PRIVACY
POLICY

1. INTRODUCTION

SAPIEN X ("we", "our", or "the Company"), headquartered in Casablanca, Morocco, operates the website sapienxai.com. This Privacy Policy explains how we collect, use, store, and protect personal data submitted through our platform, in accordance with applicable data protection regulations including the Moroccan Law 09-08 on the Protection of Personal Data and the General Data Protection Regulation (GDPR) of the European Union.

By submitting a briefing request through our website, you acknowledge that you have read and understood this Privacy Policy.

2. DATA WE COLLECT

We collect only the data you voluntarily submit through the briefing request form. This includes:

• Full name of the requesting individual
• Phone number (including country code)
• Organization name
• Organization email address
• Organization website (optional)
• Organization type (private company, state agency, military, etc.)
• Sector or domain of activity
• Description of threat intelligence needs

We do not collect any data through tracking pixels or analytics tools beyond what is described above.

3. PURPOSE OF DATA COLLECTION

The data collected is used exclusively for the following purposes:

• Reviewing and responding to briefing requests submitted by prospective clients
• Assessing the legitimacy and relevance of the request
• Establishing initial contact with the requesting organization
• Maintaining a record of business inquiries for internal follow-up

4. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases:

• Legitimate interest — to respond to your business inquiry and assess potential collaboration
• Consent — by submitting the form and checking the confirmation box, you explicitly consent to the processing of your data for the stated purposes
• Contractual necessity — if an engagement is initiated, processing is necessary to fulfill our obligations

5. DATA RETENTION

We retain your personal data for a maximum period of 3 years from the date of last contact or interaction. After this period, data is permanently deleted or anonymized.

If no engagement or follow-up occurs within 12 months of your initial submission, we will delete your data unless you have provided explicit consent to retain it for future contact.

6. DATA STORAGE & SUBPROCESSORS

Your submitted data is stored by our designated hosting and infrastructure provider, operating under contractual data protection obligations and applicable data protection regulations.

No other subprocessors handle your personal data. We do not use CRM systems, email marketing platforms, or third-party analytics tools that would receive your submitted information.

7. DATA SECURITY

We implement the following technical measures to protect your data:

• End-to-end encryption on all pages and data transmissions
• Advanced HTTP security controls and browser protection policies
• Multi-layer spam and abuse prevention on all form submissions
• Access to submitted data restricted to authorized SAPIEN X personnel only
• No public exposure of contact information on the website

8. YOUR RIGHTS

Under applicable data protection law, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the data we hold about you
• Right of rectification — you may request correction of inaccurate data
• Right of erasure — you may request deletion of your data at any time
• Right to object — you may object to the processing of your data
• Right to data portability — you may request your data in a structured, machine-readable format
• Right to withdraw consent — you may withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

9. INTERNATIONAL DATA TRANSFERS

As SAPIEN X serves clients globally, data submitted through our platform may be processed in countries outside Morocco and the European Economic Area, specifically by our designated infrastructure provider. Such transfers are covered by appropriate safeguards including standard contractual clauses as recognized by applicable data protection authorities.

10. CHANGES TO THIS POLICY

We reserve the right to update this Privacy Policy at any time. Changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of our website following any changes constitutes acceptance of the revised policy.

11. CONTACT

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us: