Privacy Policy

1. Who we are

JuriClerk ("JuriClerk," "we," "us," or "our") operates the website at juriclerk.com and the related fact-pattern legal research service (the "Service"). For the purposes of the Data Privacy Act of 2012 (the "DPA"), JuriClerk is the Personal Information Controller of personal data you provide when using the Service.

Our Data Protection Officer can be reached at contact@juriclerk.com.

2. Information we collect

2.1 Account information

When you sign in with Google, we receive your name, email address, Google profile photo (if any), and the Firebase user identifier assigned to your account. If we require phone verification, we collect the mobile number you provide and the verification status from Firebase.

2.2 Information you submit

The fact patterns and queries you enter into the search, the cases you save into workspaces, the notes you add, and the feedback (thumbs up / down) you give to results.

2.3 Usage information

Pages visited, search counts, time spent on case details, and other interaction events. This data lets us improve the relevance of results and surface usage to you on the Usage page.

2.4 Technical information

IP address, user-agent string, approximate location (derived from IP), and timestamps. These are captured in  server logs for security and operations.

2.5 Billing information

When paid plans launch, payment details (card number, expiry, CVC) are entered directly into our payment processor's checkout and are not seen or stored by JuriClerk. We receive only a transaction identifier, the last four digits of the card, the amount, and the plan purchased.

2.6 Support communications

Emails, messages, and feedback you send us, together with our replies.

3. How we use your information

• To operate the Service and respond to your search requests.
• To authenticate you, enforce quota limits, and gate features by subscription tier.
• To improve the relevance, accuracy, and stability of the Service. We may analyse de-identified usage patterns; we do not use the substance of your queries to train third-party AI models.
• To send transactional emails (account verification, password reset, invite approvals, trial-ending reminders, billing receipts).
• To send service announcements and, with separate consent, occasional product updates. You can opt out of product updates at any time.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To comply with legal obligations and to respond to lawful requests from authorities.

4. Legal bases

We process personal data under the following lawful criteria of Section 12 of the DPA:

• Performance of a contract — to deliver the Service you signed up for and process billing.
• Legitimate interests — to secure our infrastructure, prevent abuse, and improve the Service in ways that don't override your rights.
• Consent — for non-essential communications (e.g., product updates) and for optional features that specifically request it.
• Legal obligation — where required by tax law, anti-money-laundering law, or a lawful order from competent authority.

5. Who we share information with

We share personal data only with sub-processors that help us run the Service, and only to the extent each one needs. Each sub-processor is bound by a written agreement to protect your data and to process it only on our instructions.

We do not sell, rent, or trade your personal data. We do not disclose your data to third parties for their own marketing purposes. We may disclose data when required by law, valid legal process, or to protect the rights, property, or safety of JuriClerk, our users, or the public.

6. International transfers

Several sub-processors listed above are located outside the Philippines. When we transfer your personal data across borders, we do so under Section 21 of the DPA, ensuring the recipient provides a comparable level of protection through contractual safeguards (such as data-processing agreements incorporating EU Standard Contractual Clauses or equivalent terms).

7. Retention

• Account data — kept while your account is active and for up to 30 days after you delete it, except where a longer period is required by law.
• Search history — kept according to your tier: FREE 7 days, STUDENT 14 days, SOLO 30 days. Saved cases inside a workspace persist for the life of the workspace.
• Server logs — kept for up to 90 days for security and operations.
• Billing records — kept for the period required by Philippine tax and accounting law (currently 10 years for books of account).

8. Security

We use commercially reasonable administrative, physical, and technical safeguards designed to protect your data, including:

• TLS encryption in transit for all traffic to and from the Service.
• Encryption at rest for databases and storage volumes.
• Identity and access controls limited to personnel who need them.
• Secret management through AWS Systems Manager Parameter Store.
• Regular dependency updates and vulnerability monitoring.

No system is perfectly secure. If we become aware of a personal data breach that is likely to give rise to a real risk of serious harm to you, we will notify you and the National Privacy Commission as required by NPC Circular No. 16-03.

9. Your rights under the Data Privacy Act

You have the right to:

• Be informed about how your data is being processed.
• Access the personal data we hold about you.
• Object to processing, including direct marketing.
• Correct or rectify inaccurate or outdated data.
• Erase or block data in the circumstances allowed by Section 16(e) of the DPA.
• Data portability — receive a structured, commonly used, electronic copy of your data.
• Lodge a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.
• Damages — be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your data.

To exercise any of these rights, email contact@juriclerk.com. We aim to respond within 15 working days and may ask you to verify your identity before acting.

10. Cookies and local storage

We use first-party cookies and browser local storage for essential functions only — keeping you signed in, remembering UI preferences (sidebar collapsed state, search history cache, dismissed banners), and protecting against abuse. We do not use third-party advertising cookies. We do not run cross-site trackers.

11. Children

The Service is intended for legal professionals and law students, and is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have, please contact us so we can delete it.

12. Changes to this Policy

We may update this Policy from time to time. If we make a material change, we will notify you by email or by a notice in the Service before the change takes effect. The "Last updated" date at the top reflects the current version.

13. Contact us

Questions, concerns, or requests under this Policy: contact@juriclerk.com.