Privacy Policy

1. Introduction

NeiroTechs SARL ("NeiroTechs", "we", "us", or "our"), a company registered in Morocco at IMM 16 RUE OTTAWA APT 12 5EME ETAGE OCEAN RABAT, is committed to protecting your privacy and personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (neirotechs.com) and use our services. This policy complies with Moroccan Law 09-08 on the Protection of Individuals with regard to the Processing of Personal Data, and the European Union General Data Protection Regulation (GDPR) for users located in the European Economic Area (EEA).

2. Data Controller

NeiroTechs SARL is the data controller responsible for your personal data. For any questions regarding this policy or our data practices, contact us at:

• Email: contact@neirotechs.com
• Address: IMM 16 RUE OTTAWA APT 12 5EME ETAGE OCEAN RABAT, Morocco

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when using our services:

• Contact Form Data: Name, email address, phone number (optional), subject, and message content when you contact us
• Booking Requests: Information provided when scheduling consultations through our booking system
• Communication Data: Records of correspondence when you contact us

3.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, time spent on pages, navigation paths
• Technical Data: IP address (anonymized where possible), referring URLs

We use privacy-respecting analytics that do not track personally identifiable information (PII). No cookies are used for tracking purposes on our main website.

4. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To respond to your inquiries and provide requested services
• Communication: To send you information about our services, updates, and promotional materials (with your consent)
• Website Improvement: To analyze usage patterns and improve our website and services
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To protect our website, users, and services from fraudulent or malicious activity

5. Legal Basis for Processing (GDPR)

For users in the EEA, we process your personal data based on the following legal grounds:

• Consent: When you submit a contact form or subscribe to communications
• Contractual Necessity: To fulfill our obligations when you engage our services
• Legitimate Interests: To improve our services and ensure security, where this does not override your rights
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your data with:

• Service Providers: Third-party vendors who assist in operating our website and services (e.g., email delivery services like Resend, hosting providers like Vercel)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually obligated to protect your data and use it only for specified purposes.

7. International Data Transfers

Your data may be transferred to and processed in countries outside Morocco and the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Other legally recognized transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact Form Submissions: Up to 3 years after the last interaction
• Analytics Data: Aggregated, non-identifiable data retained indefinitely
• Legal Records: As required by applicable law (typically 5-10 years)

9. Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request limitation of processing in certain circumstances
• Data Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, contact us at contact@neirotechs.com. We will respond within 30 days (or as required by applicable law).

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL)
• Secure hosting infrastructure
• Access controls and authentication
• Regular security assessments

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

11. Product-Specific Privacy

11.1 MedAssist AI

MedAssist AI is designed with privacy-first principles for healthcare data:

• On-premises deployment options available for complete data sovereignty
• HIPAA-ready architecture for US healthcare compliance
• ISO 27001 aligned security practices
• PII protection and data anonymization capabilities
• Hosted LLM options that keep data within your infrastructure

11.2 Other Products

Each of our products (Smart Ticket Cedar, Tap2Eat, EcoSale, Vision Boards) may have specific privacy considerations detailed in their respective documentation.

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

15. Complaints

If you have concerns about our data practices, please contact us first at contact@neirotechs.com. You also have the right to lodge a complaint with:

• Morocco: Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP)
• EU/EEA: Your local Data Protection Authority

16. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

• Email: contact@neirotechs.com
• Address: NeiroTechs SARL, IMM 16 RUE OTTAWA APT 12 5EME ETAGE OCEAN RABAT, Morocco