Privacy Policy

Last updated : 21/03/2026

← Back

1. Introduction

MPOW ("we", "our" or "us") is committed to protecting your privacy. This privacy policy explains how we collect, use and protect your personal information in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and other applicable data protection laws.

2. Information We Collect

2.1 Information provided directly
• First and last name
• Email address
• Company name
• Phone number (optional)
• Payment information (processed by secure third-party processors)

2.2 Automatically collected information
• IP address
• Browser type and device
• Pages visited and visit duration
• Geolocation data (city, country)
• QR/NFC card scan statistics

2.3 Cookies
We use essential cookies for service operation (authentication, preferences). You can disable them in your browser, but this may limit certain functionalities.

3. Use of Your Data

We use your data to:
• Provide and improve our services
• Process your orders and payments
• Send you important notifications (activation, expirations)
• Generate statistics and analytics for your account
• Ensure security and prevent fraud
• Comply with our legal obligations

Legal basis (GDPR):
• Contract execution (service provision)
• Legitimate interest (service improvement, security)
• Consent (marketing communications - opt-in only)

4. Data Sharing

We NEVER sell your personal data.

We share your data only with:
Payment processors: PayPal (for secure transactions)
Server hosts: To store your data securely
Analytics services: Anonymized data only
Legal authorities: If required by law

All our partners are subject to strict confidentiality and data protection agreements.

5. Your Rights (GDPR & CCPA)

You have the right to:
Access your personal data
Rectify inaccurate data
Delete your account and data
Export your data (portability)
Object to data processing
Restrict data processing
Withdraw consent at any time

To exercise your rights:
Contact us at privacy@mpow.net
We will respond within 30 days maximum.

6. Data Security

Security measures:
• SSL/TLS encryption for all transmissions
• Secure servers with DDoS protection
• Automatic daily backups
• Password hashing (Bcrypt)
• Restricted access to personal data
• 24/7 intrusion attempt monitoring
• Two-factor authentication available

In case of data breach:
We will notify relevant authorities and affected users within 72 hours, in accordance with GDPR.

7. Data Retention

Retention period:
Active accounts: Subscription duration + 5 years (legal obligations)
Demo accounts: 7 days then automatic deletion
Payment data: According to tax laws (5-10 years)
Technical logs: 12 months maximum

Deletion:
You can request complete deletion of your data at any time. We will proceed with deletion within 30 days, except for legal obligations.

8. International Transfers

Our servers are located in Europe and the United States.

For data transfers outside the EU:
• EU-approved standard contractual clauses
• Privacy Shield certification (if applicable)
• Appropriate guarantees in accordance with GDPR

Your data benefits from the same level of protection, regardless of location.

9. Third-Party Services

We use the following services:
PayPal: Payment processing (PayPal Policy)
ip-api.com: Geolocation (anonymized data)
Google Fonts: Typography (no personal data)

Each third-party service has its own privacy policy. We encourage you to review them.

10. Changes to This Policy

We may update this privacy policy occasionally. Changes will be posted on this page with an updated revision date.

Significant changes:
We will notify you by email of substantial modifications at least 30 days before they take effect.

11. Contact

For any questions regarding this policy or your personal data:

EDIWARE - MPOW
Email: qr@ediwarelab.com
Email: qr@mpow.net
WhatsApp: +212 660 32 46 15
Address: 161/163 Bd Abdelmoumen Q.H, Casablanca 20190, Morocco

Data Protection Officer (DPO):
Email: dpo@mpow.net

Supervisory Authority (EU):
You have the right to file a complaint with your national data protection authority if you believe your rights have been violated.

← Back to home