Back to Home

Privacy Policy

Last updated: October 2026

Who we are

This site is operated by Hamza El Haissouf, a freelance web and mobile developer based in Casablanca, Morocco. Contact: hello@hamzaelhaissouf.com or WhatsApp +212 662 631 466.

What we collect and why

  • Project brief (lead form) — Name, company, phone or WhatsApp number, city, business type, selected package, optional website URL, project description, preferred contact method, and consent. Used solely to evaluate your project and reply to you. Stored using the approved lead infrastructure. Never sold.
  • Misu chat assistant — Messages you type to Misu, the site's assistant, are sent to DeepSeek to generate a reply. The site does not store the conversation and does not send its text to analytics; only a count of messages is recorded. If you choose "Leave my contact", your name, contact details and a summary of your own messages are saved as a lead, exactly like the project brief form. Please do not share sensitive personal information in the chat.
  • Booking assistant demo — Messages you type in the WhatsApp booking assistant demo (/projects/sales-chatbot-demo and some service pages) are sent to DeepSeek to generate the fictional business's reply. The site does not store the conversation; analytics only record that the demo was played, or that a conversation started, was booked or was handed over, with the business type. Please do not share personal information in the demo.
  • UBL invoice tool, AI import — On /outils/facture-electronique-ubl, the manual form, CSV import, checks and XML export run in your browser and send nothing. Only if you use the AI import, the invoice you choose (image, PDF or pasted text) is sent to DeepSeek to read its fields. The site does not store the file or the extracted data, does not log their content, and does not send them to analytics; a per-visitor daily counter (salted hash of the IP) limits use. Do not upload documents you do not want to share.
  • Analytics and attribution — Page views, clicks, and conversion events (WhatsApp click, form submit) are recorded via Google Analytics, Google Ads (conversion tag), and Microsoft Clarity. The Google Ads tag captures a gclid parameter on ad clicks and stores it alongside your lead so we can measure ad performance. Clarity records session replays for UX analysis.
  • Attribution cookies — utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, gbraid, wbraid, fbclid, and msclkid parameters, referral source (including ChatGPT), landing page, and browser/session identifiers may be stored in first-party browser storage to attribute a quotation request to its traffic source. Campaign context is kept for the current session; first-touch attribution expires after 90 days. WhatsApp buttons may add an editable reference to the prefilled message so a received inquiry can be matched to its website click. A click alone does not reveal your WhatsApp identity or prove that a message was sent.
  • WhatsApp click context — When you tap a WhatsApp button, the site records your approximate location (country, region and city, worked out by our host from your connection), the campaign tags of the link you arrived from (such as utm_source=x), your landing page, up to the last 10 pages you viewed in this visit, how long the visit has lasted, and whether this browser visited in the previous 90 days, using a random ID kept in your browser's storage. Your IP address is not stored, your device is not fingerprinted, and no extra third-party tracker is loaded. This context is saved in the site's own database and sent to Hamza in an alert email so he knows which page or post led to your message. It is not linked to your name or number unless you write, and you can ask for it to be deleted at any time.
  • Enhanced conversions — If you submit a form with an email address, we hash it (SHA-256, client-side) and send the hash to Google Ads to improve conversion match quality. The raw email is never transmitted to Google.

Legal basis (GDPR)

Lead processing is based on your consent and pre-contractual measures requested through the quotation form. Analytics and fraud prevention rely on consent or legitimate interest as applicable. Where the consent banner is shown, you can change your choice at any time.

Data retention

Lead submissions are kept for up to 24 months to follow up on projects. Analytics events are retained per the default settings of each platform (Google: 14 months; Clarity: 30 days for session recordings).

Third-party services

  • Google Analytics / Google Ads — google.com/privacy
  • Microsoft Clarity — privacy.microsoft.com/privacystatement
  • Firebase / Firestore (Google Cloud) — firebase.google.com/support/privacy
  • DeepSeek (Misu, booking assistant demo replies, UBL tool AI import) — platform.deepseek.com
  • Vercel (hosting, approximate location) — vercel.com/legal/privacy-policy
  • Cloudflare D1 (site's own analytics database) — cloudflare.com/privacypolicy
  • Resend (alert emails to Hamza) — resend.com/legal/privacy-policy

Your rights

You can request access to, correction of, or deletion of your personal data at any time. Contact us via email or WhatsApp (below). We will respond within 30 days.

Cookies

This site does not use advertising cookies directly. Google Ads and Google Analytics may set cookies per their own policies. You can opt out via your browser settings or Google's ad settings at adssettings.google.com.

Changes to this policy

We may update this page occasionally. The date at the bottom reflects the latest revision. Continued use of the site after a change constitutes acceptance.

Contact

For any privacy-related requests, please reach out:

hello@hamzaelhaissouf.comWhatsApp +212 662 631 466