Privacy

Request Data Deletion

This page explains how to request the deletion of your KARVYX account and the personal data associated with it, for both KARVYX Client (traveller) and KARVYX Agency (partner) accounts, on the website and on the mobile applications.

Last updated: August 10, 2026

Terms version: 2.0

1. Who this page covers

This deletion procedure applies to every account created with KARVYX DIGITAL, whichever product was used:

  • KARVYX Client — traveller accounts used to search, compare and book vehicles (website and mobile app).
  • KARVYX Agency — partner accounts used by rental agencies to manage their fleet, availability and bookings (website and mobile app).
  • Visitors who contacted KARVYX without creating an account (contact form, email, WhatsApp) may also request the deletion of their message history.

2. How to request deletion

Deletion requests are handled by the KARVYX privacy team. Send an email to contact@karvyx.com with the subject "Data deletion request" and include:

  • the account type (KARVYX Client or KARVYX Agency);
  • the email address and phone number registered on the account;
  • for an Agency account, the trade name of the agency;
  • whether you request a full account deletion or the deletion of specific data (for example uploaded documents only).

Postal requests are also accepted: KARVYX DIGITAL, RUE SOUMAYA RES SHEHRAZADE 3 ETG 5 N 22, Casablanca, Maroc.

No fee is charged. You do not need an active subscription, a booking in progress, or an installed application to submit a request.

3. Identity verification

To protect accounts against fraudulent deletion requests, KARVYX verifies that the request comes from the account holder. Where there is reasonable doubt about your identity, we may ask for a confirmation from the registered email address, a confirmation code sent to the registered phone number, or — as a last resort — a redacted proof of identity, used only for this verification and deleted immediately afterwards.

4. Data that is deleted

Once the request is validated, the following data is deleted or irreversibly anonymised:

  • Profile data — first and last name, login credentials, account preferences, language and currency settings.
  • Contact information — email address, phone number, postal address, WhatsApp contact details.
  • Personal documents, where applicable — driving licence, identity document, agency onboarding documents uploaded to the platform.
  • App usage data — searches, favourites, saved locations, in-app messages, push notification tokens, device identifiers linked to the account.
  • Marketing data — newsletter subscriptions and marketing consents.
  • For an Agency account: agency profile, published vehicle listings, photos and descriptions uploaded by the agency.

5. Data that is retained

Some data cannot be deleted immediately because KARVYX is required to keep it, or needs it to establish, exercise or defend legal claims (art. 17.3 GDPR, Moroccan law 09-08). This data is isolated, restricted to authorised staff, and deleted at the end of the applicable period:

  • Booking history — kept for the duration required to handle disputes and claims relating to past rentals.
  • Transactional and accounting data — invoices and payment records, kept for the statutory accounting and tax retention period.
  • Compliance data — evidence of consent, records related to fraud prevention and anti-money-laundering obligations.
  • Security logs — connection and technical logs, kept for a limited period for security and abuse investigation purposes.

Retained records are detached from your active profile: your account no longer exists and cannot be used to sign in to KARVYX Client or KARVYX Agency.

Detailed retention periods per data category are listed in the privacy policy.

6. Processing times

Your request is acknowledged within 72 hours. Deletion is completed within 30 days of the request being validated, extendable by two months for complex or numerous requests (art. 12.3 GDPR), with prior notice.

Backups are rotated on a rolling basis: residual copies present in encrypted backups are erased within a maximum of 90 days and are not used to restore a deleted account.

7. Your other rights

Beyond deletion, you may request access, rectification, restriction, portability, or object to processing, and withdraw your consent at any time. These rights and the complaint procedure before the competent authority (CNDP in Morocco, CNIL in France, ICO in the United Kingdom) are described in the KARVYX privacy policy.