Privacy policy

MX4 AI, a Moroccan simplified joint-stock company (SAS), is the controller of personal data processed for this website, its contact form and emails sent to contact@mx4.ai. Registered office: VILLA 9K4 RUE ANNAJD HAY RIAD — RABAT, Morocco. ICE: 003580101000004. RC: 181523.

This policy covers the public website mx4.ai, its contact form, and email exchanges with contact@mx4.ai. Personal data processed during a contracted engagement is governed by the applicable agreement and any data-processing terms agreed for that engagement.

Depending on how you interact with us, we may process:

• Identity and contact details: first name, last name, email address, and optional telephone number
• Professional details: organization, role, subject, and the content of your message
• A record of your consent: the accepted wording and its version, date and time (UTC), language, and the page it was sent from
• Technical request data processed for hosting and security of the website, such as IP address, requested URL, timestamp, browser, and device
• Subsequent correspondence and records needed to handle the request

We process personal data only for defined purposes:

• Replying to requests sent through the form or by email to contact@mx4.ai
• Taking steps you request before a possible business relationship
• Operating, securing, diagnosing, and protecting the website
• Maintaining necessary business records and complying with legal obligations

Form data is processed and transferred with your express consent, given through the form checkbox; you may withdraw it at any time without affecting processing already carried out. We use your request only to reply to you, never for marketing. The website’s technical data is processed to operate and secure it.

Form fields marked with an asterisk are required to identify and respond to the request. Other fields are optional. If required information is not provided, MX4 AI cannot receive or answer the request. By email, only your address is needed for us to reply.

Data is limited to recipients who need it for the purposes above:

• Authorized MX4 AI personnel replying to your request
• Vercel Inc., in the United States, for website hosting, delivery, and security: the form is received by the website, running in the iad1 region (Washington, D.C.), which emails it to MX4 AI without keeping a copy; technical request logs are kept for about 24 hours
• Google, for MX4 AI’s Google Workspace mailbox, which sends and receives requests and the correspondence that follows and stores them in its data centers outside Morocco
• Professional advisers or public authorities where disclosure is legally required

Form data is transferred outside Morocco to Vercel (United States) and Google (Google Workspace, outside Morocco) on the basis of your express consent, given through the form checkbox. Emails sent directly to contact@mx4.ai are received and stored by Google outside Morocco, and the website’s technical logs are processed by Vercel in the United States. These transfers are governed by Articles 43 and 44 of Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

We limit retention according to purpose:

• Requests and the correspondence that follows, with the consent record, are kept for about 12 months after the last substantive exchange
• Records connected to a contract, dispute, or legal obligation may be retained for the applicable required period
• The website’s technical logs are kept by Vercel for about 24 hours; the website keeps no copy of the form

Subject to applicable law, you may request:

• Confirmation of whether MX4 AI processes personal data about you
• Access to and correction of inaccurate or incomplete data
• Objection to processing on legitimate grounds
• Deletion, restriction, or withdrawal of consent where applicable
• Information about recipients and the purposes of processing

Send requests to contact@mx4.ai or by post to MX4 AI’s registered office. We may ask for information necessary to verify your identity. You may also contact Morocco’s National Commission for the Control of Personal Data Protection (CNDP) at cndp.ma.

MX4 AI applies proportionate technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. Exchanges with the website are encrypted (HTTPS), and the website sends the form to the mailbox over an encrypted connection (TLS). Data sent over the internet still travels across open networks, and no transmission or storage system can be guaranteed completely secure.

The website sets no cookies: no advertising, analytics, or preference cookies. Browsers may cache public files for performance, and the hosting provider processes technical request logs. See the Cookies and Storage Notice for details.

We may revise this policy when the website, providers, or applicable requirements change. The current version and its effective date will remain available on this page.