1. Data controller

The platform available at tunisie-avocat.com and app.tunisie-avocat.com (the "Platform") is operated for the internal management of a law firm (the "Firm"), which acts as the controller of personal data.

Design, technical hosting and maintenance: Facto Digital. For any question about your data or this policy, you may write to contact@tunisie-avocat.com.

2. Data we collect

We process the following categories of data:

• Account data: last name, first name, email address, phone number, password (stored only in encrypted/hashed form, never in plain text).
• Data related to the Firm's activity: cases, parties, uploaded documents, calendar events, internal notes and messages — entered by the Firm and its authorised users.
• Technical data: connection logs, session identifier, and data strictly necessary for the operation and security of the service.

3. Purposes of processing

Your data is used exclusively to:

• Provide the service: authentication, management of cases, documents, calendar and the Firm's billing.
• Ensure the security of the Platform (prevention of unauthorised access, traceability).
• Send you, where applicable, notifications relating to your case or your account.

4. Legal basis and professional confidentiality

Processing is based on the performance of the relationship between the Firm and its clients/collaborators, on consent where it is required, and on the Firm's legitimate interest in managing its activity.

Case-related data is covered by the lawyer's professional secrecy and is accessible only to authorised persons within the Firm, under strict partitioning by role and by case.

5. Use of Google APIs (calendar synchronisation)

The Platform offers an optional feature to synchronise with Google Calendar. When you enable it, you authorise access to your Google calendar in order to create and keep up to date the Firm's events (hearings, appointments, deadlines).

The Platform's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

In concrete terms: data from Google Calendar is used solely to provide this synchronisation feature; it is never sold, never used for advertising purposes, and never transferred to third parties beyond what is strictly necessary for the operation of the service or required by law. You may revoke this access at any time from the security settings of your Google account, or by contacting us.

Read the Google API Services User Data Policy

6. Cookies

The Platform uses only necessary technical cookies (in particular a session cookie to keep you securely logged in). No advertising cookies or third-party trackers for profiling purposes are used.

7. Data sharing

Your data is neither sold nor rented. It may be processed by technical providers acting on our behalf and subject to confidentiality obligations:

• Infrastructure host (server located in the European Union).
• Transactional email delivery provider.
• Google, only if you enable calendar synchronisation.

8. Security

We implement appropriate technical and organisational measures: encryption of communications (HTTPS), hashed passwords (bcrypt), access partitioning by role, logging, regular backups and restricted database access. As no system is infallible, we undertake to respond without delay in the event of an incident.

9. Retention period

Data is kept for as long as necessary for the purposes described and to comply with the Firm's legal obligations (in particular accounting and case-archiving requirements). Beyond that, it is deleted or anonymised.

10. Your rights

In accordance with Tunisian Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data, you have the right to access, rectify, object to and delete your data.

To exercise these rights, write to contact@tunisie-avocat.com. You may also refer the matter to the National Authority for the Protection of Personal Data (INPDP).

11. Changes

This policy may be updated to reflect legal or technical developments. The version in force is the one published on this page.