Privacy policy
This policy describes how your personal data is collected and processed on this website, in accordance with the Moroccan Data Protection Act 09-08 on the protection of individuals with regard to the processing of personal data.
Data controller
The data controller is Karizma Conseil — Lotissement FLORIDA, Center Park, Rue Zoulikha Nasri, Imm. 6, 4th floor, N° 35 — 20520 Casablanca, Morocco · +212 522 103 925 · contact@karizma.ma.
Data collected
When you fill in a form on this website, the following data is collected:
- Identity (first and last name)
- Contact details (email address, phone)
- Job title and company
- Content of your message
Purposes of processing
- Responding to your contact and information requests
- Providing commercial follow-up on the relationship
Legal basis
Processing is based on your consent, given when you submit the form. You may withdraw it at any time.
Data retention period
Prospects' data is kept for a maximum of 3 years from the last contact, then deleted or anonymized.
Your rights
In accordance with the Moroccan Data Protection Act 09-08, you have the right to access, rectify and object to the processing of your data. You may exercise these rights by writing to contact@karizma.ma.
CNDP notification
Processing notified to the CNDP — contact: contact@karizma.ma
Cookies
This website uses audience measurement cookies. Your consent is collected via the banner displayed on your first visit; you may change your choice at any time.
Data hosting
Data collected through this website is hosted in a sovereign environment, on the Karizma One platform.
Applications mobiles Karizma (B2B)
This section applies to the professional mobile applications published by Karizma Conseil and distributed on the App Store (Apple) and Google Play, connected to the Odoo instances of client organisations. User accounts are created and administered by the client organisation under a B2B contractual relationship.
Data processed by the applications
• Professional account data: name, work email address, user ID, role.
• Business data from your organisation's Odoo instance (tickets, projects, documents, schedules), according to your access rights.
• Push notification token (if you enable notifications).
• Technical logs and diagnostics: application and system version, device model, crash reports — for security and improvement purposes.
What our applications do not do
No sale of data. No advertising. No cross-app advertising tracking or profiling for marketing purposes. No background location collection.
Autorisations de l'appareil
Permissions are requested only at the point of use and are never mandatory: camera / photos (attaching a document or a scan), notifications (business alerts), biometrics (local unlocking only — never transmitted to our servers).
Security, hosting and retention
Encrypted exchanges (TLS), authentication through the Odoo session and role-based access control. Data remains hosted on your organisation's Odoo instance (see "Data hosting" above). It is retained for the duration of the contract between your organisation and Karizma, then deleted or anonymised subject to legal obligations.
Account and data deletion
You may request deletion of your account and the associated data at any time: (1) from your organisation's administrator, or (2) by email to contact@karizma.ma with the subject "Account deletion". The request is processed within 30 days and confirmed in writing. Uninstalling the application does not on its own delete the account.
Who these applications are for
These applications are reserved for professional use. They are not intended for people under the age of 16.
Your rights and contact
The rights described above (law 09-08, CNDP declaration, and GDPR where applicable) apply in full to the mobile applications. Contact: contact@karizma.ma · +212 522 103 925.
Last updated: 6 August 2026
Karizma ERP
Mobile app for your organisation’s Odoo — iPhone and Android
In short. Karizma ERP lets you use the Odoo your organisation already runs. What you do in the app goes to your Odoo server, not to Karizma. Karizma’s servers take part in two things only: authorising this phone for your organisation’s Odoo (the Karizma Hub), and delivering notifications. If you choose to leave your name, e-mail and phone on “Let’s stay in touch”, they reach Karizma too, so we can contact you. The app shows no advertising and does no tracking, and Karizma has added no analytics or crash-reporting tool to it.
What the app handles
| Information | Why | Where it goes | What is kept, and where |
|---|---|---|---|
| Your sign-in: email or login, password, user ID | To sign you in to your Odoo | To your Odoo server only, over HTTPS | On your phone: the password, in its secure storage (iOS Keychain, Android Keystore), and the address, database and account name of each Odoo you added, in the app’s private storage. Removed when you sign out of that Odoo |
| What your Odoo shows you: apps, activities, records, messages, attachments, figures of your morning brief | To display it | It comes from your Odoo server. The app does not pass it anywhere else | On your phone: a copy of the lists last loaded (apps, activities, morning brief), so they can be shown offline with the date they were updated. Removed when you sign out |
| Photos, files, scanned documents, voice messages and barcodes you choose to add or scan | Only when you use that feature | To your Odoo server only | On your phone, only until they are sent, including when you work offline. Anything not yet sent waits for your next sign-in to the same Odoo; “Sign out of everything” deletes it. Files you choose to download are saved on your phone |
| Business cards you scan | To create a contact and a lead in your Odoo CRM | The text is read on your phone. The card’s photo, the fields you confirm and the optional voice note go to your Odoo server only | Nothing once the lead is created |
| Your location | Only when you use a feature that needs it: clocking in or out, checking in at a customer visit, your sales round and the customers near you | When you clock in or check in, to your Odoo (a visit is noted on the customer’s record with a map link). For “customers nearby”, an area around you is sent to your Odoo as a search, and not stored. Never in the background | On your phone: the last round, at most 50 nearby customers shown, and the map position of customer addresses converted by the phone. Deleted by “Sign out of everything” |
| Access check: your Odoo address, your login and a random installation number | To check that this phone may use your organisation’s Odoo, and to let Karizma withdraw that permission | To the Karizma Hub (karizmaerp.karizma.one), when you sign in and when you open the app. Never your password or your Odoo data | On the Hub: the access request of this phone (Odoo address, login, installation number, dates, status), for as long as your organisation uses the app. Deleted on request |
| Your name, e-mail and phone — only if you leave them on “Let’s stay in touch” | So that Karizma can contact you about Karizma ERP: getting started, a demo, support | Kept on your phone, then sent with the access request to the Karizma Hub the next time you connect to an Odoo | On your phone, until you erase them in Settings › “Be contacted by Karizma”. On the Hub, with the access request, until you ask us to delete them |
| Notifications (messages, activities, alerts, birthdays) | To tell you about something in your Odoo | Your Odoo sends each notification, encrypted, to Karizma’s relay (push.karizma.one). The relay decrypts it and hands it to Apple or Google through the Expo service, which show it on your phone. The relay does not keep the content | On the relay, for this phone: its notification token, your Odoo’s address and the encryption keys — never an Odoo login or password. Removed when you turn notifications off on this phone or sign out, and at the latest after 90 days without a notification |
| Your birthday | To wish you a happy birthday, and to show colleagues’ birthdays they chose to make visible | Read from your employee record in your Odoo | On your phone: the day and month, for that day |
| Fingerprint or face recognition | An optional lock for the app | It never leaves your phone: your phone’s system does the check and tells the app only “yes” or “no” | Nothing |
Services used by some features
- Google ML Kit (reading business cards and, on Android, scanning documents): the reading is done on your phone, and the image and its text are not sent to Google. ML Kit sends Google anonymous technical data — phone model and system version, app version, processing times, errors and an identifier for this installation — for diagnostics and usage statistics. On iPhone, document scanning uses Apple’s built-in scanner.
- OpenStreetMap (the map of your sales round): the map images are loaded from OpenStreetMap’s servers, which receive the area shown and your phone’s IP address.
- Your phone’s geocoding service (Apple or Google): converts into a map position the address of a customer that has none in Odoo.
- Expo, Apple and Google: deliver notifications, as described above.
- Ratings: now and then, the app may show Apple’s or Google’s own rating window. Your rating goes to the store, not to Karizma.
Permissions
The app asks only at the moment you use a feature, and you can refuse.
- Camera: take a photo to attach, scan a barcode, a document or a business card.
- Microphone: record a voice message in Odoo’s chat, or a voice note on a CRM lead.
- Location, only while you use the app: clocking in or out, checking in at a visit, customers near you.
- Notifications: receive your Odoo’s notifications. You can turn them off in the app’s Settings or in your phone’s settings.
- Photos and files: choose something to attach.
- Face ID or fingerprint: unlock the app, if you turn that on.
The app does not access your contacts, and never uses your location in the background.
What Karizma does not do
- It does not sell, rent or share your data.
- It shows no advertising, does not track you across apps and builds no profile of you.
- Karizma has put no analytics or crash-reporting tool in the app. The only technical data sent outside your Odoo is ML Kit’s, described above.
- The only Karizma servers involved are the Hub, which authorises this phone, and the notification relay, which does not keep their content.
Apple and Google may give us anonymous, aggregated usage or crash figures through their store tools if you have allowed that in your phone’s settings.
Your Odoo server
The data you work on belongs to your organisation. It is stored and processed by the Odoo server your organisation runs, or has chosen. Your organisation’s own policy governs that data; to see, correct or delete it, ask your Odoo administrator. Karizma has no access to it through this app.
Alerts, the morning brief and the team birthday messages are scheduled tasks that an administrator creates in your Odoo. They run there and their messages stay there.
The app shows your Odoo’s pages with your phone’s own web component. On Android, that system component can contact its vendor (Google) for system services such as form autofill. That is part of the phone, not something the app sends.
Security
- HTTPS only: the app refuses to connect without it and never skips a certificate check.
- Your password is kept in your phone’s secure storage and nowhere else.
- Signing out removes your password and the stored sign-in details from the phone, and ends your session on your Odoo.
- If your Odoo uses two-factor authentication and you ask it to remember this phone, Odoo’s own cookie stays on the phone until you choose “Forget this phone” in the app’s Settings.
Keeping and deleting
Karizma keeps the access request of each phone on its Hub — Odoo address, login, installation number, dates, status, and your name, e-mail and phone if you left them — for as long as your organisation uses the app, and deletes it on request; and the notification subscriptions on its relay, described above. On your phone, signing out removes your sign-in and the saved lists; work not yet sent is kept for your next sign-in to the same Odoo. “Sign out of everything” and uninstalling the app remove everything it stored. The app does not create accounts: accounts are created and removed by your organisation’s Odoo administrator.
Children
Karizma ERP is not intended for anyone under 16.
Questions and your rights
To access, correct or delete what Karizma holds about you, or to object to it (Moroccan law 09-08), write to contact@karizma.ma.
Last updated: October 21, 2026