Privacy Policy

SSAMAI Hub ("SSAMAI", "we", "our", or "us") provides a software-as-a-service platform designed for syndics de copropriété and property management companies operating in Morocco and beyond. This Privacy Policy explains what information we collect when you use our website, applications, and related services (collectively, the "Services"), how we use that information, and the rights you have over it.

We respect your privacy. SSAMAI Hub never sells your personal data, and we do not share it with advertisers. We process data strictly to operate, secure, and improve the Services, and to comply with our legal obligations.

• Provide, maintain, and secure the Services and your workspace.
• Authenticate users, enforce permissions, and prevent fraud or abuse.
• Process subscriptions, invoices, and trial-related notifications.
• Power features such as maintenance tracking, AI-assisted drafting, document management, and reports.
• Communicate operational updates, security notices, and changes to terms.
• Comply with legal obligations and respond to lawful requests.

We do not use your workspace content (such as documents, owner data, or AI prompts) to train third-party general-purpose AI models.

SSAMAI Hub offers optional Google Workspace integrations covering Gmail, Google Drive, and Google Calendar. These integrations are entirely user-initiated.

• Authorization required. Google data is accessed only after you explicitly grant consent through Google's OAuth screen.
• Scopes are minimal. We request the narrowest scopes needed: sending email on your behalf, reading and creating Drive files you select, and managing calendar events you create through SSAMAI.
• Tokens are encrypted. Refresh and access tokens are encrypted at rest using AES-GCM and are accessible only to authorized server processes.
• No selling, no advertising, no training. Data obtained through Google APIs is used only to provide user-facing features. We do not sell it, use it for advertising, or use it to train AI models.
• Disconnect anytime. You can revoke access at any time from the Integrations page in SSAMAI Hub or from your Google Account security settings.

SSAMAI Hub's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google Maps Platform APIs (Maps, Geocoding, and Places) to display locations and help you find contractors near your buildings. Use of Google Maps is subject to the Google Privacy Policy and Google Maps/Earth Additional Terms of Service. SSAMAI provides its own Google Maps API key — users are not required to connect their personal Google account to use map features.

Subscription billing is handled by Stripe, Inc. We do not store credit card numbers, CVCs, or full payment details on SSAMAI servers. When you subscribe, you are redirected to a secure Stripe-hosted checkout page. SSAMAI stores only non-sensitive billing metadata (Stripe customer ID, subscription status, plan, invoice references). Stripe's processing of payment information is governed by the Stripe Privacy Policy.

If you choose to connect WhatsApp Business, SSAMAI uses the Meta Cloud API to send transactional messages such as maintenance updates and announcements, on your behalf and within your messaging templates. Credentials are stored encrypted and used only to deliver your messages. Use of WhatsApp is also governed by Meta's privacy and platform policies.

The optional Calendly integration allows your scheduled meetings to sync into SSAMAI Hub. We receive event metadata (titles, attendees, times) for events you authorize, and we never access events outside your authorized account. You may disconnect Calendly at any time.

We use a small number of strictly necessary cookies to keep you signed in, remember your language preference, and protect against fraud. We may also use privacy-friendly analytics to understand aggregate usage. We do not use advertising cookies or cross-site tracking.

• All data is transmitted over TLS 1.2+.
• Data at rest is encrypted using industry-standard AES-256 encryption.
• OAuth tokens and integration credentials are additionally encrypted using AES-GCM.
• Row-Level Security (RLS) enforces strict workspace isolation in our database.
• Access to production systems is restricted, logged, and protected by multi-factor authentication.
• We perform regular backups, security reviews, and dependency scans.

We retain workspace data for as long as your account is active. If you cancel your subscription, your data remains available in read-only form for 30 days, then is permanently deleted from production systems within 90 days, except where law requires longer retention (for example, invoices for accounting purposes). You may request earlier deletion at any time.

SSAMAI Hub relies on the following sub-processors to deliver the Services:

• Cloudflare — edge hosting and DDoS protection.
• Supabase — database, authentication, and storage infrastructure.
• Stripe — subscription billing and payment processing.
• Google — Workspace integrations and Maps Platform (only when used).
• Meta — WhatsApp Business Cloud API (only when connected).
• Calendly — meeting scheduling (only when connected).
• Email delivery providers — for transactional emails sent from notify.ssamai.ca.

You have the right to access, correct, export, or delete your personal data. You may also object to or restrict certain processing activities and withdraw consent for optional features. To exercise these rights, contact us at contact@ssamaihub.com. We respond to verified requests within 30 days.

For users in the European Economic Area, the United Kingdom, and Switzerland, SSAMAI Hub acts as a data processor for workspace content uploaded by your organization, and as a data controller for account and billing data. Our legal bases for processing include the performance of a contract (providing the Services), legitimate interests (securing and improving the product), legal obligations, and your consent (for optional integrations and communications). You have the right to lodge a complaint with a supervisory authority.

We may update this Privacy Policy as our Services and applicable laws evolve. Material changes will be communicated by email or through an in-app notice at least 30 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

For any privacy-related question or request, contact our team:

• Email: contact@ssamaihub.com
• General contact: contact@ssamaihub.com
• Postal: SSAMAI Hub — Casablanca, Morocco