This policy explains what information AOMS (operated by Maati Tech Private Limited, "we") handles, why, where it is kept, how long, and what you can ask us to do with it. It covers the website aoms.pk, the AOMS web application, the client portal (aoms.pk/client) and the AOMS Android app.
1. Two roles: our data and your office's data
Account data (who signs up, billing, support) is ours to look after; we decide how it is used. Office data — your clients, cases, hearings, documents, invoices, staff records — belongs to your office. We store and process it only to run AOMS for you, on your instructions. Your office is responsible for having a lawful basis to keep its clients' information and for what it enters.
2. What we collect
- Account: name, email, phone, office name and address, bar registration details you choose to add, password (stored only as a one-way hash), optional two-factor settings.
- Office data you enter: client names and contact details (including CNIC if you enter it), case details, hearing records and proceedings, documents you upload, billing records, staff and attendance records.
- Client portal: a client's email address and the one-time sign-in links and 6-digit codes sent to it (stored only as hashes).
- Payments: plan, amount, transaction reference, payer name/account and the receipt image you upload. We do not receive or store card numbers.
- Security and usage records: sign-in times, IP address, browser/device type, and a log of important actions (for example exports, deletions, permission changes).
- Support: messages and attachments you send us.
- Android app: a push-notification token; on the free plan, Google AdMob may use the advertising ID — see section 6.
3. Why we use it
- To provide AOMS: show your records, send hearing reminders and notifications, generate PDFs and invoices.
- To keep accounts secure: sign-in checks, lockouts, alerts about unusual exports or deletions, investigating incidents.
- To bill and verify subscription payments.
- To answer support requests and send service emails (password resets, payment confirmations, important changes).
- To meet legal obligations and to protect against fraud and abuse.
We do not sell personal information, and we do not use office data to advertise to anyone.
4. Who can see office data
- Your office: only signed-in users of your office, each limited by the permissions the office gives them (for example, client contact details can be hidden from some staff).
- Your clients: only through the client portal, and only their own cases, the proceedings you mark visible, documents you choose to share and invoices you have sent.
- Other offices: never. Every record is tied to one office and checked on every request.
- AOMS staff: only when needed to support you or keep the service running, under confidentiality. Support access to an office is logged.
5. Where data is kept and service providers
AOMS runs on a dedicated server we manage, located in a data centre in the European Union (France). Encrypted backup copies are also kept on separate storage under our control. We use these providers, each only for its stated purpose:
- Hosting: our server provider (data centre, power, network).
- Email delivery: Google (Gmail), to send service and client-update emails.
- Push notifications: Google Firebase Cloud Messaging (Android app) — receives a device token and the notification text.
- Advertising (Android app, free plan only): Google AdMob, after your consent choice — see section 6.
The AOMS legal research and drafting assistant runs on models hosted on our own infrastructure; your questions and documents are not sent to outside AI companies.
6. Advertising and analytics
The Android app shows a small advertisement only to offices on the free plan, served by Google AdMob. On first use you are asked for consent; you can change it later in the app. Paid plans have no advertisements. The website can use analytics or advertising scripts only after you accept optional cookies in the cookie banner; see the Cookie Policy.
7. How long we keep data
See the Data Retention & Deletion Policy for the full table. In short: office data is kept while the office account is active; when an office closes its account, everything is deleted after a 30-day grace period, and backup copies expire within 90 days after that.
8. Security
HTTPS everywhere, hashed passwords, optional two-factor authentication (mandatory for our administrators), private document storage, per-office isolation, permission checks, a tamper-evident audit trail, encrypted backups, and monitoring with alerts. Details: Security. No system is perfectly secure; if a breach affects your data we will tell the affected office without undue delay, with what we know and what we are doing about it.
9. Your choices and rights
- See and correct your account details in your profile.
- Export your office's records (CSV exports in each module).
- Close your account (office owner: Account → Delete office), or ask us to delete a personal account.
- Ask what personal information we hold about you, or ask us to correct or delete it, by writing to [email protected]. If the information belongs to an office (for example you are a client of an advocate), we will pass your request to that office, because the office decides about its own records.
10. Children
AOMS is for legal professionals and is not directed at children. Offices may hold minors' information as part of a case; that is the office's responsibility.
11. Changes
When this policy changes in a way that matters, we update the date above and tell office owners by email or in the app before the change takes effect.
12. Contact
Maati Tech Private Limited · [email protected] · [registered address — to be added]