This policy describes what VIXART collects through this website, why, and who processes it. Two pages on this site collect personal information: the consultation booking form at /contact and the job application form at /careers. Nothing else on the site collects personal data about you.
1. Information We Collect
When you book a consultation, we collect your name, email address, company name, the description of your business that you write, and the time slot you select.
When you apply for a role, we collect your name, email address, the role you are applying for, your LinkedIn or portfolio URL if you provide one, your written answers to our two application questions, and the CV and cover letter you upload.
To prevent abuse of those two forms, we derive a one-way cryptographic hash of your IP address and store only that hash. Your IP address itself is never written to our records, and the hash cannot be reversed back into it.
This site sets no advertising or tracking cookies and runs no third-party analytics or advertising scripts. We do not buy personal data, and we do not build profiles of visitors.
2. How We Use It
Booking information is used to hold your slot, to confirm it with you by email, and to prepare for and follow up on the consultation. Application information is used to assess your application and to contact you about it. The abuse-prevention hash is used only to answer whether a burst of requests came from the same caller.
We do not use anything collected here to send marketing you did not ask for, and we do not sell or rent it.
3. Who Processes It
We use two service providers to run these forms:
Supabase
— hosts the database that stores bookings and applications, and the file storage that holds uploaded CVs and cover letters.
Resend
— delivers the confirmation and notification emails triggered by a booking.
Both process this information on our behalf and under our instructions. We do not share your information with anyone else except where the law requires it.
[For counsel: confirm processing locations, the transfer mechanism for any processing outside Morocco and the EEA, and whether a data processing agreement with each provider needs to be referenced here.]
4. How Long We Keep It
[For counsel: set retention periods for booking records, for job applications and their uploaded files, and for the abuse-prevention hashes, and state the lawful basis for each. Uploaded files that no application points at are already swept automatically after a grace period; the remaining periods are a legal decision, not a technical one.]
5. Your Rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to admin@visionxart.com and we will respond.
[For counsel: state the statutory response window, the rights that apply under Moroccan law 09-08 and, where relevant, the GDPR, and the supervisory authority a visitor may complain to.]
6. Security
The site is served over HTTPS. Uploaded files are stored in access-controlled storage rather than in a public directory, and the administrative interface that reads bookings and applications requires authentication.
7. Contact
Questions about this policy go to admin@visionxart.com.
[For counsel: name the data controller and its registered address.]