Privacy policy

For site and account data, the controller is NotaDraft. For any question or request about your data: contact@notadraft.com.

An office's client data (contained in the documents it uploads) is processed on behalf of that office, which is responsible for it; NotaDraft acts as its processor, under the data processing agreement. If you are a client of an office, send your requests to the office; we will help it answer them.

Demo requests. Name, wilaya, phone (WhatsApp), email, optional message, site language and date of the request. We use them to get back to you, arrange the demo and answer your questions. Basis: your consent, given by sending the form (law 18-07, art. 7); without the required fields we cannot contact you. Kept for: 12 months after our last exchange, if you don't become a customer.

User accounts. Name, email, office and role, and password (stored in irreversibly encrypted form: no one, including us, can read it). We use them to give you access to the Service. Basis: the contract with the office. Kept for: as long as the account is open, then 30 days.

Logins and security. For each login: IP address, browser and date. We use them to keep you signed in and to protect accounts against fraudulent access. Basis: our legitimate interest in securing the Service. Kept for: 30 days.

Office details. The notary's name, the office's address, the registration office and other settings used in the acts. Basis: the contract. Kept for: the length of the subscription.

Billing. The office's identity, address, tax ID, invoices and payments. Basis: our legal obligations. Kept for: 10 years, as required by the commercial code.

Correspondence. Emails and messages you send us, to keep a support history. Kept for: the length of our relationship, then 12 months.

To prepare an act, the office uploads the file's documents: ID documents, birth certificates, title deeds, powers of attorney, company documents, insurance certificates, and so on. NotaDraft reads the relevant information, checks it and prepares the draft act. This data is processed only on behalf of the office, and:

• documents are read on our servers in Algeria, by an artificial intelligence model we host ourselves;
• scans are deleted as soon as the act is generated; the draft act can be downloaded until the file is closed, and for 24 hours at most;
• when an office creates its own act template, the act uploaded for it is deleted as soon as the template is confirmed or discarded; the template is kept until the office deletes it;
• documents are never used to train an artificial intelligence, or for anything other than the office's file.

We use a single cookie: the session cookie, set when you sign in to the app, to keep you signed in. It is essential for the Service to work and expires when you sign out, or at the latest 7 days after your last visit.

The app also saves the language you choose in your browser's storage. This preference stays on your device.

We use no advertising or audience-measurement cookies, and no third-party trackers. The site picks its language from your browser settings, without storing anything.

• Our team, only as needed for their work, and bound by professional secrecy (law 18-07, art. 40).
• Our hosting provider in Algeria, which acts on our behalf and on our instructions.
• Algerian authorities, only when the law requires it, and strictly within the limits of the request.

Your data is never sold, rented or used for advertising. If NotaDraft's business were transferred, your data could only pass to the new owner with the same safeguards, after the people concerned have been informed.

All data is hosted and processed in Algeria. We do not transfer any data abroad (law 18-07, art. 44).

We apply technical and organisational measures suited to the risks (law 18-07, art. 38), including:

• all communication with the Service is encrypted (HTTPS);
• passwords are stored in irreversibly encrypted form;
• each office's data is kept separate, and only its Users can access it;
• scans are deleted as soon as the act is generated;
• our team's access to the servers is limited to those who need it.

Law 18-07 gives you the following rights:

• Right to information: to know who processes your data, why, and who it is shared with (art. 32). That is what this page is for.
• Right of access: to get confirmation that we process your data, and a copy of it (art. 34).
• Right to rectification: to have inaccurate or wrongly processed data corrected, completed, erased or locked; we respond free of charge within 10 days (art. 35).
• Right to object: to object, on legitimate grounds, to the processing of your data, and at any time to its use for marketing (art. 36).
• Withdrawing consent: to withdraw at any time any consent you gave, for example for a demo request (art. 7).

To exercise these rights, write to contact@notadraft.com. We may ask you to prove your identity.

We do not send marketing emails or messages without your prior consent (law 18-07, art. 37). After a demo request, we only contact you about that request.

This policy follows changes in our processing and in the regulations. The version in force is the one published on this page; customer offices are informed by email of any significant change.

A question about your data or this policy? Write to us at contact@notadraft.com.