EBO · Easy Booking OS

The short version

We hold the data you need to run your properties, and the personal details of the guests, owners and staff you work with. We do not sell it, we do not advertise on it, and we do not use it to train anything. Each customer's data lives in its own separate database.

Who is responsible for what

For the personal data of your guests, owners and team, you are the data controller and QENTRA is the processor: we hold and process it on your instructions, to run the service for you. For your own account details as our customer, we are the controller.

What we hold

• About you: name, work email, phone, company, the workspace you created, sign-in times and the IP address of those sign-ins.
• About your guests: whatever a booking carries, typically name, email, phone, country, dates and amount, plus anything you type in the notes.
• About your owners and team: name, contact details, role, and the work assigned to them.
• Files you upload: property photos, work evidence photographs, invoices, contracts and other documents.
• Technical: server logs, and a record of emails the platform sent on your behalf.

Why we hold it

To provide the service you subscribed to, to secure it against abuse, to bill you, and to answer you when you write to us. We do not profile anyone and we do not take automated decisions about people.

Who else sees it

Our hosting provider, which stores the servers and their backups, and the email provider you configure in your own settings, which carries the messages you choose to send. Nobody else, unless Moroccan law obliges us to disclose something.

Where it lives, and for how long

Data is stored on our hosting provider's servers. Backups are kept for fourteen nights. When you close your workspace we keep everything for thirty days, then delete it, backups included, within the following backup cycle.

Moroccan data protection

Personal data processing in Morocco is governed by law 09-08 and supervised by the CNDP. Our processing as a service provider is declared to the CNDP. As a user of the platform, your own processing of your guests' data may need its own declaration: that obligation is yours, and we will give you whatever description of the platform you need in order to make it.

Your rights

You, and the people whose data you hold, can ask for access to it, correction of it, or deletion of it. Write to ebo@quriou.com and we will answer within a month. If you are unhappy with our answer, you can complain to the CNDP.

Cookies

One cookie, for your sign-in session. No analytics, no advertising, no third party trackers. Fonts are loaded from Google Fonts, which sees the request for the font file.

Security

Passwords are stored hashed with bcrypt, never in readable form. Sign-in attempts are rate limited. Each workspace has its own database file, unreachable from any other workspace. Connections are encrypted with HTTPS. Backups run nightly.