Privacy Policy

1. Information We Collect

1.1 Account Information

When you register for Jurist Diction, we collect:

• Name, email address, and phone number
• Firm name and size
• Bar membership information
• Billing and payment information
• Professional credentials and licenses

1.2 Client and Case Data

This may include:

• Legal research queries and results
• Document drafts and templates
• Case notes and matter information
• Client names and case details (encrypted)

1.3 Usage Data

We automatically collect certain information about how you use the platform:

• Login times and session duration
• Features accessed and tools used
• Device information and IP address
• Browser type and operating system
• Performance and error logs

2. How We Use Your Information

2.1 Service Delivery

We use your information to:

• Provide legal research and document automation
• Maintain and improve platform functionality
• Process billing and payments
• Provide customer support
• Send service-related communications

2.2 What We NEVER Do

3. Data Storage and Security

3.1 Encryption

All data is encrypted:

• At rest: 256-bit AES encryption
• In transit: TLS 1.3 encryption
• Backups: Encrypted and geographically redundant

3.2 Data Location

All data is stored in SOC 2 Type II certified data centers within the United States. Primary datacenter is in Virginia, with backup in Oregon. Your data never leaves US borders unless you explicitly configure international access.

3.3 Access Controls

We implement strict access controls:

• Role-based access control (RBAC)
• Multi-factor authentication required
• Principle of least privilege
• Regular access reviews and audits
• Employee background checks and confidentiality agreements

4. Data Retention and Deletion

4.1 Active Accounts

While your account is active, we retain all data necessary to provide service. You have complete control over your data and can delete specific documents, cases, or research at any time.

4.2 Account Closure

Upon account closure:

• You may export all your data in standard formats (PDF, DOCX, JSON)
• All data is permanently deleted within 30 days
• Encrypted backups are retained for 90 days, then permanently deleted
• Audit logs are retained for 7 years as required by compliance regulations

4.3 Your Rights

You have the right to:

• Access: Request a copy of all data we hold about you
• Rectification: Correct any inaccurate information
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in machine-readable formats
• Object: Object to certain data processing activities

5. Third-Party Services

5.1 Limited Integrations

We use a minimal number of trusted third-party services:

• Payment Processing: Stripe (PCI-DSS compliant)
• Cloud Infrastructure: AWS (SOC 2 certified)
• Email Service: SendGrid (for system notifications only)
• Analytics: Privacy-focused analytics (no personal data)

None of these services have access to your client data or legal research content. They receive only the minimum information necessary to provide their specific service.

6. Cookies and Tracking

6.1 Essential Cookies

We use cookies necessary for platform functionality:

• Session management and authentication
• Security and fraud prevention
• Load balancing and performance

6.2 Optional Analytics

We use privacy-respecting analytics to improve our service. These do not track individual users or personal information. You can opt out at any time in your account settings.

7. Compliance and Legal Obligations

7.1 Legal Professional Standards

We comply with:

• Tennessee Rules of Professional Conduct (Rule 1.6 - Confidentiality)
• ABA Model Rules regarding technology and confidentiality
• Tennessee Bar Association technology guidelines

7.2 Law Enforcement and Legal Process

We will only disclose user data when:

• Required by valid legal process (subpoena, court order)
• Necessary to comply with applicable law
• Reasonably necessary to protect safety or prevent fraud

In such cases, we will:

• Notify you unless legally prohibited
• Challenge overly broad or improper requests
• Provide only the minimum information legally required

8. Children's Privacy

Jurist Diction is designed for legal professionals and is not intended for use by individuals under 18. We do not knowingly collect information from minors.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email and require acceptance before they take effect. The "Last Updated" date at the top indicates when changes were made.

10. International Users

Jurist Diction is based in Tennessee, USA. If you are accessing our service from outside the United States, please be aware that your data will be transferred to and processed in the United States. By using our service, you consent to this transfer and processing.