Privacy Policy

Jurisava provides subscription software to law firms. A law firm is our customer. When a firm uses Jurisava, we hold information about that firm and about the firm’s clients on the firm’s behalf, and we act on the firm’s instructions about it.

Account information about your firm: your name, your firm’s name, your work email address, your role, and the security records that keep your account safe — sign-in and session activity, and the IP address a session came from. Those records also support the audit trail that shows who did what on a matter.

Your matter content: what your firm puts into the product — matters, court dates and deadlines, documents, and messages. Where a firm puts information about its own clients into Jurisava, that information is part of this.

• to provide the service your firm has signed up to;
• to keep accounts secure, and to record who did what on a matter;
• to support you when you ask us something, and to fix problems;
• to bill your firm and keep the accounting records we are required to keep;
• to tell you about changes to the service, or about your account.

We do not use your firm’s matter content for advertising, and we do not use it to train anything.

Inside your firm: your own users, according to the role your firm gave them. A client account sees only that client’s own matter, and nothing belonging to anyone else. A document stays invisible to a client until an attorney shares it. A staff account sees only the matters it is assigned to.

Inside Jurisava: the people who need it to run and support the service. We do not sell your information, and we do not share it for anyone else’s advertising.

Your firm’s information is held in a managed Postgres database hosted in the United States (currently Neon). Connections between your browser and Jurisava, and between Jurisava and that database, are encrypted in transit using TLS.

Access to that database is through a restricted account that can read the information it needs and add to the audit trail, but cannot alter or delete audit records. The audit trail is append-only in the database itself, not just in the application.

To be direct: Jurisava holds no security or compliance certification today, and we do not claim one — not SOC 2, not HIPAA, not bar-compliance certification.

Card payments are processed by Stripe. Your card details go to Stripe and not to us — we never receive or store a full card number. We hold the billing records Stripe gives us: the amounts, the dates, and the last four digits of the card.

• the provider of the managed database where your firm's information is held (currently Neon, in the United States);
• Stripe, for card payments;
• the provider that delivers the account emails Jurisava sends — invitations, verification and password resets.

These companies process information only so the service can run. We will add a provider to this list before it holds anything.

We keep your firm’s information while your account is open. If your firm closes its account, we delete the firm’s information, apart from billing records we are required to keep for accounting and tax.

Account closure is handled by our team on request today — email us and we will confirm when your firm’s information has been deleted. There is no self-service delete button yet.

• ask what we hold about your firm, and who has seen a matter;
• ask us to correct something that is wrong;
• ask us to close your account and delete your firm's information;
• ask how access to a matter was controlled.

Write to us at the address below. We aim to reply within one business day.

The firm decides what is held about you, and we act on the firm’s instructions. So if you want your information corrected or removed, please ask the firm first. You can also write to us and we will pass your request to the firm.

Jurisava is in early access, and no real client data has been onboarded yet: the product runs on fictional sample data, and we ask visitors not to enter real client information. When that changes, this policy is the one that will apply, and we will tell firms before it does.

We may update this policy; the date at the top shows the version you are reading. If we make a material change we will tell firms before it takes effect.

Email jurisava-c4ed5f24@ctomail.io for anything about privacy, your data, or this policy.