PRIVACY
POLICY

1. Introduction

SAPIEN X ("we", "our", "the Company"), headquartered in Casablanca, Morocco, operates the website sapienxai.com. This Privacy Policy explains how we collect, use, store and protect personal data through this website, in accordance with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data and, where applicable, the EU General Data Protection Regulation (GDPR).

By submitting a briefing request through this website, you acknowledge that you have read and understood this Privacy Policy.

2. Data we collect

Briefing request form. We collect only the data you submit voluntarily:

• Full name
• Phone number, including country code
• Organization name, type and email address
• Organization website (optional)
• Mission area or domain
• Description of your operational requirement

Website analytics. We use Google Analytics 4 to measure aggregate use of the website: pages viewed, approximate country, device and browser type, and referring site. Google Analytics uses cookies for this purpose. It does not receive the content of the briefing request form.

Spam protection. The briefing form is protected by Google reCAPTCHA, which processes technical data (such as IP address and browser characteristics) to distinguish people from automated submissions. Google's Privacy Policy and Terms of Service apply.

3. Purpose of processing

Data submitted through the form is used exclusively to:

• Review and respond to briefing requests
• Assess the legitimacy and relevance of the request
• Establish initial contact with the requesting organization
• Keep a record of business enquiries for internal follow-up

4. Legal basis

• Legitimate interest — responding to your enquiry and assessing a potential collaboration
• Consent — given when you submit the form and tick the confirmation box
• Contractual necessity — if an engagement follows, processing needed to perform it

5. Retention

Briefing request data is kept for a maximum of 3 years from the last contact or interaction, then deleted or anonymised. If no engagement or follow-up takes place within 12 months of your first submission, the data is deleted unless you have explicitly agreed to be contacted again.

Analytics data is retained according to the retention period configured in Google Analytics.

6. Service providers

Your data is processed by a limited number of providers acting under contractual data protection obligations:

• Website hosting and form handling provider
• Business email provider, to which form submissions are delivered
• Google (Analytics and reCAPTCHA), as described in section 2

We do not use CRM or email marketing platforms that receive the content of your submission.

7. Security

• All pages and submissions are encrypted in transit (HTTPS / TLS), with HTTP Strict Transport Security
• Browser security policies restrict the scripts and resources the website may load
• Form submissions are protected against spam and automated abuse
• Access to submitted data is restricted to authorised SAPIEN X personnel

See the Security Policy for more detail.

8. Your rights

Under applicable law, you have the right to:

• Access the data we hold about you
• Rectify inaccurate data
• Erase your data
• Object to its processing
• Portability of your data in a structured, machine-readable format
• Withdraw consent at any time, without affecting earlier lawful processing

To exercise these rights, contact us using the details below. We respond within 30 days. You may also lodge a complaint with the CNDP (Morocco) or with the data protection authority of your country.

9. International transfers

Our service providers may process data outside Morocco and the European Economic Area. Such transfers are covered by appropriate safeguards, including standard contractual clauses where required.

10. Changes

We may update this Privacy Policy. Changes are reflected in the "Last updated" date at the top of this page.

11. Contact

For any question or request about your personal data: