JAWEBNI
Controller and scope
JAWEBNI is operated by [IDENTITY OR COMPANY NAME TO BE COMPLETED] and can be contacted at jawebni.contact@gmail.com. This policy applies to visitors, registered professionals and customers using a business’s public assistant.
For account, subscription, security and support data, the JAWEBNI operator acts as controller. For appointment data, the business determines the purposes and acts as controller; JAWEBNI provides the technical service on its instructions.
Data processed
- Professional account: name, email, sign-in provider, business and role.
- Configuration: activity, address, phone, services, prices, staff, hours, absences and booking rules.
- Appointments: contact and beneficiary names, phone, optional email, service, staff member, date, time and status.
- Technical data: session, security logs, errors and abuse-prevention information.
- Subscription: plan, status, payment references and service history.
Purposes
Account and business data is used to provide the requested service. Appointment data supports availability, booking, rescheduling, cancellation and configured notifications. Subscription data supports contracts and payments; logs protect the service and prevent abuse.
JAWEBNI is not a medical device or professional advice tool. Do not enter sensitive data that is unnecessary for an appointment.
Availability and appointments
Availability is calculated from configured hours, breaks, absences and recorded appointments. Customers see only offered slots and public business information, never other customers’ appointments or data.
Recipients and providers
Access is limited to authorised business members, authorised JAWEBNI personnel and providers required for hosting, authentication, security, consented analytics and email. JAWEBNI does not sell personal data.
Retention and security
Data is retained as needed to operate the account and meet legal, security and dispute requirements. Backups are progressively removed according to their rotation cycle.
JAWEBNI uses server sessions, secure HttpOnly cookies in production, tenant access controls, CSRF protection, abuse controls, HTTPS and backups. No system can guarantee absolute security.
Cookies and rights
A session cookie is essential for sign-in and browser session storage may resume a public conversation. Consented analytics may also be used. You can reject, customise or withdraw your choice at any time.
Under applicable law, including Moroccan Law No. 09-08, you may request access, correction, objection, erasure or blocking. Contact jawebni.contact@gmail.com; proportionate identity verification may be required.
Updates
This policy may change with the service or regulations. The date shown above is the latest revision date. Important changes will be communicated appropriately.