Privacy Policy

HYZEN Solutions SASU (“Hyzen,” “Company,” “we,” “us,” or “our”), a Société par Actions Simplifiée à Associé Unique registered in Morocco, is committed to protecting the privacy and personal data of all individuals who interact with our website.

This Privacy Policy (“Policy”) describes our practices regarding personal data collected through our website (hyzenergy.com and its subdomains), including our free Site Screener tool (collectively, the “Website”). It explains what data we collect, why we collect it, how we use it, and your rights regarding your personal data.

This Policy is designed to comply with:

• —Moroccan Law 09-08 (Dahir n° 1-09-15 of 18 February 2009) on the protection of individuals with regard to the processing of personal data, and its implementing Decree n° 2-09-165 of 21 May 2009;
• —The EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), applicable when we process personal data of individuals located in the European Economic Area (EEA);
• —Other applicable data protection laws in jurisdictions where we operate.

As our services evolve, this Policy will be updated to reflect new data processing activities. We will notify you of material changes as described in Section 12.

The data controller responsible for your personal data is:

We collect different categories of personal data depending on how you interact with our Website:

3.1 Contact and Waitlist Data

When you submit our contact or launch notification form, we collect:

• —Full name
• —Email address
• —Company name (if provided)
• —Any message content you include in the form

This data is collected solely to respond to your inquiry and/or to notify you about the launch of our platform. We will not use your email for marketing communications unless you explicitly consent.

3.2 Site Screener Data

When you use the free Site Screener tool, we collect:

• —Geographic coordinates you click on or enter
• —Location search queries
• —Browser-generated approximate location (only if you grant permission — this is never collected automatically)

The Site Screener can be used without providing any personal information. When used without submitting the contact form, we collect only the anonymized usage data described in Section 3.4 below.

3.3 AI Interaction Data

When you interact with AI-powered features of the Site Screener (the AI site assessment assistant), we collect:

• —Queries and prompts you submit
• —AI-generated responses

We may use anonymized and aggregated AI interaction data to improve the quality of our AI features. Individual queries are not shared with third parties beyond the AI service provider described in Section 5.

3.4 Usage and Analytics Data

When you access our Website, we automatically collect:

• —IP address (anonymized where technically feasible)
• —Browser type and version
• —Operating system and device type
• —Pages visited and interactions performed
• —Session duration and timestamps
• —Referring URL
• —Language preference

This data is collected through cookies and similar technologies as described in our Cookie Policy.

We do not sell your personal data. We share personal data only in the following limited circumstances:

5.1 Service Providers (Sub-processors)

We use the following service providers who may process data on our behalf:

All sub-processors are contractually bound to process data only on our instructions and to implement appropriate security measures.

5.2 Legal Requirements

We may disclose personal data if required to do so by law, regulation, legal process, or governmental request.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such transfer and any changes to this Policy.

Hyzen is based in Morocco. Your personal data may be transferred to and processed in countries outside Morocco and outside the European Economic Area (EEA), including the United States, where some of our service providers are located.

When transferring personal data outside Morocco, we ensure compliance with Article 43 of Loi 09-08, which requires that the recipient country ensures an adequate level of protection, or that we obtain CNDP authorization for the transfer.

When transferring personal data outside the EEA, we rely on:

• —EU Standard Contractual Clauses (SCCs) adopted by the European Commission;
• —Adequacy decisions where applicable;
• —Other appropriate safeguards as required by GDPR Chapter V.

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy:

After the retention period, personal data is securely deleted or irreversibly anonymized.

8.1 Under GDPR (for EEA residents)

If you are located in the EEA, you have the following rights:

• —Right of access (Art. 15): Obtain confirmation of whether we process your personal data and receive a copy.
• —Right to rectification (Art. 16): Request correction of inaccurate personal data.
• —Right to erasure (Art. 17): Request deletion of your personal data.
• —Right to restriction (Art. 18): Request restriction of processing in certain circumstances.
• —Right to data portability (Art. 20): Receive your personal data in a structured, machine-readable format.
• —Right to object (Art. 21): Object to processing based on legitimate interests, including direct marketing.
• —Right to withdraw consent (Art. 7): Withdraw consent at any time where processing is based on consent.
• —Right to lodge a complaint: File a complaint with your local supervisory authority.

8.2 Under Moroccan Law 09-08

If you are located in Morocco or your data is processed under Moroccan law, you have the following rights:

• —Right of access (Art. 7): Obtain confirmation of whether your data is being processed and communication of the data concerning you.
• —Right to rectification (Art. 8): Require the rectification, completion, update, locking, or deletion of your personal data.
• —Right to object (Art. 9): Object, on legitimate grounds, to the processing of your data. You may also object, free of charge, to the use of your data for commercial prospecting.
• —Right to lodge a complaint with the CNDP: Commission Nationale de contrôle de la protection des Données à caractère Personnel — www.cndp.ma.

8.3 How to Exercise Your Rights

To exercise any of your rights, contact us at:

• —Email: contact@hyzenergy.com
• —Mail: HYZEN Solutions SASU, Imm 43 Appt 26 Rue Aguelmane Sidi Aali Agdal, Rabat, Morocco

We will respond to your request within thirty (30) days. We may ask you to verify your identity before processing your request.

8.4 Unsubscribing from Launch Notifications

If you signed up for launch notifications, you can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by emailing contact@hyzenergy.com with the subject line “Unsubscribe.”

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with GDPR Article 32 and Article 23 of Loi 09-08. These measures include:

• —Encryption of data in transit (TLS/SSL)
• —Secure hosting infrastructure
• —Limited access to personal data on a need-to-know basis
• —Incident response procedures

Despite our efforts, no method of electronic transmission or storage is 100% secure. In the event of a data breach, we will notify affected individuals and relevant authorities (including the CNDP) in accordance with applicable legal requirements.

The Website is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete such data promptly.

The Website may contain links to third-party websites. We are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Policy from time to time, particularly as we expand our services. Material changes will be communicated by email (to users who have provided their email) at least thirty (30) days before they take effect. The current version is always available at hyzenergy.com/privacy.

When we launch our full SaaS platform, this Policy will be updated to cover additional data processing activities including account creation, subscription billing, project data, and engineering outputs.

We use cookies and similar technologies as described in our Cookie Policy.

14.1. The Site Screener's AI features use the Anthropic Claude API. When you interact with AI features, your query — along with the geographic context you provided — is sent to Anthropic's servers for processing. We anonymize or strip identifying information before sending queries when technically feasible.

14.2. Anthropic processes data under its own data retention policies. Under Anthropic's current API terms, prompts sent through the API are not used to train Anthropic's models.

14.3. AI-generated outputs are based on general knowledge and the context you provide. The AI does not retain memory of your queries between sessions.

For any questions or requests related to this Privacy Policy: