Privacy notice

Moussa Saidi, based in Morocco, is responsible for the personal data handled by this website. Privacy questions and requests may be sent to moussa.saidi.01@gmail.com.

The consultation form collects your name, work email, company, role, selected service, expected timeline, and a description of the React problem. This information is used to assess and respond to your request, take steps toward a possible engagement, maintain necessary business correspondence, and protect the form from abuse.

Please do not include passwords, access tokens, production data, health information, or other sensitive material in an initial inquiry.

The following providers support the production website:

• Vercel provides hosting, Web Analytics, and Speed Insights.
• Cloudflare Turnstile checks public form submissions for abuse.
• Upstash Redis applies a persistent rate limit using a pseudonymous, HMAC-derived identifier rather than a readable IP address.
• Resend delivers consultation notification emails.
• Sentry reports production software errors.

Vercel and the security providers may process technical request information, including an IP address, timestamp, requested page, browser details, and security signals, as necessary to deliver and protect the site. The rate-limit identifier and its counters expire after approximately two hours of inactivity. Resend retains the non-readable delivery idempotency key for 24 hours.

Inquiry descriptions, email contents, form values, credentials, cookies, request headers, and user profiles are intentionally excluded from analytics and Sentry error reports. The only consultation analytics event records that a submission succeeded; it does not contain the form contents.

Inquiry details are processed to take steps at your request before a possible contract and to pursue the legitimate interest of answering relevant business inquiries. Technical and security information is processed for the legitimate interests of operating a reliable website, preventing abuse, understanding public-page performance, and diagnosing software failures. Information may also be retained where necessary to comply with a legal obligation or establish, exercise, or defend legal claims. Consent is relied on where applicable law requires it and may be withdrawn without affecting earlier lawful processing.

Moussa is based in Morocco, while the cloud providers named above operate international infrastructure and subprocessors. Using the site may therefore involve processing outside Morocco. Transfers are limited to what the services need for the purposes described above and are subject to the providers' contractual data-protection terms and the safeguards required by applicable law.

Moroccan Law No. 09-08 applies to processing subject to Moroccan jurisdiction. Other privacy laws, including the EU General Data Protection Regulation, may apply when their territorial conditions are met.

An inquiry that does not become a client engagement is deleted from active business records within 12 months after the last substantive contact. If an engagement begins, the relevant correspondence may be retained for the engagement and afterward for as long as reasonably necessary for contractual, accounting, tax, dispute-resolution, or other legal obligations.

You may request earlier deletion. After verifying the request, information will be deleted unless it must be retained for a legal obligation or legal claim. Service-provider logs and backups are removed according to each provider's documented retention and deletion cycle.

Depending on the law that applies, you may request access to, correction of, or deletion of your personal information; object to or restrict processing; or withdraw consent where consent is the legal ground. You may also raise a privacy question or complaint by emailing moussa.saidi.01@gmail.com or contact the Moroccan data-protection authority, the CNDP, at https://www.cndp.ma/.

This notice will be updated when the processing purposes, providers, or retention practices materially change.