Privacy Policy

1. Data Controller

The data controller responsible for your personal information is:

• Company: Apollume LLC
• Country: Kingdom of Morocco
• Email: privacy@apollume.com

2. Data We Collect

2.1 Information You Provide Directly

• Contact enquiries: name, email address, company name, and message content when you submit our contact form;
• Service engagements: business contact details, project requirements, and contractual information necessary to deliver services.

2.2 Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, referring URLs, and pages visited — collected via server logs for security and operational purposes;
• Analytics data: aggregated, anonymised usage statistics to understand how visitors use our website (see our Cookie Policy for details).

2.3 Information We Do Not Collect

We do not knowingly collect sensitive personal data (such as health, financial, or biometric data) through this website. We do not knowingly collect data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent — when you voluntarily submit a contact form;
• Contractual necessity — to fulfil service obligations under a signed agreement;
• Legitimate interests — to operate and improve our website, prevent fraud, and protect our legal rights;
• Legal obligation — when required by applicable Moroccan law or court order.

4. How We Use Your Data

• Responding to your enquiries and communications;
• Delivering AI services under a client agreement;
• Sending relevant service updates (with your consent);
• Improving our website and user experience;
• Complying with legal and regulatory obligations;
• Protecting against fraud, abuse, and security threats.

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We do not use your data to train AI models without your explicit consent.

5. Data Sharing

We may share your data only in the following limited circumstances:

• Service providers: trusted third-party processors (e.g. hosting, email delivery) who are bound by data processing agreements and may only process data on our instructions;
• Legal requirements: when required by law, court order, or governmental authority;
• Business transfers: in the event of a merger, acquisition, or sale of substantially all assets, with notice to affected users.

6. International Data Transfers

Apollume is based in Morocco. If you access our website from the European Economic Area (EEA), your data may be transferred to Morocco, which has been assessed for adequate data protection standards. For EEA-based clients, we implement appropriate safeguards including Standard Contractual Clauses where required.

7. Data Retention

• Contact enquiries: retained for 2 years from the date of enquiry, or until you request deletion;
• Client contractual data: retained for 5 years after the end of the engagement, as required by Moroccan commercial law;
• Server logs: automatically purged after 90 days;
• Analytics data: aggregated and anonymised — retained indefinitely in aggregate form only.

8. Your Rights

Under Moroccan Law No. 09-08 and, where applicable, the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you;
• Right to rectification — request correction of inaccurate data;
• Right to erasure — request deletion of your data, subject to legal retention obligations;
• Right to restriction — request that we limit processing of your data;
• Right to data portability — receive your data in a structured, machine-readable format;
• Right to object — object to processing based on legitimate interests;
• Right to withdraw consent — withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at privacy@apollume.com. We will respond within 30 days. You also have the right to lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) in Morocco, or your local data protection authority if you are in the EEA.

9. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction — including HTTPS encryption, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you become aware that a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be communicated to active clients via email. We encourage you to review this policy regularly.

12. Contact

For any privacy-related enquiries or to exercise your rights:

• Company: Apollume LLC
• Email: privacy@apollume.com
• Website: apollume.com