AutiCircle Logo
Trust & Privacy

Privacy Policy

This policy explains how AUTICIRCLE collects, uses, protects, and governs personal data across the autism support ecosystem.

Version 1.0
1

1. Preamble

Welcome to AUTICIRCLE, the collaborative platform dedicated to the autism ecosystem.

AUTICIRCLE connects parents and families, specialized professionals, specialized centers, associations, educational institutions, and providers of autism-adapted products and services.

The protection of your personal data is an absolute priority. This policy explains which data we collect, why we collect it, how we use it, how we protect it, and what rights you have over it.

2

2. Data Controller

  • AUTICIRCLE
  • Published by: NextOctet SARL
  • Email: contact@auticircle.com
  • Support: contact@auticircle.com
  • Website: auticircle.com
3

3. Legal Framework

AUTICIRCLE is committed to complying with the General Data Protection Regulation (GDPR), Moroccan Law 09-08 on personal data protection, CNDP requirements, and international information security standards.

4

4. Data We Collect

4.1 Account information

  • Full name
  • Email address
  • Phone number
  • Country
  • City
  • Preferred language
  • Encrypted password

4.2 Profile information

  • For parents: family situation, general information about the child, interests, and search preferences
  • For professionals: profession, degrees, certifications, specializations, business address, authorization number, and professional experience

4.3 Payment data

  • Transaction history
  • Invoices
  • Subscriptions
  • AUTICIRCLE never stores full bank card numbers
  • Payments are processed by PCI-DSS certified specialized providers
5

5. Sensitive Autism-Related Data

AUTICIRCLE may host sensitive information only when necessary and with the user’s consent. These data benefit from enhanced protection.

  • Autism diagnosis
  • Psychological assessments
  • Speech therapy reports
  • Psychomotor assessments
  • Educational plans
  • Medical reports
  • Therapeutic progress notes
  • Support goals
6

6. Data Collected Automatically

  • IP address
  • Device type
  • Operating system
  • Browser
  • Date and time of login
  • Visited pages
  • Session duration
  • Security logs
7

7. Cookies and Similar Technologies

Essential cookies

  • Secure login
  • Session management
  • Fraud protection

Functional cookies

  • Saving preferences
  • Chosen language
  • User settings

Analytics cookies

  • Audience measurement
  • User experience improvement
  • Performance analysis
8

8. Processing Purposes

Account management

  • Account creation
  • Authentication
  • Security

Connecting users

  • Professional search
  • Appointment booking
  • Internal messaging

Marketplace

  • Orders
  • Billing
  • Delivery

Resources

  • Content downloads
  • Personalized recommendations

Customer support

  • Assistance
  • Complaints
  • Dispute resolution

Security

  • Fraud detection
  • User protection
  • Access control
9

9. Artificial Intelligence

AUTICIRCLE may use artificial intelligence to recommend suitable resources, facilitate searches, translate content, classify documents, and assist users.

Important decisions are never taken exclusively by AI, and AI never replaces the judgment of a qualified professional.

10

10. Legal Basis for Processing

Consent

  • Newsletter
  • Marketing notifications
  • Content publication

Contract performance

  • Account management
  • Bookings
  • Payments

Legitimate interest

  • Security
  • Fraud prevention
  • Service improvement

Legal obligations

  • Billing
  • Accounting
  • Administrative requests
11

11. Data Sharing

AUTICIRCLE never sells personal data.

Data may be shared only with authorized professionals within the framework of a request initiated by the parent, with technical providers for hosting, payment, SMS, email, and backup, or with competent authorities when the law requires it.

12

12. Data Hosting

Data may be hosted in Morocco, in the European Union, or in GDPR-compliant data centers. Selected providers are required to maintain high security standards.

13

13. Security Measures

Technical security

  • SSL/TLS encryption
  • Sensitive data encryption
  • Firewalls
  • Automatic backups
  • Intrusion detection
  • Continuous monitoring

Organizational security

  • Strict access management
  • Action logging
  • Team training
  • Confidentiality procedures
14

14. Retention Period

  • Active account: retained for the full duration of use
  • Deleted account: deleted or anonymized within 12 months unless legal obligations apply
  • Billing data: retained in accordance with applicable tax and accounting requirements
  • Security logs: retained for a maximum of 24 months
15

15. User Rights

  • Right of access: obtain a copy of your data
  • Right of rectification: correct inaccurate information
  • Right to erasure: request deletion of your data
  • Right to restriction: limit certain processing
  • Right to object: refuse certain processing
  • Right to portability: receive your data in a usable format
  • Withdrawal of consent at any time when processing is based on consent
16

16. Child Protection

AUTICIRCLE pays particular attention to protecting data relating to children.

Information concerning a child may be provided only by a parent, legal representative, or duly authorized person. AUTICIRCLE never knowingly collects data directly from children without parental authorization.

17

17. Private Messaging

Messages exchanged between parents, professionals, associations, and specialized centers are considered confidential.

AUTICIRCLE does not access message content except in case of legal obligation, abuse reporting, or a threat to safety.

18

18. Reporting and Safety

AUTICIRCLE may immediately suspend the accounts concerned when necessary to protect users and the platform.

  • Fake profiles
  • Harassment
  • Scams
  • Dangerous content
  • Medical misinformation
19

19. International Data Transfers

When data are transferred outside Morocco or the European Union, appropriate contractual safeguards are implemented and GDPR and Law 09-08 requirements are respected.

20

20. Data Breaches

If a breach is likely to affect users, AUTICIRCLE immediately analyzes the incident, informs competent authorities when required, informs affected users when necessary, and implements appropriate corrective measures.

21

21. Policy Changes

AUTICIRCLE may modify this Privacy Policy to comply with legal developments, add new features, or strengthen security. Users will be informed of significant changes.

22

22. Contact and Complaints

For any question relating to your personal data, contact AUTICIRCLE at contact@auticircle.com or contact@auticircle.com.

You may also lodge a complaint with the competent data protection authority in your country.

By using AUTICIRCLE, you acknowledge that you have read and understood this Privacy Policy together with the platform Terms of Use.