Privacy Policy.

1. Who this applies to

This Privacy Policy applies to personal data Virtus Operandi processes when you visit virtusoperandi.com, contact us, or use any product in the Virtus Operandi catalogue. For customers, additional processing terms are governed by your service agreement and any Data Processing Addendum.

2. What we collect

We collect the minimum data needed to run the service:

• Contact data — name, email, company, role (when you fill out a form or sign up).
• Account data — login credentials, account settings.
• Usage data — pages visited, features used, timestamps, IP address (in aggregated or de-identified form where possible).
• Customer data — content you submit to our products (emails, documents, configurations). We process this on your behalf as a processor.
• Cookies & similar — see our Cookie Policy.

3. How we use it

We use personal data to:

• Provide, maintain, and improve the Service;
• Respond to questions and provide support;
• Send service announcements and (with consent) marketing communications;
• Detect, prevent, and address fraud or security incidents;
• Comply with legal obligations.

4. Legal bases (GDPR)

Where the GDPR applies, we rely on the following bases:

• Contract — to provide the Service you've requested;
• Legitimate interests — to operate, secure, and improve the Service;
• Consent — for non-essential cookies and marketing emails;
• Legal obligation — to comply with applicable law.

5. Who we share it with

We share personal data only with:

• Sub-processors we use to run the Service (hosting, email, analytics, support tooling). A list is available on request.
• Authorities when required by law or to protect rights, property, or safety.
• Acquirers in the event of a merger or acquisition, subject to confidentiality and equivalent protections.

We do not sell personal data.

6. How long we keep it

We retain personal data only as long as needed for the purpose collected, or as required by law. Customer data is retained per your service agreement; account data is deleted within ninety (90) days of account closure unless retention is required by law.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete personal data ("right to be forgotten");
• Restrict or object to processing;
• Receive data in a portable format;
• Withdraw consent at any time;
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact privacy@virtusoperandi.com.

8. International transfers

Personal data may be processed in Morocco and other countries where our sub-processors operate. Where data is transferred outside the EEA/UK, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

9. Cookies

See our Cookie Policy for details on the cookies and similar technologies we use.

10. Security

We implement administrative, technical, and physical safeguards designed to protect personal data. See Security for more.

11. Changes

We may update this policy from time to time. Material changes will be communicated via the Service or by email at least thirty (30) days before they take effect.

12. Contact us

Data Protection contact: privacy@virtusoperandi.com

Virtus Operandi SARL
[Office address — to be confirmed]
Casablanca, Morocco