سياسة الخصوصية وأمن البيانات

Introduction & Scope

Welcome to the "Mohami Pro" platform. We understand the paramount importance of privacy and confidentiality in the legal profession. We are committed to protecting the privacy of law firms in Iraq by strictly respecting the confidentiality of all data types. Our platform adheres to the best approved technical and organizational practices in information security. This policy outlines how we collect, use, and protect information when you use our practice management system. Using our services constitutes implied consent to this policy.

1. Information We Collect

Mohami Pro operates on a principle of data minimization:

• Account Data (Basic): Includes name, email, phone number, and professional details (like Bar Association ID) necessary to create and manage your account.
• Technical & Operational Data (Non-Personal): For organizational purposes and system improvement, we collect anonymized technical data such as masked IP addresses, browser types, and service activation dates. This strictly excludes client or case data.
• Legal Practice Data (Sensitive): All data you input into the system (case management, client details, uploaded documents, and memos).

2. Data Ownership & Strict Technical Isolation

You own your data completely. Mohami Pro claims no ownership rights over the legal data you enter.

To ensure maximum privacy, every law firm's data is stored in a technically and logically isolated environment using advanced database technologies and independent storage paths. This guarantees complete isolation and prevents data crossover between different accounts under any circumstances.

3. Respect for Professional Secrecy & No Monitoring

We pledge that Mohami Pro does not, in any way, monitor, review, or analyze the legal or professional text content you input (case details, memos, etc.). Any technical interaction with the data is strictly limited to automated processing necessary to operate the system (such as search indexing requested by the user).

4. How We Use Collected Data

We use data exclusively to:

• Operate system functionalities (session scheduling, archiving, accounting).
• Secure your account and verify your identity.
• Detect technical errors and provide requested technical support.

We pledge never to sell, rent, or share your data or your clients' data with any third parties for marketing purposes.

5. Zero-Access Policy for Employees

No employee or engineer at Mohami Pro has the right to view, browse, or directly transfer any inputted legal data belonging to your firm. In exceptional technical support cases requiring access, this will only occur following explicit, written consent from the account owner, and strictly within the scope of the specific technical issue.

6. Responsibility for Internal Access & Permissions

The primary user (Firm Manager) bears full responsibility for configuring permissions and access levels within their account for employees or assistant lawyers. The user also bears responsibility for any misuse or data leakage resulting from sharing login credentials outside approved security procedures.

7. Data Security & Storage

We implement advanced security measures including encryption in transit (TLS/SSL) and at rest utilizing the reliable cloud infrastructure. We also deploy firewalls and security algorithms to protect data from unauthorized access or loss.

8. Third-Party Services & External Links

When activating additional services via the system that rely on third parties (such as Wayl payment gateways or Nodemailer), Mohami Pro's role is limited to providing the technical integration. Your data passed to them is subject to their respective privacy policies, and we bear no responsibility for its processing once transferred at your request.

9. Government & Judicial Requests

Should we receive an official request from a competent authority, the company commits to providing only the legal minimum required, pursuant to a final, binding court order in the Republic of Iraq, while making all possible efforts to notify the user in advance if legally permissible.

10. Limitation of Liability & Governing Language

Any potential liability of Mohami Pro – if any – is limited strictly to the subscription value paid during the last subscription period, and excludes any indirect or consequential damages. If this policy is translated into other languages, the Arabic version is the binding legal reference in the event of any interpretational conflict.

11. Data Protection Agreement (DPA)

This agreement is an integral part of the Privacy Policy and regulates the relationship between the Law Firm (User) and the "Mohami Pro" platform regarding data processing:

• Roles of the Parties: The Law Firm (User) is the "Data Controller", while "Mohami Pro" acts strictly as the "Data Processor" to the extent necessary to provide the service.
• Processing Instructions: We commit to processing data exclusively based on your automated instructions through system usage, without any independent or additional use.
• Confidentiality & Security Measures: We are committed to maintaining strict confidentiality and implementing robust technical and organizational measures (e.g., encryption and isolation) to protect data from unauthorized access or loss.
• Sub-processors: The user agrees that Mohami Pro may use secure cloud infrastructure providers, ensuring they adhere to a level of protection no less than this agreement.
• Incident Notification: In the event of a material security breach, we commit to notifying you within a reasonable time after becoming aware of the incident, providing details and necessary support.
• Termination & Deletion: Upon terminating the use of the system, we commit to deleting and destroying your data according to approved technical procedures, except for temporary encrypted backups that are automatically deleted within their standard cycles.

12. Limits of Reliance on the App & User Responsibility

Mohami Pro is provided as an assistive technical tool for organizing law firms and managing data. It is in no way a substitute for the lawyer's professional or legal judgment. The user bears full responsibility for the accuracy, legality, and validity of the data and content they input. Our platform assumes no liability for any professional or legal decisions, actions, or outcomes taken by the user based on the system or its outputs.

13. Service Interruption & Force Majeure

We strive to ensure continuous service availability; however, the service may be temporarily suspended or interrupted for routine maintenance or necessary technical updates. Furthermore, the platform bears no responsibility for any delay or failure in providing the service due to "Force Majeure" events beyond our reasonable control (e.g., natural disasters, widespread internet outages, cyberattacks, or cloud infrastructure failures).

14. Data Loss & Backups

The company is not liable for data loss resulting from the user deleting the data themselves (whether intentionally or accidentally) or due to system misuse. Please note that upon deleting data or terminating an account, some records may remain in encrypted backups for a strictly limited technical protection period. These are unavailable for processing and are automatically completely destroyed according to our automated deletion schedules.

15. How to Request Account and Data Deletion

You have the right to request the deletion of your account and all associated data at any time. To do so:

• Send an email to: support@mohami.pro from your registered email address.
• Use the subject line: "Account Deletion Request".
• Data that will be deleted: Your profile information will be permanently deleted, along with all cases, clients, sessions, and uploaded files associated with your account within 3-5 business days.
• Data retained: We may retain payment and billing records for a longer period strictly for tax and legal compliance purposes.

16. Compliance with International Cloud Security Best Practices

At Mohami Pro, we rely on cloud infrastructure and security practices that align with internationally recognized standards for information security management and privacy risk management (such as the principles of ISO/IEC 27001). Although we apply strict professional and technical measures to minimize risks, the user acknowledges that no internet-connected technical system can be 100% secure.

17. Severability

If any provision of this Privacy Policy is deemed unenforceable or void by a judicial ruling or applicable law, this shall not affect the validity of the remaining provisions, which shall remain in full force and effect.

18. Google Calendar Sync (Optional Integration)

Mohami Pro offers an optional feature to connect your Google Calendar account to sync legal sessions and appointments between the app and Google Calendar.

• Data we access: When you enable sync, we request Google OAuth permissions to access your Google Calendar (view and edit calendar events) to create, update, and remove session and appointment events you manage in Mohami Pro.
• Purpose of use: Sync court sessions and professional appointments only — to avoid scheduling conflicts and improve time management. We do not use Google Calendar data for advertising or analytics.
• How data is stored: Access tokens and refresh tokens are stored securely on our servers (Supabase database) linked to your account only. We never store your Google password.
• Data sharing: We do not sell or share your Google Calendar data with third parties for marketing. Processing is limited strictly to providing the sync feature within Mohami Pro.
• Disconnecting: You can disconnect Google Calendar at any time from the dashboard using the "Disconnect" button, which removes access tokens from our system and stops future sync.
• Google policies: Your use of Google Calendar integration is also subject to the Google Privacy Policy and Google Terms of Service.

19. Contact Us

Mohami Pro is a product operated by COREAPPS LTD. For any inquiries regarding our privacy and data security policy, please contact our support team via email: info@mohamipro.com