Terms of Service, Privacy Policy, Cookie Policy, Data Retention Policy and Legal Notice | AI Gestion

Version: 3.1.0, last updated: August 4, 2026.


PART I: TERMS OF SERVICE

Article 1: Purpose

These terms of service are intended to define the rules applicable to access to and use of the platform named "AI Gestion" (hereinafter the "Platform"), as well as the rights, obligations, and responsibilities of any person using its services.

The Platform is primarily intended for Moroccan insurance agencies and facilitates the administrative, documentary, and communication management of insurance claim cases.

The Platform may in particular enable the creation, organization, and tracking of claim cases, the receipt and processing of documents, the management of exchanges with clients and experts, the sending of emails, messages, follow-ups, and notifications, as well as the use of automated assistance, filing, summarization, or analysis features.

The Platform is exclusively a technical tool for organization, automation, and assistance. It does not replace the analysis, judgment, decision, or professional responsibility of agencies, their managers, their agents, experts, or any other person authorized to take part in the processing of a claim case.

Access to and use of the Platform imply full, unreserved acceptance of these terms in the version applicable at the time of use.

Article 2: Definitions

For the purposes of these terms, "Agency" means any insurance agency or professional entity holding authorization to access the Platform under a subscription or business relationship with the Operator.

"User" means any individual holding authorized access to the Platform, including a director, manager, agent, employee, or authorized client.

"Client" means any individual or legal entity whose information or claim case is processed through the Platform.

"Expert" means any person engaged by an Agency to examine, assess, or process all or part of a claim case.

"Case" means the complete set of information, documents, communications, exchanges, decisions, and elements relating to a specific claim.

"Operator" means the person operating under sole-proprietorship ("auto-entrepreneur") status who operates the AI Gestion Platform from Tangier, Morocco.

Article 3: Access Conditions

Access to the Platform is reserved for Agencies with an active subscription and for Users expressly authorized by the relevant Agency or by the Operator.

Each User benefits only from the features and information corresponding to their role, duties, and the authorizations granted to them.

Access to the Platform may be subject to an identification or authentication mechanism. Any credentials assigned to a User are strictly personal, confidential, and must not be shared with any other person.

The User is responsible for safeguarding, keeping confidential, and using their credentials. They must take all reasonable precautions to prevent their loss, disclosure, misuse, or unauthorized use.

Any User who notices suspicious access, abnormal use of their account, loss of control of their credentials, or an attempted unauthorized access must immediately inform the Operator at: aigestionmaroc@gmail.com.

The Operator may suspend, restrict, block, or revoke any access when such a measure is reasonably necessary to protect the Platform, data, Agencies, Users, or third parties, to comply with these terms, to prevent fraud, to end a breach, or to fulfill a legal obligation.

Article 4: Account Creation and Management

An account may be created by the Operator, by an Agency, or by any person authorized to do so.

Information provided when creating an account must be accurate, complete, up to date, and must not impersonate a third party.

The Agency is responsible for creating, managing, modifying, and removing the access it grants to its own Users.

The Agency must remove or suspend a User's access when that User leaves the Agency, changes role, no longer needs to access the Platform, or poses a risk to the confidentiality or security of data.

The Operator cannot be held liable for access maintained by an Agency for the benefit of a person who should no longer have that access.

Article 5: Agency Obligations

The Agency remains solely responsible for the use of the Platform carried out under its authority, for managing its Users, and for defining their access rights.

The Agency is responsible for the accuracy, relevance, lawfulness, and up-to-date status of the information, documents, and instructions it enters or has entered into the Platform.

The Agency is also responsible for complying with its professional, contractual, regulatory, and legal obligations in the course of processing claim cases.

The Agency must ensure it has a valid legal basis allowing it to collect, record, use, retain, transmit, and process the data entered into the Platform.

The Agency must inform data subjects about the processing of their data when this obligation falls to it.

The Agency remains responsible for decisions made on the basis of information available on the Platform and must verify any information or automated result before using it in a decision with legal, financial, commercial, or professional consequences.

Article 6: User Obligations

The User agrees to use the Platform only within the scope of their duties, authorizations, and the purposes set out in these terms.

The User must not access or attempt to access an account, feature, document, Case, or data for which they do not hold valid authorization.

The User must not use another person's account, identity, credentials, or authorizations.

The User must not enter into the Platform information that is false, misleading, fraudulent, defamatory, unlawful, or infringes the rights of a third party.

The User must not enter, transmit, or upload any file, program, code, or other element likely to damage, alter, disrupt, or compromise the Platform or the systems to which it is connected.

The User must not bypass or attempt to bypass access restrictions, security controls, or data-separation mechanisms.

The User must not extract, copy, collect, or bulk-export data outside the Platform's authorized features.

The User must not carry out penetration testing, vulnerability scanning, decompilation, reverse engineering, reproduction, or modification of the Platform without the Operator's prior written authorization.

Any fraudulent, abusive, unlawful use, or use contrary to these terms may result in the immediate suspension of the access concerned.

Article 7: Information and Documents Transmitted

The User must only transmit the information and documents necessary for processing the relevant Case.

Before any transmission, the User must verify that the document corresponds to the correct Case, is legible, complete, relevant, and intended for persons authorized to receive it.

The User must avoid transmitting information that is manifestly unnecessary, excessive, or unrelated to the processing of the Case.

The User is responsible for the consequences resulting from transmitting a document that is incomplete, incorrect, illegible, misfiled, or sent to the wrong recipient.

The Operator may block, isolate, refuse, or delete a file where there is reasonable doubt regarding its security, lawfulness, content, or compliance with these terms.

Article 8: Automated Features

The Platform may offer automated features enabling, among other things, the filing of documents, analysis of messages, summarization of information, identification of elements within a case, generation of suggestions, or assistance to Users in tracking operations.

The results produced by these features are provided for guidance only and do not constitute a final decision, legal advice, an expert opinion, professional validation, or a guarantee of accuracy.

Automated results may be incomplete, incorrect, imprecise, or unsuited to certain situations.

The Agency and the User must verify results before any decision, validation, transmission, payment, refusal, acceptance, or other action likely to produce legal, financial, or professional consequences.

The Operator cannot be held liable for a decision made solely on the basis of an automated result that was not subject to sufficient human verification.

Article 9: Platform Availability

The Operator implements reasonable means to ensure access to and operation of the Platform.

The Operator does not, however, guarantee permanent, continuous, and uninterrupted availability of the service.

Access to the Platform may be temporarily interrupted for reasons of maintenance, correction, updates, improvement, security, failure, overload, malfunction, or force majeure.

Access may also be affected by an issue related to an external provider, a telecommunications network, an email service, a payment system, computer equipment, or the User's internet connection.

Where reasonably possible, planned maintenance operations are communicated in advance to the Agencies concerned.

Article 10: External Services and Providers

Certain Platform features may depend on services provided by external providers, notably for hosting, email, communications, payments, storage, security, or automated processing.

The Operator does not have full control over the operation, availability, changes, or interruptions of these external services.

The Operator cannot be held liable for damage resulting solely from a failure, interruption, delay, change, or fault attributable to an external provider.

The Operator may change or replace a provider when necessary to maintain, improve, secure, or ensure the continuity of the Platform.

Article 11: Intellectual Property

The Platform, its software, structure, organization, interfaces, databases, text, visual elements, features, documentation, and distinctive signs are protected under applicable intellectual property rules.

Access to the Platform transfers no intellectual property right to the Agency or the User.

The Agency and the User hold only a personal, limited, non-exclusive, non-transferable, and revocable right to use the Platform for the duration of their authorized access.

Any unauthorized reproduction, adaptation, modification, extraction, distribution, commercialization, making available, or exploitation of all or part of the Platform is prohibited.

Information and documents entered into the Platform remain the property of their respective owners.

The Agency authorizes the Operator to process the information and documents it enters only to the extent necessary for the operation, security, maintenance, and provision of the Platform.

Article 12: Operator's Liability

The Operator is bound by a best-efforts obligation in providing the Platform.

The Operator does not guarantee that the Platform will meet all of an Agency's or User's particular needs.

The Operator does not guarantee that information entered by Users is accurate, complete, up to date, or lawful.

The Operator cannot be held liable for damage resulting from information that is erroneous, incomplete, outdated, or transmitted late by an Agency, a User, a Client, an Expert, or a third party.

The Operator cannot be held liable for misuse of the Platform, for access granted by an Agency to an unauthorized person, for negligence in protecting credentials, for a transmission to the wrong recipient, or for a decision made without sufficient verification.

The Operator cannot be held liable for a delay in processing a case where that delay results from an action or omission by the Agency, the User, the Client, the Expert, or an external provider.

The Operator is liable only for direct, certain, and foreseeable damage resulting from a breach directly attributable to it, within the limits permitted by applicable law.

No provision of these terms may exclude liability whose exclusion would be prohibited by law.

Article 13: Liability of the Agency and Users

The Agency retains full responsibility for the management of its Cases, its professional obligations, its relationships with its Clients, its communications with Experts, and its decisions.

The Agency is responsible for complying with the deadlines applicable to its Cases and may not treat the Platform as the sole means of monitoring or reminding it of its deadlines.

The User is responsible for actions carried out through their account, except where they demonstrate that those actions result from fraudulent use not attributable to them.

The Agency and the User must verify the proper receipt of important communications and must not assume that an email, message, or notification has actually been read by its recipient.

Article 14: Security

The Operator implements reasonable technical and organizational measures designed to protect the Platform and the data processed against unauthorized access, loss, alteration, destruction, and unlawful disclosure.

For security reasons, information relating to the Platform's architecture, internal systems, control mechanisms, administrative procedures, technical configurations, and protective measures is not made public.

As no computer system can be considered entirely invulnerable, the Operator does not guarantee the absolute absence of any incident, fraudulent access, failure, or vulnerability.

Any incident, suspicious access, abnormal behavior, or suspected vulnerability must be reported to: aigestionmaroc@gmail.com.

Reporting a vulnerability does not authorize its author to exploit it, access data, disrupt the Platform's operation, or carry out tests without prior written authorization.

Article 15: Pricing

Rates applicable to use of the Platform are provided upon request via a quote.

The price may vary depending on the requested features, the number of Users, the volume of Cases, the services included, and the plan selected.

The accepted quote or commercial document specifies the applicable price, the billing period, and the specific terms of the offer.

Billing may be monthly or annual depending on the offer chosen by the Agency.

Article 16: Payment

Payment must be made in accordance with the terms indicated in the accepted quote, invoice, or offer.

The Agency must ensure that the information necessary for billing is accurate and up to date.

In the event of non-payment or late payment, the Operator may suspend access to the Platform after notifying the relevant Agency.

Suspension of access does not release the Agency from paying amounts already due.

Any bank fees, rejection fees, or fees resulting from a payment method used by the Agency remain its responsibility where applicable.

Article 17: Subscription Term

Unless otherwise expressly agreed in a quote or specific contract, the subscription is entered into with no minimum commitment period.

The subscription continues for successive billing periods until terminated by the Agency or the Operator under the conditions set out herein.

Where billing is monthly, each billing period corresponds to one month.

Where billing is annual, each billing period corresponds to one year.

Article 18: Termination by the Agency

The Agency may request termination of its subscription at any time where the subscription carries no minimum commitment.

The termination request must be sent in writing to: aigestionmaroc@gmail.com.

Termination takes effect at the end of the current billing period.

Termination does not entail automatic reimbursement of amounts corresponding to a period already begun, used, or invoiced, unless otherwise agreed or legally required.

The Agency remains responsible for paying amounts due up to the effective date of termination.

Article 19: Suspension or Termination by the Operator

The Operator may suspend or terminate an Agency's access in the event of non-payment, a serious breach of these terms, fraudulent use, an attempted security breach, manifestly unlawful processing, or a legal obligation.

Where circumstances permit, the Operator informs the Agency of the reason for the suspension or termination.

The Operator may ask the Agency to take corrective measures before restoring its access.

In the event of a serious risk to security, the confidentiality of data, or the rights of a third party, suspension may occur immediately.

Article 20: Consequences of Termination

From the effective date of termination, the Agency's Users may lose access to the Platform.

The Agency must take the necessary steps to retrieve the information it needs before the end of its access, where such retrieval is technically available and legally permitted.

Termination does not necessarily result in the immediate deletion of all data.

Certain data may be retained for the period necessary to comply with legal, accounting, tax, contractual, evidentiary, or litigation-related obligations.

Data that is no longer necessary is deleted, anonymized, or made permanently inaccessible in accordance with applicable procedures.

Article 21: Evolution of the Platform

The Operator may modify, correct, improve, replace, add, restrict, or remove certain Platform features.

Such changes may be made to improve the service, strengthen security, comply with a legal obligation, correct an error, or account for a technical development.

Material changes likely to affect the main terms of use are communicated to the relevant Agencies where possible.

Article 22: Amendment of These Terms

The Operator may amend these terms to reflect a legal, regulatory, technical, functional, commercial, or organizational change.

The new version may be communicated via the Platform, by email, or by any other appropriate means.

Where the amendment is material, renewed acceptance may be required before continued use of the Platform.

Article 23: Force Majeure

No party may be held liable for a failure resulting from an unforeseeable, irresistible, and external event that reasonably prevents the performance of its obligations.

This may include, in particular, natural disasters, fires, general network outages, major failures, conflicts, administrative decisions, large-scale cybercrime, or interruptions affecting essential infrastructure.

Article 24: Severability

If a provision of these terms is declared void, unenforceable, or without effect, the remaining provisions remain applicable.

The provision concerned must be interpreted or replaced in a manner that best preserves its original purpose while complying with applicable law.

Article 25: No Waiver

The fact that the Operator does not immediately exercise a right or remedy does not constitute a definitive waiver of the subsequent exercise of that right or remedy.

Article 26: Governing Law and Dispute Resolution

These terms are governed by Moroccan law.

In the event of a dispute or disagreement, the parties must seek an amicable solution before initiating legal proceedings.

Any amicable request may be sent to: aigestionmaroc@gmail.com.

Failing an amicable settlement, the dispute falls under the jurisdiction of the competent Moroccan courts, subject to applicable mandatory rules.


PART II: PRIVACY POLICY

Article 27: Purpose

This policy describes the conditions under which personal data is collected, used, retained, disclosed, and protected through the Platform.

It applies to Users, Clients, Experts, and any other person whose information is entered or processed within a Case.

Article 28: Data Controller

For data relating to the creation and management of accounts, security, billing, and the technical operation of the Platform, processing is carried out by the Operator of the AI Gestion Platform.

For data contained in claim Cases, the relevant Agency determines the professional purposes of the processing and remains responsible for the lawfulness of collecting and using that data.

The Operator then acts as a technical service provider on behalf of the Agency, within the limits of the lawful instructions given to it.

Article 29: Categories of Data Processed

The Platform may process identity and contact data, including first name, last name, email address, and phone number.

The Platform may process information relating to Users' accounts, roles, authorizations, and activities on the Platform.

The Platform may process information relating to contracts, vehicles, claims, repairs, estimates, amounts, case references, and the various stages of processing.

The Platform may process documents such as quotes, invoices, reports, photographs, supporting documents, and correspondence.

The Platform may process communications exchanged between Agencies, Clients, Experts, and other relevant parties.

The Platform may process technical data, connection information, security logs, and data enabling the detection of anomalies or unauthorized access.

The Platform may process data necessary for managing the subscription, billing, and payments.

Only information necessary for the operation of the Platform and the processing of Cases should be collected.

Article 30: Purposes of Processing

Data may be processed to create and manage accounts, authenticate Users, and control their authorizations.

Data may be processed to create, organize, track, and close claim Cases.

Data may be processed to receive, store, file, and transmit documents necessary for processing Cases.

Data may be processed to enable communications between Agencies, Clients, Experts, and other authorized parties.

Data may be processed to send follow-ups, notifications, and information relating to the progress of a Case.

Data may be processed to provide automated assistance, filing, summarization, or analysis features.

Data may be processed to prevent fraud, detect misuse, and protect the security of the Platform.

Data may be processed to manage subscriptions, quotes, billing, and payments.

Data may be processed to comply with a legal obligation, respond to a competent authority, or establish, exercise, or defend a legal right.

Article 31: Legal Basis for Processing

Depending on the situation, processing may be necessary for the performance of a requested service, the performance of a contractual relationship, the processing of a claim Case, compliance with a legal obligation, or the protection of the legitimate interests of the Agency or the Operator.

Where applicable law requires it, processing may also be based on the consent of the data subject.

The Agency is responsible for determining the legal basis applicable to the data it enters into the Platform.

Article 32: Recipients of Data

Data may be accessible to the Agency responsible for the Case and to the Users it has authorized.

Data may be disclosed to the relevant Clients where such disclosure is necessary for processing their Case.

Data may be disclosed to Experts designated by the Agency, limited to the information necessary for carrying out their assignment.

Data may be accessible to authorized persons acting on behalf of the Operator where such access is necessary for operation, maintenance, security, or technical support.

Data may be processed by technical providers necessary for hosting, communication, storage, payment, security, or the operation of the Platform's features.

Data may be disclosed to administrative, judicial, or regulatory authorities where required by a legal provision, a formal request, or an enforceable decision.

Data is not sold to third parties and is not used for advertising purposes unrelated to the operation of the Platform.

Article 33: Hosting and Processing Abroad

The Platform's core data is hosted in Nuremberg, Germany.

Hosting or processing data outside Moroccan territory may constitute a data transfer abroad.

The operations concerned must be carried out in compliance with the formalities, conditions, and safeguards required by applicable Moroccan regulations.

Article 34: Retention Period

Data is retained only for the period necessary for the purposes for which it was collected or processed.

Data may be retained longer where such retention is necessary to comply with a legal, accounting, tax, contractual, evidentiary, or litigation-related obligation.

Data may also be retained where necessary for the security of the Platform, fraud prevention, incident management, proof of a transaction, or the defense of a legal right.

Where data is no longer necessary, it is deleted, anonymized, or permanently rendered inaccessible, subject to applicable technical and legal constraints.

Article 35: Accuracy of Data

The Agency and Users must ensure that data entered into the Platform is accurate, complete, relevant, and up to date.

Any person who notices incorrect information may request its rectification under the conditions provided by applicable regulations.

Article 36: Security and Confidentiality of Data

The Operator implements reasonable technical and organizational measures designed to preserve the confidentiality, integrity, availability, and traceability of data.

Access to data is limited to authorized persons based on their roles and needs.

Technical details of security measures are not published so as not to reduce their effectiveness.

The Agency and Users must also adopt reasonable security measures, in particular by protecting their credentials and limiting access to authorized persons.

Article 37: Rights of Data Subjects

Any data subject may exercise the rights recognized under applicable Moroccan legislation on the protection of personal data.

Depending on applicable legal conditions, these rights may include a right of access, a right of rectification, and a right of objection.

Any request may be sent to: aigestionmaroc@gmail.com.

The request must contain the information necessary to identify the person, the Case, and the data concerned.

Where the request concerns a Case managed by an Agency, it may be forwarded to that Agency to be handled in its capacity as controller for the Case.

Article 38: Requests from Authorities

Data may be disclosed to an administrative, judicial, or regulatory authority where required by a legal provision, a formal request, or an enforceable decision.

The Operator may retain the information necessary to evidence such disclosure.

Article 39: Security Incident

When an incident likely to affect data is identified, the Operator takes reasonably necessary measures to identify the incident, limit its consequences, secure the systems concerned, and prevent its recurrence.

Agencies and Users must promptly report any incident, suspicious access, accidental disclosure, or data loss to: aigestionmaroc@gmail.com.

Article 39 bis: Use of Google Data

AI Gestion uses the Google permissions granted by the User to connect their Agency's professional Gmail mailbox. These permissions solely enable sending, receiving, filing, tracking, and archiving the emails necessary for processing claim cases.

AI Gestion does not use Google data for advertising, profiling, or resale to third parties. This data is only accessible to authorized Users of the relevant Agency and to the technical systems strictly necessary for the service's operation.

The User may withdraw AI Gestion's access at any time from their Google account's security settings.


PART III: COOKIE POLICY

Article 40: Use of Cookies

The Platform may use cookies or other storage mechanisms strictly necessary for its operation.

These mechanisms may be used to maintain the User's session, enable authentication, strengthen security, remember certain functional preferences, and ensure continuity of use.

Disabling these mechanisms may prevent login or disrupt certain Platform features.

Article 41: Advertising Cookies

The Platform does not use advertising cookies or trackers intended for commercial profiling.

Should a non-essential mechanism be integrated in the future, Users would be informed and their consent requested where applicable regulations require it.

Article 42: Managing Cookies

The User may delete cookies or stored data through their browser settings.

Deleting a session cookie may result in the User's immediate logout.


PART IV: DATA RETENTION POLICY

Article 43: General Principle

Data is retained only for the period necessary for the operation of the Platform, the processing of Cases, and compliance with applicable obligations.

Information that is manifestly unnecessary, excessive, or unrelated to the processing of a Case must not be entered into the Platform.

Article 44: Active Cases

Data relating to an active Case may be retained for the period necessary for its processing, tracking, and the completion of related operations.

Article 45: Closed Cases

After a Case is closed, data may be deleted, archived, or anonymized when it is no longer necessary.

Certain data may nonetheless be retained where such retention is necessary to comply with a legal, contractual, accounting, tax, evidentiary, or litigation-related obligation.

Article 46: User Accounts

Data relating to an account may be retained for the period the account is active.

After an account is deactivated, certain information may be retained temporarily to ensure security, traceability, management of the parties' rights and obligations, and defense against fraudulent use.

Article 47: Security and Login Logs

Login, security, and activity logs may be retained for the period necessary to prevent fraudulent access, identify incidents, evidence transactions, protect the Platform, and manage disputes.

Article 48: Billing Data

Information necessary for billing, accounting, and proof of payment may be retained for the periods required by applicable legal, tax, and accounting obligations.

Article 49: Exceptional Retention

Deletion of data may be suspended where that data is necessary for an investigation, a claim, a dispute, a request from an authority, or the establishment, exercise, or defense of a legal right.


PART V: LEGAL NOTICE

Article 50: Platform Operator

The AI Gestion Platform is operated under sole-proprietorship ("auto-entrepreneur") status.

The activity is carried out from Tangier, Morocco.

Any request may be sent to the following email address: aigestionmaroc@gmail.com.

Article 51: Hosting

The Platform's core data is hosted in Nuremberg, Germany.

For security reasons, no server address, IP address, connection information, internal configuration, or technical procedure is published.

Article 52: Intellectual Property

All elements comprising the Platform are protected under applicable intellectual property rules.

Any unauthorized reproduction, adaptation, extraction, distribution, or exploitation may render its author liable.

Article 53: Reporting

Any report relating to a malfunction, unlawful content, suspicious access, misuse, a question concerning personal data, or these terms may be sent to: aigestionmaroc@gmail.com.

Article 54: Contact

For any question relating to the Platform, subscriptions, billing, personal data, these terms, or termination requests, the Agency or User may write to: aigestionmaroc@gmail.com.

Article 55: Governing Law

These terms of service, the privacy policy, the cookie policy, the data retention policy, and the legal notice are governed by Moroccan law.