Privacy Policy

Indari, available at www.indari.net, is operated by Legal Vision LLC FZ. That company is the data controller within the meaning of Moroccan law no. 09-08 on the protection of individuals with regard to the processing of personal data.

For any question about your data, write to contact@indari.net.

If you read only one paragraph, read this one:

• We collect your contact details, the other party's, your description of the situation, the documents you upload and the details confirmed on our call.
• We use them to prepare your formal notice, have it served by a commissaire judiciaire and keep you informed — nothing else.
• Your data is hosted in the European Union (Ireland), in a private database and private file storage.
• We do not sell or rent your data, and we run no advertising or analytics.
• You can ask us at any time to access, correct or delete your data.

We collect only what the service requires:

• You (the claimant): title, first and last name, email address, phone number, postal address, postcode and city.
• The other party: the same categories, provided to us by you.
• Your situation: the summary and description you write, plus the details confirmed on the call and used in the notice (contract, amounts claimed, periods, commitment not kept). Please don't include sensitive data (health, religion, opinions) that isn't strictly necessary.
• Identity documents: the copies you upload for yourself and, if you have them (this is optional), for the other party (national ID card, passport or driving licence), along with the document type you select.
• The notice and its service: the document prepared for your request and the proof of service issued by the commissaire judiciaire.
• Tracking your request: the history of its steps (payment, call, handover to the commissaire judiciaire, service) and of the emails sent to you.
• Payment: payments are handled by Stripe. We keep the payment method, status, amount and a transaction reference — never your full card number.
• Technical data: our hosts' logs (IP address, timestamp, page requested), kept for 12 months for security purposes. Your IP address is also used temporarily to rate-limit abusive form submissions.
• Staff accounts: the email address and sign-in data of team members authorised to access cases.
• Proof of acceptance: the date and time you accepted the terms and the privacy policy, the version of those documents and, if you uploaded the other party's documents, your confirmation regarding them.

Each purpose rests on a specific legal basis:

• Preparing your formal notice and having it served: performance of the contract you enter into when you choose a plan.
• Processing the other party's data and, where provided, documents: our legitimate interest and yours in asserting a right — the formal notice is the step that comes before any court action. You provide this data: you must have a legitimate reason to hold it and must inform the other party (see section 5).
• Taking payment and invoicing: performance of the contract, then compliance with accounting and tax obligations.
• Keeping the platform secure and preventing abuse: our legitimate interest.
• Responding to a request from a competent authority: compliance with a legal obligation.
• Passing the commissaire judiciaire what is needed to serve the notice, and keeping you informed by phone and email: performance of the contract.

If a formal notice is addressed to you through Indari, we may hold your name, contact details, details of the contract and of the amounts or commitments claimed and, where provided, a copy of an identity document concerning you. Those items were provided by the claimant, in the context of your dealings with them, and are passed to the commissaire judiciaire instructed to serve the notice on you.

You have the same rights as anyone else: access, correction, objection and deletion. Write to contact@indari.net with your name and, if you know it, the name of the owner concerned; we will reply within thirty (30) days.

Some requests may be limited where keeping the documents remains necessary to establish, exercise or defend a legal claim. If that applies, we will explain why.

Access is limited to those who genuinely need it:

• Authorised members of our team, whose account explicitly carries an administrator role.
• Supabase, which hosts the database and the document storage (Ireland, European Union).
• Vercel, which hosts the application and keeps technical logs (Ireland, European Union).
• Stripe, to process payments.
• Spacemail (Spaceship), to send messages related to your case.
• The partner commissaire judiciaire who signs and serves the notice, who receives the claimant's and the other party's data needed to serve it, and only for your request.
• Competent authorities, where required by law or by judicial request.

Your data is stored on servers located in Ireland, within the European Union. Our team accesses it from Morocco in order to handle your case.

The CNDP recognises, by deliberation, that certain countries provide an adequate level of protection for personal data; Ireland is among them. The transfer and hosting are covered by the declaration filed with the CNDP.

A case is kept for as long as it is being handled, then for 5 years from its closure, so that we can evidence the service provided and answer any complaint.

When a case is deleted, the deletion covers both the database records (your information, the opposing party's, the document references) and the files themselves in storage.

Technical logs are kept for 12 months. Billing data is kept for the period required by accounting and tax rules.

We apply technical and organisational measures proportionate to the sensitivity of what you entrust to us:

• Traffic to and from the site is encrypted (HTTPS).
• Documents are placed in private storage: they are never reachable from a public address.
• Viewing them goes through short-lived signed links (one hour), generated on demand server-side.
• Access to the admin area is restricted to accounts carrying an administrator role; simply being signed in is not enough.
• Keys granting broad access are used server-side only and are never sent to the browser.
• The database is not publicly exposed and row-level access rules are enabled.

If a data breach likely to affect your rights occurred, we would contain it, notify the CNDP as required by the applicable rules and, where the risk warrants it, inform you directly, describing the data concerned and the measures taken.

Under law 09-08 you have the right to access your data, to have it corrected, to object on legitimate grounds, and to have it deleted under the conditions set by law.

To exercise them, write to contact@indari.net from the email address used when you submitted your case, or attach proof of identity if we cannot otherwise identify you. We respond within thirty (30) days.

If you believe your rights are not being respected, you may lodge a complaint with the CNDP, based in Rabat.

Many of our customers are Moroccans living abroad. If you reside in the European Union, the General Data Protection Regulation (GDPR) applies to you, and in addition to the rights above you have the right to restriction of processing, to data portability, to object to processing based on our legitimate interest, and to withdraw your consent where processing relies on it.

You may also lodge a complaint with the data protection authority of your country of residence.

We use no advertising cookies, no analytics tools and no third-party trackers. Only two strictly necessary cookies are set:

• A language cookie, remembering the language you chose for the site (twelve months).
• Session cookies, only in the admin area reserved for our team, to keep them signed in.
• You can block them in your browser; the site will still work, but your language choice won't be remembered.

The service is intended for adults only. We do not knowingly collect data concerning minors.

No decision producing legal effects concerning you is taken automatically: every case is reviewed by a member of our team. We carry out no profiling.

This policy may change as the service changes. The last-updated date appears at the top of the page (version of 2026-09-22). If we make a substantial change, we will inform people whose case is in progress.

Any questions: contact@indari.net.