Privacy Policy
Astrasofts (“we”, “us”, “our”) is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights regarding it.
Who we are
Astrasofts is a software development studio based in Casablanca, Morocco. We design, build, and secure web products for clients worldwide.
For the purposes of applicable data protection law, Astrasofts is the data controller responsible for your personal data collected through this website and our services.
Registered address: Casablanca, Morocco. Contact email: madehayoussof96@gmail.com
Information we collect
We collect information you provide directly to us, including when you submit a contact form, send us an email, or engage our services.
Contact form data: name, email address, company name, service type, budget range, and project description.
Technical data: IP address, browser type and version, operating system, referral URL, and pages visited. This is collected automatically through standard server logs and analytics tools.
Communications: any emails or messages you send us, which we retain as part of our business correspondence.
We do not collect sensitive personal data such as health information, financial account details, or government identification numbers.
How we use your information
We use the information we collect to respond to your enquiries and provide the services you request.
To communicate with you about your project, send project updates, invoices, and support responses.
To improve our website and services based on aggregated, anonymised usage data.
To comply with legal obligations and protect our legitimate business interests.
We will never sell your personal data to third parties. We will never use your data for unsolicited marketing without your explicit consent.
Third-party services
We use a limited set of trusted third-party services to operate our website and deliver our services.
Email delivery: We use EmailJS to transmit contact form submissions. Your form data passes through their servers in accordance with their privacy policy.
Analytics: We may use privacy-respecting analytics (such as aggregated server-side metrics) to understand site usage. No personally identifiable information is shared with analytics providers.
Hosting & infrastructure: Our website is hosted on servers that comply with industry-standard security practices.
All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.
Data retention
We retain contact form submissions and email correspondence for as long as necessary to fulfil the purpose for which they were collected, or as required by law — typically no longer than 3 years after our last interaction.
Project-related data (communications, deliverables) is retained for the duration of the project engagement and for 5 years thereafter for legal and warranty purposes.
Analytics data is retained in aggregated, anonymised form and is not subject to individual deletion requests.
You may request deletion of your personal data at any time by contacting us at madehayoussof96@gmail.com.
Cookies
Our website uses only strictly necessary cookies required for the site to function. We do not use advertising cookies or tracking cookies.
Session storage: We use browser localStorage to remember your language preference (EN or AR). This data never leaves your device.
No cross-site tracking: We do not use third-party cookies that track you across other websites.
You can clear localStorage at any time through your browser settings without affecting your ability to use the site.
Your rights
Depending on your location, you may have the following rights regarding your personal data:
→Right of access: You can request a copy of the personal data we hold about you.
→Right to rectification: You can ask us to correct inaccurate or incomplete information.
→Right to erasure: You can ask us to delete your personal data, subject to legal retention obligations.
→Right to object: You can object to us processing your data for certain purposes.
→Right to data portability: You can request your data in a structured, machine-readable format.
To exercise any of these rights, contact us at madehayoussof96@gmail.com. We will respond within 30 days.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.
All data in transit is protected using TLS 1.3 encryption. Our infrastructure is regularly audited and penetration-tested.
Access to personal data is restricted to team members who need it to perform their job functions. All access is logged and monitored.
In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.
Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the 'Last updated' date at the top of this page.
For significant changes, we will take reasonable steps to notify affected users directly (e.g. by email if we hold your contact details).
We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.
Contact us
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
We aim to respond to all privacy-related enquiries within 5 business days.