This Privacy Policy explains how we collect, use, process, and protect information when organizations and their users access or use our website and associated services ("Services").
Scope
This Privacy Policy applies to:
- Visitors of https://www.imza.dz
- Organizations subscribing to IMZA services
- End-users invited to access or sign documents via IMZA
Data We Process
Depending on usage, we may collect and process:
- Identification data (name, email, phone number)
- Professional information (organization name, role)
- Signature-related data
- IP addresses and related information on how customers use our services
- Audit trail and transaction metadata
- Uploaded documents
- Billing information
We process only the data necessary to provide our services. Our customers are responsible for ensuring that the data they provide to us is accurate and complete.
Purpose of Processing
We process data to:
- Provide and operate the digital signature platform
- Ensure regulatory compliance
- Maintain audit trails and transaction integrity
- Authenticate users
- Ensure system security and fraud prevention
- Improve platform performance
- Respond to inquiries and support requests
Data Hosting & Sovereignty
- IMZA SaaS infrastructure is hosted in Algeria. We do not transfer customer information outside Algeria.
- We implement technical and organizational security measures to protect data against unauthorized access, alteration, or loss.
Data Retention
Data is retained:
- According to contractual agreements with customer organizations
- In compliance with applicable legal and regulatory requirements
- For the duration necessary to maintain legal validity of signed documents
When a contract is terminated with a customer, we will securely delete your data, unless retention is required by law.
Security
IMZA implements security by design principles to ensure customer Personal Information is not accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.
- Encryption
- Strong authentication
- Access controls
- Audit logging
- Incident response
Access to customer data by our employees is restricted and monitored, with access granted only when necessary for the provision of Services, under strict confidentiality requirements.
Customers acknowledge and agree that they are responsible for the usage of their accounts and that we are not responsible for the functionality and security measures of any customer organization.
User Rights
Customers hold control over the personal information shared with us. Where applicable under Algerian law, individuals may request:
- Access to their personal data
- Correction of inaccurate information
- Deletion where legally permissible
Requests may be submitted to: privacy@a-tdd.net. We will respond in a timely manner.
Governing Law
This Privacy Policy and any access to or use of our Services will be governed by the laws of Algeria.
Changes to this Policy
We may update this Privacy Policy periodically. Updated versions will be published on our website https://www.imza.dz with an updated revision date. We will endeavour to notify our customers of significant changes in advance through the contact information provided to us.
Contact Us
If you have any questions about this Privacy Policy, please contact us: privacy@a-tdd.net