Privacy Policy
Last Updated: January 14, 2026
1. Introduction
JuristOS ("we," "our," or "us") respects your privacy and is committed to protecting the personal and confidential information you share with us. This Privacy Policy explains how we collect, use, disclosure, and safeguard your information when you access our platform, website, and services (collectively, the "Service").
By using JuristOS, you consent to the data practices described in this policy. If you do not agree with the terms of this privacy policy, please do not access the Service.
2. Information We Collect
A. Personal Information
We collect information that identifies you as an individual or relates to an identifiable individual, including:
- Account Information: Name, email address, password hash (via our authentication provider), and organization name.
- Billing Information: Credit card details and billing address (processed securely by our payment processor; we do not store raw credit card numbers).
- Contact Information: Phone number or physical address if provided for support or billing.
B. Customer Data (User Content)
The core function of JuristOS is to process legal documents. We collect:
- Legal Documents: Contracts, agreements, dispute letters, and other files you upload for analysis.
- Playbooks & Templates: Custom legal rules, preferred clauses, and templates you configure.
- Communications: Emails forwarded to the Service for processing and metadata associated with them.
C. Usage & Technical Data
We automatically collect certain information when you visit, use, or navigate the Service:
- Log Data: IP address, browser type, operating system, referring URLs, and timestamps.
- Device Data: Information about the computer, phone, tablet, or other device you use to access the Service.
- Activity Data: Pages viewed, features used, and actions taken (e.g., "Contract Uploaded," "Clause Edited").
3. How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide, operate, and maintain JuristOS, including processing contracts via AI agents.
- AI Analysis: To generate summaries, redlines, risk assessments, and draft responses.
- Communication: To send you administrative information, such as security alerts, account updates, and contract notifications.
- Security & Compliance: To monitor for fraud, enforce our terms, and comply with legal obligations.
- Improvement: To analyze usage patterns and improve the user experience (e.g., identifying slow features).
4. AI & Data Privacy
JuristOS utilizes Large Language Models (LLMs) provided by third parties (e.g., OpenAI, Anthropic) to deliver its features.
- Zero Training Policy: We do not use your Customer Data (contracts, playbooks) to train our general foundation models. Your data remains yours.
- Data Isolation: Customer Data processed by AI is ephemeral where possible or stored with strict tenant isolation.
- Opt-In Fine-Tuning: Enterprise customers may choose to opt-in to fine-tune a private model on their specific data. This model is exclusive to that customer and is not shared.
- PII Redaction: We employ automated tools (e.g., Microsoft Presidio) to detect and redact Personally Identifiable Information (PII) before sending data to LLM providers where appropriate.
5. Disclosure of Your Information
We may share information we have collected about you in certain situations:
- Service Providers: We share data with third-party vendors who perform services for us, including:
- Cloud Hosting: AWS / Google Cloud
- Authentication: Clerk
- AI Providers: OpenAI, Anthropic (via API with zero-retention policies where applicable)
- Email Delivery: Resend
- Analytics & Error Logging: Sentry, PostHog
- Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
- Legal Requirements: We may disclose your information where required to do so by law or subpoena.
6. Data Security
We use administrative, technical, and physical security measures to help protect your personal information. These measures include:
- Encryption: Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
- Access Control: We use Row-Level Security (RLS) to ensure strict data isolation between tenants.
- Audit Logs: We maintain detailed logs of all system access and data modifications.
However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
7. Data Retention
We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
8. Your Data Rights
Depending on your location (e.g., EEA, UK, California), you may have certain rights regarding your personal information, including:
- The right to access, update, or delete the information we have on you.
- The right of rectification.
- The right to object.
- The right of restriction.
- The right to data portability.
- The right to withdraw consent.
To exercise these rights, please contact us at privacy@juristos.com.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- By email: privacy@juristos.com