Data protection
Privacy policy
Last updated : 2026-09-26
This policy describes how QanounIA (« we ») collects, uses and protects your personal data, in accordance with the Law No. 09-08 on the protection of individuals with regard to the processing of personal data and the deliberations of the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel).
1. Data controller
The data controller is LEGAL COUNSELLORS OF AFRICA (LCOA), publisher of the QanounIA platform. For any questions about your data, contact our designated contact at privacy@qanounia.com.
2. Data we collect
- Account data : name, email address, telephone number, profile (lawyer, firm, company, student, individual), password (encrypted).
- Content you enter : matters, clients, documents, invoices, pleadings, messages sent to the AI assistant.
- Usage data : pages viewed, features used, technical logs, IP address, device type.
- Billing data : information required to manage your subscription (payments are processed by specialist providers; we do not store your card numbers).
3. Purposes and legal bases
- Provide and operate the service (performance of the contract).
- Manage your account, subscription and billing (performance of the contract, legal obligation).
- Improve and secure the platform, prevent fraud (legitimate interest).
- Send you service-related notifications and communications (performance of the contract) or marketing information (consent, which may be withdrawn at any time).
4. Processing by artificial intelligence
QanounIA uses artificial intelligence models to answer your questions and generate content. Queries you submit to the assistant may be transmitted to AI model providers via secure interfaces solely to produce the response.
AI responses constitute general legal information and are not a substitute for advice from a lawyer. Avoid sharing unnecessary sensitive data with the assistant.
5. Recipients and data processors
Your data is never sold. It is processed by the following processors, acting on our behalf and under our instructions, each bound by confidentiality and security obligations :
- Hostinger International Ltd. — Application server hosting — Paris, France (UE)
- Neon, Inc. (sur Amazon Web Services) — Database — États-Unis (région us-east-1)
- Microsoft (Azure OpenAI Service) — AI models: assistant, agents, translation, email reading — Hors Maroc
- Google (Gemini API) — Secondary AI models (news classification, certain analyses) — Hors Maroc
- OpenRouter, Inc. — AI models for marking student work — États-Unis
- Google (Gmail / Workspace) — Sending transactional emails — Hors Maroc
6. Transfers outside Morocco
As indicated above, the application server is located in the European Union, the database in the United States and the AI models are hosted by providers located outside Morocco. These transfers are governed by these providers' contractual commitments and carried out in accordance with Law 09-08 and CNDP requirements.
7. Retention period
Your data is retained for the lifetime of your account, then deleted or anonymised within a reasonable period after its closure, subject to statutory retention periods (accounting, tax) which may require certain documents to be retained for longer.
8. Security
We implement appropriate technical and organisational measures: password encryption, role- and permission-based access control, data isolation by workspace (multi-tenant), and logging of sensitive actions.
9. Your rights
In accordance with Law 09-08, you have the right to access, rectify, object to and delete your data. You can exercise these rights by writing to privacy@qanounia.com. You can also lodge a complaint with the CNDP (www.cndp.ma).
10. Cookies
QanounIA uses cookies strictly necessary for the operation of the service (session, security). To find out more, see our cookie policy.
11. Changes
We may update this policy. You will be notified of any significant changes. The last updated date appears at the top of this page.