, notifications) | Contract execution |
| Service improvement and usage analysis | Legitimate interest |
| Artificial intelligence features | Consent / Contract execution |
| Compliance with legal obligations | Legal obligation |
| Audience measurement and analytics (Google Analytics via Google Tag Manager) | Consent (cookie banner) |
| Sending commercial communications (newsletter, new features) | Consent |
| Error monitoring, security and service reliability (Sentry) | Legitimate interest |
4. Sub-processors and data recipients
Cliento uses the following sub-processors to provide the service. Each of them is subject to contractual confidentiality and security obligations:
| Provider | Role | Location |
|---|---|---|
| LemonSqueezy / Paddle | Processing your Cliento subscription (direct billing) | USA / EU |
| Stripe, Inc. (Connect) | Processing payments between freelance users of Cliento and their own clients. Cliento acts solely as a technical intermediary and does not receive or hold these funds. | USA |
| Vercel, Inc. | Application hosting | USA |
| OpenAI, LLC | AI features | USA |
| Neon, Inc. | PostgreSQL database | USA |
| ImageKit Ltd. | File storage and management | India / Global CDN |
| Resend, Inc. | Sending transactional emails | USA |
| Google LLC (Google Analytics & Google Tag Manager) | Audience measurement and analytics, only after you accept the cookie banner | USA |
| Functional Software, Inc. (Sentry) | Error monitoring: technical error reports, without cookies or client data | USA |
Transfers of personal data outside Morocco are carried out in accordance with Moroccan Law No. 09-08, including Articles 43 and 44, and applicable CNDP requirements. Where the GDPR applies, applicable GDPR transfer mechanisms may also apply.
5. Data retention period
- Account and project data: retained for the entire duration of account activity, then deleted or anonymized when no longer necessary, subject to applicable legal, contractual, security, or dispute-related retention obligations.
- Billing data: retained for 7 years from the transaction date, in accordance with applicable accounting and tax obligations.
- Technical logs: retained on a rolling 12-month basis for security and debugging purposes.
- Marketing emails: until consent is withdrawn or after 3 years of inactivity.
- Error reports: retained by Sentry for a limited period (up to 90 days, depending on the plan), then deleted automatically.
6. Your rights
In accordance with Moroccan Law No. 09-08 and applicable laws in your country, you have rights concerning your personal data, including the right to information, access, rectification, and objection, as well as other rights provided by applicable law.
Where the GDPR applies, users in the European Union may additionally have rights including erasure, data portability, restriction of processing, and withdrawal of consent where applicable.
To exercise these rights, contact us at hello@cliento.dev. We will respond within the period required by applicable law.
If you are in Morocco and believe your rights are not being respected, you may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP). If you are in the European Union, you may contact your national data protection supervisory authority where the GDPR applies.
7. Data security
Cliento implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction, including:
- Encryption of communications (HTTPS/TLS)
- Passwords stored in hashed form
- Data access restricted to authorized personnel
- Regular database backups
In the event of a personal data breach, you will be notified where required by applicable legal requirements.
8. Cookies and trackers
Cliento uses two categories of cookies:
- Strictly necessary cookies: required for the service to function (session management, authentication, saved preferences). These do not require consent and cannot be disabled without breaking the platform.
- Analytics cookies: Google Analytics, deployed through Google Tag Manager, to measure audience and understand how the platform is used. These are only set after you accept them in the cookie banner shown on your first visit.
You can accept or decline analytics cookies at any time from the cookie banner, or by clearing your browser's local storage for this site to make the banner reappear. No advertising cookies are used at this stage.
You can also configure your browser to refuse cookies altogether, which may affect certain features of the platform.
9. Minors
Cliento is intended for professional use and is not designed for individuals under 16 years of age. If you become aware that a minor has provided us with personal data without parental consent, please contact us so that we can delete it.
10. Changes to this policy
We may update this privacy policy to reflect changes in our practices or for legal reasons. Any substantial change will be notified by email at least 30 days before it takes effect. The last update date is shown at the top of this page.
11. Contact
For any question regarding this policy or the exercise of your rights: hello@cliento.dev
This privacy policy is intended to comply with Moroccan Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data and other applicable laws on the protection of personal data. Where applicable, the GDPR may also apply.