Legal notice, Terms, Privacy & DPA

Template — have reviewed by counsel. This document faithfully reflects how the platform technically works; fields in [BRACKETS] must be completed by the operator before commercial use.

Terms of Service

Operator. The platform is operated by [COMPANY], [LEGAL FORM], [ADDRESS], [REGISTRATION]. Contact: [EMAIL].

Service. An AI assistance platform: specialised conversational agents, business applications (legal, HR, finance, creative), knowledge bases (RAG), automations and an API. Billed in credits via subscription plans (Free / Basic / Enterprise / Pro) and top-ups (Stripe, Chargily in DZD).

Account. Registration requires a valid e-mail (code verification). You are responsible for keeping credentials and API keys confidential. Enterprise accounts can create teams and grant per-team access.

Acceptable use. No illegal activity, no generating deceptive content presented as authentic, no attempts to access other accounts' data, no circumventing billing or security mechanisms.

⚠️ AI output is not professional advice. Agent answers — including the legal, tax and finance agents — are documentary aids produced by statistical models. They may contain errors and do not replace a lawyer, an accountant or a financial adviser. Verify anything before relying on it.

Liability. The service is provided "as is". To the extent permitted by law, liability is capped at the amounts paid over the last 12 months. Uninterrupted availability is not guaranteed (maintenance, third-party model providers).

Termination. You may stop using the service and delete your data at any time. The operator may suspend an account for ToS violations, with notice.

Privacy policy

Data collected. Account (e-mail, display name, language); content you submit (conversations, files, knowledge bases); usage and billing data (credit consumption, transactions); technical logs.

Purposes. Operating the service (submitted content is sent to AI models to produce the answer), billing, security (abuse detection), notifications (if enabled).

Technical sub-processors. AI model providers (Google Gemini, Mistral, and depending on configuration OpenAI/others via gateway), payments (Stripe, Chargily), transactional e-mail ([SMTP/Brevo]), voice (ElevenLabs, if you use dubbing). Each receives only what its function requires. Your content is not used to train our models.

Hosting. [HOSTING LOCATION — EU recommended for French customers]. An on-premise deployment (your servers, your data) is available for enterprise customers.

Your rights. Access, rectification, erasure, portability, objection — GDPR (EU) and Law 18-07 (Algeria). Exercise them via [EMAIL]. Account deletion removes associated content (except legally required accounting records).

Security (actual measures). Integration secrets encrypted at rest (Fernet), passwords hashed (bcrypt), API keys stored as SHA-256 digests only, code execution in a network-disabled isolated sandbox (gVisor), allowlisted anti-SSRF egress proxy, strict per-organisation isolation, audit logging.

Cookies. Technical session cookies only; no advertising cookies. [Adapt if analytics are added.]

Data Processing Agreement (DPA) — summary

For professional customers the operator acts as a processor (GDPR art. 28) over submitted content: processing only on the customer's documented instructions; staff confidentiality; the technical measures above; assistance with data-subject requests; breach notification without undue delay; return or deletion at contract end; sub-processor list above, changes notified. The full signable DPA is available on request: [EMAIL].

Vulnerability disclosure

Report security issues responsibly to [SECURITY EMAIL]. We acknowledge within 72 h and do not pursue good-faith research.