1. Scope of the public service
The integration lets a compatible third-party host request source retrieval from Moroccan legislation and Moroccan jurisprudence. It does not create a 9ANOUN account and it cannot access Data Room files, private documents, account data, VM inspection tools, write operations, French law, or OHADA and other non-Moroccan corpora.
2. Data processed
For one retrieval request, 9ANOUN may process:
- the legal query or bounded lookup arguments sent by the host, such as a code, article number, decision reference, language, or result limit;
- the Moroccan source metadata, canonical public page, public source identifier, and one stable public teaser of at most 240 characters returned to the host; the anonymous integration does not return any additional article text, decision text, or decision summaries; and
- technical request data used for access and security logging, which may include a timestamp, route, response status, IP address, and user-agent information.
Do not submit confidential client material, private documents, special-category personal data, or information that is unnecessary for a public legal-source search.
3. Transient processing and rate limiting
Query content is processed to retrieve sources and return the result. This public integration does not create a conversation record, Data Room item, or 9ANOUN query history. Query content and returned results are not used by 9ANOUN to train models.
To enforce abuse limits, the public gateway selects a validated client IP from the trusted hosting load-balancer forwarding suffix and derives a keyed HMAC rate-limit identifier. Untrusted forwarding prefixes are not used as the client identity. The gateway keeps its short request window in application memory. The backend stores only the derived HMAC identifier and its UTC minute and day counters in fixed, generation-guarded Cloud Storage shard objects; those rate-limit objects do not store the raw client IP, query text, or retrieval results. Prior-day client entries are discarded when their shard is next written on a later UTC day. The identifier is not a 9ANOUN account identifier and is not used as query history.
Infrastructure access and security logs are separate from those rate-limit counters. Their retention follows the active hosting and security configuration and is limited to what is necessary for service operation, abuse prevention, incident response, or legal obligations. Contact 9ANOUN for the currently applicable retention period.
4. Purposes and commercial use of data
9ANOUN processes the data only to perform the requested retrieval, protect and troubleshoot the public service, enforce its terms, respond to incidents, and meet legal obligations. 9ANOUN does not sell public-integration query data, use it for advertising, or use it to train general-purpose or legal AI models.
5. The third-party host
ChatGPT, Codex, or another compatible host receives what you enter and the results returned by 9ANOUN. That host processes and may retain those materials under its own privacy policy and account settings. 9ANOUN does not control host-side history or retention and cannot delete copies held by the host; direct those requests to the host provider.
9ANOUN also uses infrastructure providers to operate and secure the retrieval service. They process data on 9ANOUN's behalf under the applicable service and security arrangements.
6. Your rights and contact
Subject to applicable law, you may ask for access, correction, opposition, or deletion of personal data processed by 9ANOUN. Because this integration has no account or public query history, include enough technical context for us to locate any relevant security record without sending the original confidential query.
Contact saadfk@9anoun.ai. You may also submit a complaint to the Moroccan data-protection authority, the CNDP.
7. Changes to this notice
Material changes will be published at this stable URL with an updated effective date. Changes do not expand the integration into private or non-Moroccan data surfaces without a separate product and notice.