Privacy Policy

Last updated: October 23, 2026

This policy explains what personal data M3 Media collects through this website, why we collect it, how long we keep it and the choices you have. M3 Media, based in Beirut, Lebanon, is the data controller.

What data do we collect?

Proposal and contact forms: your name, email, phone number, the services you are interested in and, if you choose to share them, your website, Instagram page and details about your business.
Job applications: your name, email, phone (optional), the role, your portfolio link, your CV file and anything you tell us about yourself.
Newsletter: your email address.
M3 Assistant (chat): the messages you send. If you ask the team to contact you, the name and email you give in the chat.
Beat M3 Media (game): game moves and a temporary game token. If you win and claim a prize, your name, email and company (optional).
Technical data: your IP address, used briefly to limit abuse (rate limiting and one prize round per visitor per day).
Analytics, only with your consent: pages visited, device type, approximate location (country or city) and the actions you take, such as sending a form.

How do we use your data?

To reply to your enquiry, prepare a proposal and follow up about your project.
To review job applications and contact candidates.
To send the newsletter you signed up for. Every email has an unsubscribe link.
To answer chat questions. Chat messages are sent to our AI provider, Anthropic (Claude), to generate replies from our website content. If the AI is unavailable, our own server answers instead.
To run the game fairly, issue prize codes and stop repeat or automated claims.
To protect the site from spam and abuse, including an optional bot check by Cloudflare Turnstile.

What is our legal basis?

We process personal data in line with Lebanese Law No. 81 of 2018 on Electronic Transactions and Personal Data.
Consent, which you give with the checkbox on our forms and can withdraw at any time.
Steps you ask us to take before a contract, such as preparing a proposal.
Our legitimate interest in keeping the site secure and free of abuse.

We do not sell your data. We share it only with service providers that help us run the site: Vercel (hosting), Resend (email delivery and newsletter), Anthropic (chat replies), Cloudflare (bot protection), Google (analytics, only with consent) and Upstash (rate-limit and game records).
These providers process data only on our behalf and under their own security and confidentiality commitments. Some are based outside Lebanon, so your data may be processed abroad; we only choose providers that protect it appropriately.

Are chat conversations saved?

We do not store chat transcripts. Your messages are processed to generate a reply (by Anthropic, under its commercial terms for business customers), and the conversation is kept only in your own browser tab so you can continue it while you browse; it disappears when you close the tab. Anthropic does not use these messages to train its models and keeps them only for a limited period under its commercial terms.
Please do not share sensitive personal data, payment details or passwords in the chat.

How long do we keep your data?

Enquiries and proposals: 24 months after our last contact, unless you become a client.
Job applications: 12 months, so we can consider you for future roles, unless you ask us to delete them sooner.
Newsletter: until you unsubscribe.
Game data: game tokens expire within hours. Prize claims are kept for 12 months to honour the prize and prevent duplicate claims.
IP-based rate-limit records: no longer than 24 hours.

Do we use cookies?

Essential storage only, by default: your cookie choice, your reduce-motion setting and form details you started in the chat are kept in your browser. These are not cookies and are never sent to anyone.
Analytics cookies, only if you click Accept analytics: Google Analytics 4 sets _ga and _ga_<ID> for up to 2 years to count visits and see which pages help. IP addresses are not stored, and advertising features are switched off.
Bot protection: on the game claim form, Cloudflare Turnstile may set a short-lived security cookie to tell people from bots.
You can change your choice at any time with Cookie settings in the footer. Rejecting deletes the analytics cookies.

What are your rights?

You can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent at any time.
To make a request, email info@m3medialb.com. We reply within 30 days. You can also raise a complaint with the competent authorities in Lebanon.

How do we protect your data?

Data is sent over HTTPS, access is limited to the people who need it, and uploaded CVs are checked before we accept them.

Which law applies?

This policy and any dispute about it are governed by the laws of Lebanon, and the courts of Beirut have jurisdiction.

Will this policy change?

We will update this page when our practices change and show the date of the latest version at the top.