Terms of Use

1. Acceptance of Terms

1.1 These Terms of Use ("Terms") constitute a legally binding agreement between you ("you," "Customer," "Licensee") and Almaqar Information Technology Company ("Almaqar," "we," "us," "our"), as the exclusive owner and licensor of the "Haseef Legal Office Management System" ("Platform").

1.2 By subscribing to, using, or installing the Platform, you expressly acknowledge that you have read, understood, and agreed to be bound by these Terms in full, together with the Privacy Policy, Cookie Policy, and Security and Data Protection Policy, all of which constitute an integral and inseparable part of this Agreement and shall be read together as a single instrument.

1.3 If you accept this Agreement on behalf of a law firm, a law company, a corporate legal department, or any other legal entity, you represent and warrant that you possess the full legal authority and capacity to bind such entity to these Terms. In the event that you lack such authority, or do not agree to these Terms, you must immediately refrain from accepting them and from using the Platform.

1.4 These Terms apply to all users of the Platform without exception, including administrators, lawyers, employees, accountants, and any other person granted access to the Customer's Installation.

1.5 The Customer acknowledges that it is entering into this Agreement in its professional capacity and for the purpose of conducting its commercial or professional activities, and not as a consumer, and that it possesses or has obtained the legal and technical expertise necessary to understand the implications of this Agreement prior to accepting it.

1.5.1 The Customer acknowledges that it reviewed these Terms a sufficient time before entering into the Agreement, and was afforded a genuine and adequate opportunity to read, understand, and seek legal counsel regarding them before acceptance.

1.5.2 The Customer further acknowledges that, prior to entering into the Agreement, it had the right to request discussion of any of its terms, to propose amendments, or to request a special contractual addendum or bespoke services or terms pursuant to a written agreement and separate fees, whether Almaqar accepted or rejected such request at its commercial discretion.

1.5.3 Both Parties acknowledge that this Agreement was entered into freely and with full knowledge, following a balancing of commercial interests and risks, and that the Customer's acceptance was voluntary and without any coercion, misrepresentation, or exploitation.

1.5.4 The Customer further acknowledges that it had complete freedom not to subscribe to the Platform or to choose any alternative system or service provider, and that its acceptance of this Agreement followed its independent evaluation of the Platform's features and commercial terms.

1.5.5 In light of the foregoing, the Parties agree that this Agreement is not intended to be a contract of adhesion, and no provision herein may be construed as such, to the extent permitted by applicable law.

2. Definitions

In the application of this Agreement, the following words and phrases shall have the meanings ascribed to them below, unless the context otherwise requires:

• "Platform" or "Haseef System": The Haseef Legal Office Management System software application, including the Source Code, Object Code, databases, file storage systems, Application Programming Interfaces (APIs), interfaces, algorithms, documentation, and associated technical equipment owned by Almaqar Information Technology Company.
• "Installation" (Instance): A logically isolated and independent copy of the Platform designated for a single Customer, comprising its own dedicated application instance, dedicated database, an independent file storage system, independent application configuration, independent encryption keys, and independent session management, operating on professionally managed cloud infrastructure operated by Almaqar Information Technology Company.
• "Customer" or "Licensee": The law firm, civil law company, or corporate or institutional legal department that has been licensed to use the Platform and operate an Installation.
• "Administrator" (Admin): The person or persons designated and authorized by the Customer to manage its Installation, including user management, role and permission assignment, system configuration, and technical integration.
• "Customer Data": All data, documents, files, correspondence, case records, client information, evidence, notes, appointments, billing records, and any other materials uploaded, created, entered, or managed by the Customer or its users within the Installation.
• "Encryption Key": The digital encryption key based on the Advanced Encryption Standard (AES-256), which is generated automatically for each Installation and managed automatically within its isolated operating environment, used to encrypt uploaded files at rest.
• "Services": The software usage license, Platform provisioning and hosting, provision of software updates and security patches, and technical support delivered under these Terms.
• "Infrastructure": The cloud servers, networks, storage units, hardware, and foundational software upon which Installations are hosted, and which are leased, owned, or operated by Almaqar Information Technology Company.
• "Authorized Users": Natural persons to whom the Administrator has granted access to the Customer's Installation, including the Customer's employees, lawyers, contractors, and agents.
• "Subscription Term": The period during which the Customer is authorized to access and use the Platform, as specified in the order form or electronic purchase confirmation.

3. Platform Architecture and Data Ownership

3.1 Single-Instance Architecture and Dedicated Application Instance per Customer

3.1.1 The Platform is provided as a cloud-hosted service for multiple independent law firms and legal organizations. The Platform is technically designed on the basis of a single-instance architecture; each Customer receives a dedicated application instance, allocated for the exclusive use of that Customer. Each deployment operates independently from every other Customer deployment, and no application instance is shared between Customers. Customer data is never stored in shared databases. Almaqar Information Technology Company manages the infrastructure, while each Customer retains full ownership of its own data.

3.1.2 Each Customer deployment independently comprises:

• (a) An isolated database dedicated exclusively to that Customer.
• (b) A file storage space that is separate from and logically isolated from all other Customers' deployments.
• (c) Independent application configuration, independent environment variables, independent encryption keys, and independent authentication sessions.
• (d) A software-isolated operating environment running on professionally managed cloud infrastructure.
• (e) Independent backup, update, and maintenance processes performed per Customer deployment.

3.1.3 Customer databases are never shared or merged; Customer data is never stored in shared databases. Each deployment's data is structurally and logically separate, and data cannot be queried, accessed, or shared across different Customer deployments through the application layer. No Customer can access another Customer's data through the Platform.

3.1.4 Almaqar Information Technology Company exclusively provides, manages, maintains, and updates the core Platform system, while updating each Customer's deployment individually to ensure continuity of isolation and security.

3.2 Domain and DNS Configuration

3.2.1 Each Installation is accessed and used via a dedicated domain or subdomain that is specified and configured during the initial setup phase.

3.2.2 If the Customer provides its own domain, Almaqar's role is limited to providing technical assistance in configuring DNS records to direct traffic to the hosted infrastructure. If the Customer does not have a domain, Almaqar may register a subdomain or independent domain on its behalf, subject to domain availability and applicable fees.

3.2.3 The Customer retains full intellectual property and legal ownership of its domain; Almaqar's management is limited to the DNS records operationally necessary for Platform operation and disconnection upon termination.

3.3 Data Ownership

3.3.1 The Customer retains all legal and intellectual property rights in its "Customer Data." Almaqar Information Technology Company does not claim, nor is it entitled to claim, any ownership of any portion of the Customer Data.

3.3.2 Almaqar Information Technology Company is strictly bound not to use or access the Customer Data for purposes of marketing, advertising, commercial analytics, behavioral profiling, statistical comparisons, proprietary product development, resale, or any other purpose outside the narrow and exclusive scope of providing the contracted technical services.

3.3.3 The Customer alone is directly responsible for the accuracy, quality, legality, and suitability of all data and files entered or uploaded to the Platform.

3.4 Data Controller and Data Processor Roles

3.4.1 The Parties acknowledge that the Customer is the Data Controller of all personal and professional data processed within the Installation; the Customer alone holds the authority to determine the purposes and means of processing data of its clients, employees, and any other parties.

3.4.2 Almaqar Information Technology Company acts as Data Processor under applicable data protection legislation (including, where applicable, the European Union General Data Protection Regulation "GDPR" and Libyan Law No. 6 of 2022 on Electronic Transactions) when processing personal data on behalf of the Customer and pursuant to its documented technical instructions. Almaqar's processing activities are exclusively limited to:

• (a) Hosting and maintaining the infrastructure technically.
• (b) Providing software updates and security patches to the Customer's Installation.
• (c) Performing routine backup operations and automatic recovery from technical disasters.
• (d) Comprehensive cybersecurity monitoring of the infrastructure and incident response.
• (e) Providing technical support when expressly and documentedly requested by the Customer.
• (f) Any other technical processing operations reasonably and directly necessary for the provision of services.

3.4.3 In the event that the Customer or the processed data is subject to legislation requiring the execution of an independent data processing agreement (such as Article 28 of the GDPR), Almaqar Information Technology Company shall provide a separate Data Processing Addendum (DPA) that complies with such requirements, available for the Customer to execute and be bound by as an integral part of this Agreement.

4. License Grant

4.1 Subject to the Customer's full and continuous compliance with these Terms and payment of all prescribed fees within the specified deadlines, Almaqar Information Technology Company grants the Customer a limited, non-exclusive, non-transferable, and revocable license to:

• (a) Use the Installation designated for the Customer to manage its operations and internal legal practice only.
• (b) Securely access the Installation through approved web browsers and authorized devices.
• (c) Create and manage Authorized Users' accounts within the Installation up to the licensed count.
• (d) Use the software tools and features available on the Platform (e.g., case management, client management, document archiving, billing, and reporting).

4.2 The Customer is absolutely prohibited from doing any of the following, and any such act shall constitute a material breach of the Agreement requiring immediate license revocation:

• (a) Modifying, adapting, translating, reverse engineering, decompiling, or attempting to extract the source code of the Platform, or creating derivative works therefrom.
• (b) Sublicensing, reselling, leasing, lending, or providing access to the Platform as a hosted Bureau Service to any unauthorized third party.
• (c) Using the Platform for any unlawful purpose, or any purpose contrary to public order and morals, or that violates any applicable laws.
• (d) Attempting to penetrate, probe, or test the security vulnerabilities of any other Customer's Installation, or attempting to access Almaqar's general infrastructure without written authorization.
• (e) Removing, altering, or obliterating any intellectual property notices, watermarks, or copyright notices belonging to the Platform.
• (f) Using the Platform or attempting to replicate its concepts for the purpose of developing a competing product or software system.

5. Intellectual Property Rights

5.1 Platform Ownership

The Platform in all its components, including source code, object code, interfaces, designs, trade names, trademarks, visual identity, logos, patents, and copyrights, remains the exclusive and original property of Almaqar Information Technology Company. These Terms do not result in the transfer of any ownership right or interest in the Platform to the Customer, except for the limited usage license expressly granted in Article 4.

5.2 Customer Data Ownership

The Customer retains all intellectual and legal property rights over its hosted data. Almaqar Information Technology Company acquires no license or right to use such data other than the limited technical license necessary for providing services and technical support.

5.3 Feedback and Suggestions

In the event that the Customer provides any feedback, development suggestions, or improvement requests for the Platform, it hereby grants Almaqar Information Technology Company a perpetual, free, irrevocable, and royalty-free license to use, implement, develop, and incorporate such suggestions into the Platform without any restrictions or material or moral obligations toward the Customer.

6. Eligibility and Legal Warranties

6.1 By accepting these Terms, the Customer represents and warrants to Almaqar Information Technology Company as follows:

• (a) It is a licensed and legitimate legal entity (a law firm, a civil law company, or a corporate legal department of an accredited institution) for the practice of legal business.
• (b) It possesses full legal capacity and administrative authority to enter into this Agreement and be bound by its effects.
• (c) It is not subject to any international or domestic sanctions, and is not listed on any embargo or boycott lists issued by the Government of the State of Libya.
• (d) All data and information provided to Almaqar for the purpose of registration and account creation is accurate, correct, current, and complete.
• (e) It is obligated to update its account information immediately upon any changes to ensure the accuracy of legal correspondence.
• (f) It is fully committed to complying with all applicable laws and regulations, including data protection legislation, professional ethics rules and customs of the legal profession, and obligations to maintain client confidentiality and privilege.

7. Administrator Responsibilities and Customer Obligations

7.1 The Administrator(s) designated by the Customer bear direct, exclusive, and sole responsibility for the internal governance of the Installation, which includes:

• (a) Creating, managing, and modifying user accounts within the Installation.
• (b) Designating and configuring roles and permissions (Administrator, Lawyer, Staff, Accountant) in accordance with its organizational structure.
• (c) Configuring internal system settings, data retention or deletion policies, and backup schedules.
• (d) Securing and protecting its administrative login credentials, and taking precautionary measures to prevent their leakage.
• (e) Continuously verifying that only Authorized Users possess access to the system.
• (f) Immediately revoking access for any employee or individual whose employment with the firm has ended or whose authorization has been withdrawn.
• (g) Monitoring internal audit logs and tracking user activities within the Installation to ensure integrity of operations.
• (h) Fully complying with all legal, ethical, and regulatory obligations relating to attorney-client privilege and professional correspondence confidentiality.
• (i) Establishing the lawful legal basis and obtaining all necessary explicit consents from data subjects (clients, opposing parties, employees) for the entry of their personal data into the system, as required by data protection laws.
• (j) Responding individually and legally to data subject requests (e.g., access, rectification, deletion, or portability requests) without any liability on Almaqar Information Technology Company.

7.2 The Customer acknowledges that Almaqar Information Technology Company does not intervene in, assume, or possess any authority or administrative control over user accounts, role distribution, or permission grants within the Installation; the Customer alone bears the legal and professional consequences arising from mismanagement of internal permissions.

8. User Roles and Permissions

8.1 The Platform technically supports configurable multiple roles (e.g., Administrator, Lawyer, Staff, Accountant). The Administrator holds absolute authority to designate and modify what each role may view or modify.

8.2 Almaqar Information Technology Company does not create or modify default role settings for the Customer, and it does not view or monitor role distribution within any active Customer Installation during normal operation or routine support activities. Any exceptional access, where required, is strictly limited to authorized technical, security, maintenance, legal, or Customer-approved circumstances and is performed in accordance with the Company's security policies and access control procedures.

8.3 The Customer is obligated to apply the "Principle of Least Privilege" and to ensure that each Authorized User is granted permissions commensurate exclusively with their actual job duties, to prevent internal data leakage.

9. Client Portal

9.1 The Client Portal is an additional and optional feature that enables the Customer (firm) to share specific read-only documents or updates with its external clients.

9.2 The Client Portal is disabled by default and may be under development or unavailable in certain Platform versions.

9.3 If this Portal is activated by the Administrator, the Customer bears full and sole responsibility for the nature, quality, and sensitivity of the data and documents shared through it, and for verifying the identity of external clients granted this access, in compliance with applicable data protection obligations.

10. Encryption, Key Management, and Scope of Technical Protection

10.1 File Encryption and Database Scope

10.1.1 The Platform applies encryption at rest to files and documents uploaded by the Customer as attachments (e.g., case documents, archive files, identity documents). These files are fully encrypted using the Advanced Encryption Standard (AES-256).

10.1.2 Transparency and protection scope of the database: Structured and textual data entered through the Platform's digital forms (e.g., client names, case details and dates, written note texts, invoice data, and structured records) is stored in the Installation's dedicated database in plain text form (not encrypted at the application level), in order to enable fast search, sorting, and reporting features. This structured data is protected through database server security controls, infrastructure cyber-hardening, and Transport Layer Security (TLS) encryption during data transmission.

10.2 Encryption Key Management and Employee Permissions

10.2.1 A unique encryption key is assigned to each Installation and is stored and managed securely and protected within the application's configuration and environment settings dedicated to the Customer (outside the public web-accessible directory). The key is made available through the application layer solely for performing legitimate operations (e.g., displaying and downloading files).

10.2.2 Almaqar Information Technology Company manages and secures the infrastructure for storing encryption keys as part of its core Platform operations, and these operations are subject to strict confidentiality protocols and limited access controls.

10.2.3 Almaqar Information Technology Company shall not access or use encryption keys except in cases of utmost technical necessity and strictly for the purposes of: structural maintenance, security updates, critical error diagnosis, or upon the Customer's express and documented technical support request.

10.2.4 Almaqar Information Technology Company personnel do not read or access the contents of uploaded and encrypted customer files and documents during normal operation or routine support activities, and such contents are protected using AES-256 encryption. Access by technical support and technical management employees during routine operations is limited to unencrypted text data in the database, strictly within the narrow confines required by routine technical support and system maintenance operations. Any exceptional access to encrypted files, where required, is strictly limited to authorized technical, security, maintenance, legal, or Customer-approved circumstances (such as Customer-authorized technical support, security incident response, disaster recovery, or compliance with applicable laws or valid legal orders), and is performed in accordance with the Company's security policies and access control procedures, including the principle of least privilege, documented operational need, and audit logging.

10.3 Customer Responsibility Regarding Account Security

10.3.1 The Customer is obligated to maintain the confidentiality of its and its employees' login credentials (username, password, and two-factor authentication tokens), and bears full responsibility for any unauthorized use of its Installation resulting from failure to protect these credentials.

10.3.2 Almaqar Information Technology Company is obligated to provide the necessary technical support to reset permissions or restore account access upon an official and documented request from the authorized administration of the subscribing law firm.

10.4 Customer Acknowledgment of the Scope of Technical Protection

The Customer expressly acknowledges, understands, and agrees to the following technical limitations as a fundamental condition for the grant of the license:

• (a) AES-256 encryption applies exclusively to files and documents uploaded as attachments and does not extend to textual and structured data stored in the database's programmatic tables.
• (b) The system automatically and transparently decrypts files upon request by an Authorized User with access privileges through the application, or by the technical support team pursuant to the Customer's documented request to diagnose a technical problem.
• (c) Almaqar's infrastructure engineers authorized for maintenance and operational security purposes possess, by virtue of the nature of server and database management, the technical capability to access the servers hosting databases and files, and such access is governed by strict confidentiality obligations, access tracking controls set forth in these Terms, and server logs.
• (d) The Customer's choice of the type of data it enters, and the sensitivity of the files it uploads, constitutes the foundational cornerstone of the comprehensive security framework for its data.

11. Third-Party Service Integration (e.g., Google Drive)

11.1 The feature of linking and integrating the Platform with cloud storage services (Google Drive) is an entirely optional feature subject to the Administrator's preference and configuration. In the event of activation:

• (a) Files uploaded to Google Drive are encrypted.
• (b) Google Drive is an independent platform operated by a third-party company (Google LLC), and Almaqar Information Technology Company has no affiliation with its software or security.
• (c) The Customer alone bears responsibility for securing its Google account, password integrity, and compliance with Google's Terms of Service.
• (d) Almaqar Information Technology Company has no access to, storage of, or visibility into the Customer's Google account login credentials, nor any responsibility for data stored therein.
• (e) The Customer's use of such storage is subject to the privacy policies and terms of service imposed by Google.

11.2 Almaqar Information Technology Company provides no warranties of any kind regarding the continued availability of the Google Drive service, its technical reliability, or its security integrity against breaches, and this applies to any integration with other third-party services (e.g., WhatsApp Business).

12. Technical Support and Company Access Permissions

12.1 Authorized Support Channels

12.1.1 Technical and IT support is provided exclusively through the official email: [email protected], and no correspondence through unofficial channels shall be recognized unless the Company has expressly announced their authorization.

12.2 Application-Level Access for Support Purposes

12.2.1 To resolve technical issues that arise within the Platform interfaces and application layer, the Customer is obligated to provide the support team with:

• (a) Temporary access authorization or creation of a limited-privilege support account by the Administrator.
• (b) Express written authorization (via email) specifying the scope of the issue and authorizing inspection.

12.3 Infrastructure-Level Access

12.3.1 For deep structural issues (e.g., server configurations, database corruption repair, or core file system maintenance), Almaqar's engineers have the right to direct access to the infrastructure and servers owned and operated by the Company that host the Installations.

12.3.2 Almaqar Information Technology Company is obligated not to access the infrastructure or database level except in cases of operational technical necessity (e.g., comprehensive upgrades, routine maintenance, security vulnerability patching, critical incident recovery, or upon the Customer's express support request), and all such access operations shall be documented and recorded by the Company in platform or server logs.

12.3.3 Almaqar Information Technology Company makes commercially reasonable efforts to prioritize application-level solutions first to minimize any unnecessary data exposure.

12.4 Support Limitations and Controls

12.4.1 When the Customer provides access authorization to the support team:

• (a) Access is strictly limited to diagnosing and resolving the specific reported technical issue.
• (b) Almaqar's employees are prohibited from browsing, copying, exporting, or retaining Customer data beyond the requirements of the technical resolution.
• (c) The Administrator must cancel the temporary support account or change passwords immediately upon notification that the issue has been resolved.
• (d) All support account activities are recorded in the Platform's audit logs to ensure transparency.

12.5 Support Scope Exclusions

12.5.1 Almaqar Information Technology Company's technical support obligation is limited to the Platform's code and its own infrastructure, and in no event shall support include:

• (a) Repair of Customer-owned software, operating systems, networks, or integrations not provided by Almaqar Information Technology Company.
• (b) On-site (field) technical support at the Customer's premises, unless a separate contract provides otherwise.
• (c) Provision of any legal, accounting, or regulatory advisory services; all Platform features are assistive tools and do not relieve the lawyer of professional responsibility.
• (d) Performing software customization for a specific firm except pursuant to a separate written financial contractual addendum.

13. Acceptable Use Policy

13.1 The Customer is fully obligated to use the Platform only for lawful and authorized purposes, and in compliance with:

• (a) All applicable local, regional, and international laws and regulations in force in the State of Libya and the Customer's place of practice.
• (b) Codes of conduct, ethics, and customs of the legal profession as practiced at the bar association or in the Customer's jurisdiction.
• (c) The terms of this Agreement and its annexed policies.

13.2 The Customer, its users, and those granted access are absolutely prohibited from performing any of the following acts:

• (a) Uploading, storing, or publishing any materials or documents that violate the law, constitute an information crime, or involve defamation, libel, threats, obscene material, or harassment.
• (b) Using the Platform as a vessel for storing or transmitting malicious software, viruses, Trojan horses, or harmful code.
• (c) Attempting to circumvent security features, firewalls, access permission restrictions, or scanning systems for vulnerabilities without written authorization.
• (d) Exceeding the maximum number of authorized subscribers and those licensed to pay their fees, or tampering with the billing system.
• (e) Sharing or leaking encryption keys or administrative passwords to unauthorized external parties.

13.3 Almaqar Information Technology Company reserves its absolute right to suspend or terminate access to the Platform immediately, temporarily or permanently, in the event of a material breach of the Acceptable Use terms by the Customer, with written notification of the reasons for suspension, except in critical cases that pose an imminent threat to infrastructure security or other Customers' data; in such cases, suspension shall occur immediately and without prior notice until the threat has been eliminated.

14. Shared Security Responsibilities

14.1 Almaqar's Security Obligations

14.1.1 Almaqar Information Technology Company is obligated to employ standard technical efforts to secure and protect the Platform and infrastructure through the implementation of appropriate security, administrative, and organizational measures, including:

• (a) Providing a complete logical and software isolation framework for each Customer's database and files (dedicated application instance under a single-instance architecture).
• (b) Server hardening and periodic operating system updates in accordance with the latest security practices.
• (c) Operating network firewalls, intrusion detection and prevention systems, and implementing protection measures against Denial-of-Service (DDoS) attacks, and strictly limiting access to server control panels and securing database environments.
• (d) Providing and renewing Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for all Installations to secure data in transit to and from the browser.
• (e) Periodic Platform inspection and remediation of critical software vulnerabilities (in compliance with the OWASP Top Ten standards).
• (f) Performing periodic backups of all server contents for a duration of five (5) consecutive days only, for general emergency and disaster recovery purposes, and the Company assumes no responsibility for restoring any files or data deleted or damaged outside this timeframe.

14.1.2 In the event of a confirmed security incident resulting in a personal data breach (Data Breach) affecting the Customer's data, Almaqar Information Technology Company is obligated to notify the affected Customer without undue delay (within the periods prescribed by law) and to provide the essential information available to assist it in complying with its legal obligations toward its bar association or data subjects.

14.2 Customer Security Obligations

14.2.1 The Customer bears full and direct responsibility for the security of its side of the system, which includes:

• (a) Maintaining strict confidentiality of login credentials, user accounts, and encryption keys.
• (b) Requiring all its users to set strong passwords and to activate multi-factor authentication (MFA) without exception.
• (c) Conducting periodic reviews of employee account permissions and immediately disabling inactive accounts.
• (d) Recognizing and understanding the technical nature of the Platform (full encryption of uploaded files, and non-encryption of database text data at the application level), and making sound administrative decisions regarding the type and volume of data entered on that basis.
• (e) Establishing and implementing local and firm-specific backup policies for important documents as an additional defensive measure.
• (f) Immediately reporting to Almaqar through the authorized security channels ([email protected]) upon suspecting any unusual activity or intrusion attempt on its account.
• (g) Securing the devices and local networks used by its employees to access the Platform, and continuously updating their browsers and operating systems.

15. Service Continuity, Maintenance, and Limitation of Warranty

15.1 Almaqar Information Technology Company makes commercially reasonable efforts to ensure the Platform's availability and operation at high uptime around the clock; however, the Company does not guarantee, nor is it technically possible to guarantee, that the Platform will operate continuously without any interruption, or be entirely free of minor software defects (Bugs).

15.2 The Customer acknowledges that the Platform may be temporarily unavailable in the following cases:

• (a) Scheduled maintenance: For upgrade and development purposes, and the Company is obligated to notify the Customer in advance with a period of not less than twenty-four (24) hours, and to choose times outside peak working hours (e.g., weekends).
• (b) Emergency maintenance: To patch a discovered critical security vulnerability or replace defective server hardware, which may be performed immediately and without prior notice to protect the systems.
• (c) Infrastructure failures beyond control: Such as public power outages, damage to undersea internet cables, or local telecommunications network failures.
• (d) Cloud service provider outages: Service disruptions by the global companies hosting data centers.
• (e) Force majeure events (Article 24).

15.3 Almaqar Information Technology Company is obligated to make maximum technical efforts to minimize emergency downtime periods and to restore normal service operation as quickly as possible.

15.4 Almaqar Information Technology Company reserves the right to modify, upgrade, or replace sub-features within the Platform for the purpose of improving overall performance, and is obligated to notify Customers if such modification will materially affect customary workflow.

16. Financial Fees, Billing, and Payment Policy

16.1 License Fees and Due Dates

16.1.1 Usage license fees, the adopted billing cycle (monthly/annual), and package values are determined based on what is agreed upon in the order form or invoice issued at the time of purchase.

16.1.2 All stated fees are net in favor of Almaqar Information Technology Company and do not include any local taxes, customs duties, stamps, or bank transfer fees; the Customer alone bears the payment of these taxes and fees to the relevant authorities, unless applicable law expressly provides otherwise.

16.3 Late Payment and Service Suspension

16.3.1 In the event of the Customer's failure to pay fees due on their payment date, the Company grants the Customer a grace period of seven (7) business days. In the event that payment remains outstanding after the grace period expires and a written electronic warning has been issued, Almaqar Information Technology Company reserves the right to temporarily suspend access to the Installation.

16.3.2 The Installation and all its data remain fully preserved and intact during the suspension period resulting from non-payment, and full access is restored immediately and automatically upon the Customer's settlement of the financial obligations and payment of overdue amounts.

16.4 Price Modifications

16.4.1 Almaqar Information Technology Company reserves the right to modify its package prices and license fees, and is obligated to notify the Customer in writing of any pricing adjustment at least thirty (30) days prior to the end of its current subscription period. The new price shall not take effect until the subscription is renewed for the following period; the Customer has the right to refuse the adjustment by not renewing the subscription and withdrawing.

16.5 No-Refund Policy

16.5.1 In view of the fact that the service is provided as digital software available for immediate use, all fees paid by the Customer are deemed final and non-refundable, whether the Platform was used partially or not at all, unless mandatory applicable law provides otherwise or it is proven that a material technical defect prevented the delivery of the service and the Company was unable to remedy it.

17. Artificial Intelligence Tools and Features (AI Features)

17.1 The Platform may include optional features supported by artificial intelligence and machine learning technologies to assist lawyers (e.g., text summarization, legal research assistance, or keyword extraction from documents).

17.2 The Customer expressly acknowledges and understands that outputs and results generated by artificial intelligence tools are indicative and advisory outputs provided solely as a digital assistant; they do not constitute professional legal advice under any circumstances. Almaqar Information Technology Company is not a law firm and does not practice law.

17.3 The Customer acknowledges that artificial intelligence models may be subject to technical errors, drafting shortcomings, or what is technically known as "hallucinations." The lawyer or Authorized User bears full, sole, and personal professional, legal, and ethical responsibility for reviewing, verifying, and confirming the accuracy and reliability of any text or summary produced by these tools before relying on it in cases or presenting it to courts.

17.4 Almaqar Information Technology Company endeavors to process artificial intelligence data locally and within the Customer's isolated Installation environment, and in the event that external processors (APIs) are required, the Company is obligated not to transmit any identifying data or sensitive files without prior configuration and the express consent of the Administrator.

17.5 Almaqar Information Technology Company disclaims all absolute legal liability, to the maximum extent permitted by law, for any damages, losses, incorrect decisions, or missed deadlines resulting from the Customer's direct reliance on artificial intelligence feature outputs without human review.

18. Absolute Confidentiality and Professional Obligations

18.1 Confidentiality of Customer Data and Documents

18.1.1 Almaqar Information Technology Company acknowledges the highly sensitive and confidential nature of the Customer's data (the law firm), and treats it as information protected by "professional privilege" and the attorney-client correspondence confidentiality.

18.1.2 Almaqar Information Technology Company is obligated to implement strict operational controls and contractual obligations imposed on its employees to prevent the disclosure or leakage of any portion of the Customer's data.

18.1.3 Almaqar Information Technology Company is obligated not to disclose the Customer's data or make it available to any third party, in whole or in part, except in the following exclusive cases:

• (a) The issuance of a binding judicial order, or an enforceable official decision by a competent legal authority in the State of Libya requiring disclosure; in such case, the Company is obligated to notify the Customer immediately and in advance (unless prevented by law from doing so) to enable it to take legal measures to protect its secrets.
• (b) Almaqar's employees and contractors who are bound by confidentiality and conflict-of-interest avoidance agreements, and whose purely technical tasks (such as critical support and upgrades) require server access within narrow need-to-know boundaries.
• (c) The existence of an express, formal, written authorization issued by the Customer permitting access or transfer.

18.2 Confidentiality of Platform and Company Information

18.2.1 The Customer is strictly obligated to treat all non-public technical information relating to the Platform, including its source code, interface designs, algorithms, infrastructure architecture, encryption methods, proprietary pricing, and security documentation, as trade and technical secrets exclusively owned by Almaqar Information Technology Company. The Customer is prohibited from disclosing, publishing, or enabling others to access such information without prior written consent of the Company.

19. Disclaimer of Legal Liability (Disclaimer)

19.1 To the maximum extent permitted by Libyan law and applicable laws, the Platform and all related services provided by Almaqar Information Technology Company are offered on an "as is" and "as available" basis, without warranties of any kind, express or implied, including — by way of example and not limitation — implied warranties of merchantability, fitness for a particular commercial or professional purpose, uninterrupted continuity, freedom from ordinary software defects, accuracy of statistical results, or non-infringement of third-party rights.

19.2 Almaqar Information Technology Company provides no undertaking or warranty that:

• (a) The Platform meets all personal expectations or highly specific requirements of the Customer's operations.
• (b) The system operates without interruption, or is fast at all times regardless of the Customer's internet quality.
• (c) Billing outputs or calculations are exempt from the need for human accounting review.
• (d) Servers are isolated from all types of emerging global cybersecurity threats (Zero-Day vulnerabilities) despite the adoption of all standard defensive measures.

19.3 The Platform is an organizational assistive software tool for office management, and does not provide legal advice, and cannot nor may it replace the human judgment, judicial expertise, and professional discretion of the practicing lawyer who is subject to legal liability.

20. Limitation of Legal Liability (Limitation of Liability)

20.1 Exclusion of Indirect and Consequential Damages: To the maximum extent permitted by applicable law, Almaqar Information Technology Company, its directors, officers, employees, partners, or suppliers shall under no circumstances bear legal liability for any indirect, consequential, special, incidental, or punitive damages, or losses arising from lost profits, lost revenue, reputational harm, loss of data or clients, business interruption, or loss of alternative opportunities, arising out of or related to the use or inability to use the Platform, whether the claim is based on contract, tort (including negligence), breach of warranty, or any other legal theory, even if Almaqar has been advised of the possibility of such damages.

20.2 Aggregate Liability Cap: Subject to what is set forth in Article 20.1, the total aggregate legal and financial liability of Almaqar Information Technology Company to the Customer for all claims, actions, and compensation arising from or related to these Terms (whether contractual or tortious) shall not exceed, in cumulative total, the lesser of the following amounts:

• (a) The total amounts and fees actually paid by the Customer to Almaqar for the Platform license during the twelve (12) months immediately preceding the date of the event giving rise to the claim.
• (b) The value of subscription fees for the last billing cycle (monthly or annual) paid by the Customer.

20.3 Exceptions to Liability Limits: The limitations and liability caps set forth in Articles 20.1 and 20.2 shall not apply in the following exclusive cases:

• (a) Fulfillment of express indemnification obligations under Article 22.
• (b) Breach by either Party of the confidentiality obligations set forth in Article 18.
• (c) Intentional infringement of the other Party's intellectual property rights.
• (d) Damages directly and demonstrably resulting from gross negligence by Almaqar Information Technology Company or its willful misconduct proven by a final and binding judicial judgment.

21. Assumption of Operational Risks by the Customer

21.1 The Customer expressly acknowledges and agrees to the allocation of the following operational risks as a fundamental element of the contractual balance of this Agreement:

• (a) Professional practice decisions: Office management and adherence to legal deadlines for filing cases or submitting appeals is the Customer's exclusive and sole responsibility. Almaqar Information Technology Company assumes no responsibility for missed deadlines, case dismissals, or loss of litigation resulting from user negligence in entering alerts or blind reliance on the Platform without reviewing official court schedules.
• (b) Customization and integration choices: Activating features and integrating with third parties (e.g., linking the server to Google Drive or sending notifications via WhatsApp) is an operational choice for the Customer; the Company does not guarantee the integrity of data flow through those external companies' networks.
• (c) Granted permissions security: The firm bears responsibility for any internal data leakage or file deletion resulting from the Administrator granting broad permissions to unqualified employees or trainees, or resulting from failure to revoke permissions immediately upon their departure.
• (d) Loss of professional privilege: Almaqar Information Technology Company assumes no responsibility in the event that a lawyer is compelled to produce his data as a result of his local failure to protect his passwords or his disclosure of encryption keys.

22. Legal Indemnification and Protection (Indemnity)

22.1 The Customer agrees and binds itself to indemnify, protect, defend, and hold harmless Almaqar Information Technology Company, its directors, employees, and agents from and against any and all claims, actions, liabilities, damages, losses, costs, and expenses (including reasonable attorney's fees and litigation costs) arising out of or related to any of the following:

• (a) The Customer's or its users' use of the Platform in a manner that is unlawful or violates the Acceptable Use Policy (Article 13).
• (b) A third-party claim that "Customer Data" entered into the Platform infringes its intellectual property rights, privacy, or constitutes a breach of data protection laws.
• (c) The Customer's failure to obtain the necessary explicit and lawful consents from data subjects (clients and employees) before entering their records into the system.
• (d) The Customer's failure to protect and secure encryption keys or administrative passwords, resulting in a breach of its Installation.
• (e) Any professional, financial, or contractual disputes arising between the firm and its external clients relating to data or services managed through the Platform.
• (f) The Customer or its users introducing malicious software or viruses that harmed the Company's infrastructure.

23. Term, Renewal, and Termination

23.1 Agreement Term and Automatic Renewal

23.1.1 These Terms take effect and become binding upon purchase of the license and activation of the subscription, and continue for the duration of the initial Subscription Term. The subscription renews automatically for successive periods of equal length, unless either Party notifies the other in writing of its intention not to renew at least thirty (30) days prior to the end of the current subscription period.

23.2 Termination at Customer's Request

23.2.1 The Customer has the right to terminate the subscription at any time by submitting a written electronic notice to Almaqar Information Technology Company for a period of thirty (30) days. During this notice period:

• (a) The Customer is obligated to export and withdraw all its data and files hosted through the export tools available in the Platform.
• (b) Upon the actual termination date, Almaqar Information Technology Company shall permanently cancel the Installation, and delete and destroy all associated databases and files through complete technical destruction that is irreversible within a maximum period of thirty (30) days, in compliance with data security obligations.
• (c) The Customer has no right to claim a refund of any amounts or fees previously paid for the remaining period.

23.3 Termination by Almaqar Information Technology Company

23.3.1 Almaqar Information Technology Company reserves the right to terminate this Agreement immediately and with written notice in the following cases:

• (a) The Customer commits a material breach of any provision of these Terms and fails to remedy such breach within fifteen (15) days of receiving written notification thereof.
• (b) The Customer defaults on payment of fees due and the default continues for more than thirty (30) days from the payment due date.
• (c) The Customer becomes bankrupt, enters judicial liquidation, becomes insolvent, or an order is issued to suspend its professional practice.
• (d) A legislative enactment or governmental regulatory order is issued that prohibits the provision of the service or makes its continued provision unlawful.

23.3.2 In the event of termination by the Company (except in cases constituting a security breach or unlawful use that harms the systems), the Company shall grant the Customer a reasonable and specified grace period to export its data before final deletion.

23.4 Effect of Termination (Survival Clauses)

23.4.1 Upon expiration or termination of this Agreement for any reason:

• (a) All licenses and access rights granted to the Customer shall immediately lapse and expire.
• (b) The Customer and its users must immediately cease all attempts to access the Platform.
• (c) Provisions and articles that by their nature require continued effectiveness shall remain in force and effect between the Parties even after termination, including those relating to: (Data Controller and Processor roles 3.4), (Intellectual Property 5), (Confidentiality 18), (Disclaimer 19), (Limitation of Liability 20), (Indemnification 22), (Governing Law 25), and (General Provisions 26).

24. Force Majeure and Extraordinary Cybersecurity Incidents

24.1 Neither Party shall bear legal liability for any breach, delay, or failure to perform its obligations under these Terms (except for financial payment obligations for amounts actually due) if such failure results directly from circumstances or events beyond the reasonable control of the affected Party and that could not have been foreseen or prevented (force majeure events).

24.2 Force majeure under this Agreement includes — by way of example and not limitation: natural disasters, wars, terrorist acts, civil disturbances, government actions and embargoes, epidemics and public health emergencies, prolonged public power outages, national internet network failures, large-scale cyberattacks directed by advanced states or organizations, exploitation of globally unknown zero-day vulnerabilities (Zero-Day Attacks), spread of server ransomware despite the Company's compliance with standard protective measures, and global DNS server outages.

24.3 The affected Party shall make all commercially reasonable efforts to mitigate the effects of the force majeure event and to resume its contractual obligations immediately upon the cessation of the compelling circumstance.

24.4 If a force majeure event continues and prevents the performance of essential obligations for more than sixty (60) consecutive days, either Party may terminate the Agreement upon written notice without any additional liability or compensation being imposed on the other Party.

25. Governing Law and Dispute Resolution

25.1 Governing Law

These Terms are governed by, and their provisions shall be interpreted and applied in accordance with, the laws and legislation in force in the State of Libya.

25.2 Amicable and Judicial Dispute Resolution

25.2.1 In the event of any dispute, controversy, or claim arising out of or relating to these Terms, their interpretation, or their breach, the Parties shall first attempt to resolve the dispute amicably through direct good-faith negotiations for a period of not less than thirty (30) days from the date on which the affected Party notifies the other of the dispute in writing.

25.2.2 In the event that an amicable settlement cannot be reached within the aforementioned period, the dispute in its entirety shall be submitted exclusively to the jurisdiction of the competent courts of the city of Tripoli, State of Libya; and the Parties waive their right to challenge such jurisdiction.

25.3 Class Action Waiver

The Customer expressly agrees, to the maximum extent permitted by law, that any claims or actions shall be resolved individually and independently, and waives the right to bring or participate in any class, collective, or representative action against Almaqar Information Technology Company.

25.4 Injunctive Relief Measures

Notwithstanding what is set forth in Article 25.2, Almaqar Information Technology Company reserves the right to resort to any competent court on an urgent basis to seek a temporary injunction, conservatory measure, or emergency judgment to protect its intellectual property rights, trade secrets, or confidential information from any imminent or actual infringement.

26. General Provisions

26.1 Severability

If a competent court rules that any provision or article of these Terms is void, unlawful, or unenforceable, such voidness shall be limited to that provision exclusively and shall not affect the validity, enforceability, and continued effectiveness of the remaining provisions and articles, which shall remain in full legal force.

26.2 Entire Agreement and Amendments

These Terms, together with the Privacy Policy, the Cookie Policy, and the Security and Data Protection Policy incorporated herein, constitute the entire agreement and understanding between Almaqar Information Technology Company and the Customer regarding the "Haseef" system, and supersede all prior or contemporaneous agreements, understandings, correspondence, and representations, whether oral or written.

26.3 No Implied Waiver

The failure or delay by Almaqar Information Technology Company to exercise any right, power, or remedy under these Terms shall not constitute, nor shall it be construed as, a waiver of such right, and the partial exercise of any right shall not preclude its future exercise or the exercise of any other rights.

26.4 Prohibition on Assignment to Third Parties

The Customer may not assign its rights or obligations under these Terms to any third party without obtaining prior express written consent from Almaqar Information Technology Company. Conversely, Almaqar Information Technology Company may assign these Terms and obligations, in whole or in part, to third parties without the Customer's consent, in the context of merger, acquisition, corporate restructuring, or sale of company assets.

26.5 Formal Notices and Correspondence

26.5.1 Notices directed to the Customer are deemed legally effective and binding upon delivery to the Administrator's registered email address, or by publication as a visible administrative notice within the Installation's system.

26.5.2 Formal notices directed to Almaqar Information Technology Company shall be sent via email to: [email protected] or by registered mail with acknowledgment of receipt to the Company's headquarters: Almaqar Information Technology Company, Bab Ben Ghashir — Tripoli, State of Libya.

26.6 Nature of the Contractual Relationship

The Parties are independent contractors. This Agreement does not create, nor may it be construed as creating, a partnership, joint venture, commercial agency, franchise, or employment relationship between the Company and the Customer or its users. Neither Party has the authority to bind the other or to act on its behalf.

26.7 Language

These Terms are drafted in the Arabic language and may be translated into English for convenience purposes. In the event of any conflict or discrepancy in interpretation between the Arabic and English versions, the Arabic version shall have absolute evidentiary weight and priority of application before judicial authorities.

26.8 Amendments to the Terms

Almaqar Information Technology Company reserves its absolute right to amend and update these Terms and its policies from time to time. The Company is obligated to notify the Customer of any material amendments that may affect its rights at least thirty (30) days prior to their effective date, via the Administrator's email. The Customer's continued use of the Platform after the effective date of the amendments shall constitute express acceptance and acknowledgment of the amended Terms. In the event of rejection of the amendments, the Customer has the right to terminate the Agreement prior to their effective date in accordance with Article 23.

26.9 Third-Party Rights

The effects, obligations, and remedies arising from these Terms are limited to the two contracting Parties only (Almaqar Information Technology Company and the Customer), and these Terms do not grant, nor are they intended to grant, any rights, interests, or legal remedies to any external natural person or legal entity (third parties).

27. Official Contact Information

• Almaqar Information Technology Company
• Address: Bab Ben Ghashir — Tripoli, State of Libya
• General and Legal Department: [email protected]
• Technical Support Department: [email protected]
• Privacy Department: [email protected]
• Cybersecurity Department: [email protected]

Document Revision History

Version	Date	Description
1.0	January 1, 2025	Initial and foundational release of the Agreement.
2.0	July 11, 2026	Complete rewrite to reflect the dedicated application instance per Customer deployment architecture (Single-Instance Architecture).
3.0	29/07/2026	Comprehensive legal and linguistic review and rewrite; to adjust Data Processor obligations, establish absolute transparency on the scope of file and structured data encryption, incorporate Artificial Intelligence feature rules, and strengthen the Company's legal protection ceilings and liabilities in compliance with Libyan legislation and international standards (GDPR).