Privacy policy

MX4 AI, a Moroccan simplified joint-stock company (SAS), is the controller of personal data processed for this website and its inquiry channels. Registered office: VILLA 9K4 RUE ANNAJD HAY RIAD — RABAT, Morocco. ICE: 003580101000004. RC: 184676.

This policy covers the public website mx4.ai, its contact form, and related email communications. Personal data processed during a contracted engagement is governed by the applicable agreement and any data-processing terms agreed for that engagement.

Depending on how you interact with us, we may process:

• Identity and contact details: first name, last name, email address, and optional telephone number
• Professional details: organization, role, subject, and the information included in your message
• Submission context: the page from which the inquiry was sent and the date of the communication
• Technical request data processed for hosting and security, such as IP address, requested URL, timestamp, browser, device, and diagnostic information
• Subsequent correspondence and records needed to handle the inquiry

We process personal data only for defined purposes:

• Receiving, assessing, and responding to your inquiry
• Taking steps you request before a possible business relationship
• Operating, securing, diagnosing, and protecting the website
• Maintaining necessary business records and complying with legal obligations

Contact-form data is submitted with your explicit agreement. Where processing relies on consent, you may withdraw it at any time without affecting processing already carried out. Other processing may be necessary to operate and secure the site, respond to your request, or comply with law.

Fields marked with an asterisk are required to identify and respond to the inquiry. Other fields are optional. If required information is not provided, MX4 AI may be unable to receive or answer the request.

Data is limited to recipients who need it for the purposes above, which may include:

• Authorized MX4 AI personnel handling the inquiry
• FormSubmit, operated by Devro LABS, for contact-form delivery
• Vercel Inc. for website hosting, delivery, operational logs, and security
• Fontshare for delivery of the website's Switzer font files
• Google Workspace for email delivery and correspondence
• Professional advisers or public authorities where disclosure is legally required

Some service providers may process or store data outside Morocco. Such processing is subject to applicable Moroccan data-protection requirements, including the formalities governing transfers abroad, and to any other mandatory rules that apply to the relevant processing.

We limit retention according to purpose:

• FormSubmit states that submission copies remain in its archive for up to 30 days
• Inquiry correspondence is generally retained for up to 12 months after the last substantive exchange
• Records connected to a contract, dispute, or legal obligation may be retained for the applicable required period
• Technical logs are retained according to the hosting provider's operational and security settings

Subject to applicable law, you may request:

• Confirmation of whether MX4 AI processes personal data about you
• Access to and correction of inaccurate or incomplete data
• Objection to processing on legitimate grounds
• Deletion, restriction, or withdrawal of consent where applicable
• Information about recipients and the purposes of processing

Send requests to contact@mx4.ai. We may ask for information necessary to verify your identity. You may also contact Morocco's National Commission for the Control of Personal Data Protection (CNDP) at cndp.ma.

MX4 AI applies proportionate technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. No internet transmission or storage system can be guaranteed completely secure.

MX4 AI does not currently enable advertising cookies, analytics cookies, or preference cookies on this website. Browsers may cache public files for performance, and hosting providers may process technical request logs. See the Cookies and Storage Notice for details.

We may revise this policy when the website, providers, or applicable requirements change. The current version and its effective date will remain available on this page.