Privacy Policy

1. One service, protections that depend on your workspace

This policy covers Jurisio across its plans. How your content is processed by third-party AI providers depends on whether you are signed in and on your workspace:

• Guest use (using Jurisio without signing in): a cost-optimized route to third-party AI providers whose own policies govern retention and training; we do not guarantee zero data retention or restrict routing to no-training providers on this route (Section 4).
• Signed-in accounts on the Free, Pro, and Max plans (including student plans that include Pro): only AI providers that have committed not to use your content for training (Section 4).
• Firm workspaces: workspaces provided to an organization under a written agreement with Jurisio. AI processing, retention, and access for a firm workspace are governed by that agreement.

In this policy, "standard workspace" means any workspace that is not a firm workspace, including Free, Pro, and Max accounts and guest use. These descriptions identify how information is handled; they do not describe separate companies or services.

A separate written agreement with an organization controls any conflicting commitments that expressly apply to its workspace. An organization's administrators may manage access, permissions, and organization-owned records. Contact your organization about requests concerning records it controls; we will assist as required by our agreement and applicable law.

2. Information we collect

Account and organization information: Name, email address, authentication information, organization details, account preferences, and subscription information.

Content: Files, prompts, questions, messages, notes, and other material you submit, together with generated responses and documents. Processing may create extracted text, document segments, search representations, and other working copies needed to provide features. Materials may contain personal information about you or other people.

Files imported from connected storage: You may connect Google Drive, Dropbox, Box, or Microsoft OneDrive to import files into Jurisio. Imported files are copied into and stored in your Jurisio account, where they are processed under this policy and the protections applicable to that workspace. Disconnecting a storage service stops Jurisio from further reading that connected storage through the disconnected integration. It does not delete copies you already imported into your Jurisio account. Those copies remain subject to Jurisio's retention and deletion practices described in Section 7.

Calendar connections: You may connect Google Calendar or Microsoft Outlook so Jurisio can add dates, such as a deadline or a hearing, to your calendar when you ask. The first time you add a date, Jurisio creates a separate calendar named "Jurisio" in that account and puts the events you ask for there; you can also remove an event you added. For Google Calendar, we request only Google's calendar.app.created permission, which lets Jurisio see and change only the calendars and events Jurisio itself creates; it cannot see your other calendars or events. Microsoft does not offer a narrower permission for adding events, so for Outlook we request Calendars.ReadWrite, which technically allows an app to read and change the calendars in your Microsoft account. Jurisio uses it only to look up the names of your calendars so it can find its own "Jurisio" calendar, to create that calendar, to add or remove the events you ask for, and to check the events it added; it does not read the events in your other calendars. We store the connection's access credentials in encrypted form, together with the identifiers of the Jurisio calendar and of the events we added. Disconnecting deletes the stored credentials; the Jurisio calendar and any events already added stay in your calendar until you delete them there. You can also withdraw Jurisio's access at any time in your Google or Microsoft account settings. Downloading a calendar file (.ics) does not require connecting any account.

Ella for Word: If you use Jurisio's add-in for Microsoft Word while signed in, the add-in sends Jurisio a copy of the open document's text so Ella, Jurisio's AI assistant, can answer questions about it and suggest edits. That copy includes the document's paragraphs and basic formatting, any existing tracked changes and comments (including the author names and dates Word shows for them), and where your cursor or selection is. We automatically delete each copy after about seven days, unless you save it as a version of the document, which we keep like your other saved work (Section 7). Your conversations with Ella in Word are saved like other Jurisio conversations. Ella's suggested edits appear in your document as tracked changes and comments that you can accept or reject; the only thing the add-in stores inside your Word file is a random identifier that lets Jurisio recognize the document later.

Memory and home state: If memory is on, Jurisio automatically saves short notes from your chats in a project, such as facts about a matter, and uses them in that project's later chats. You can view the notes for a project, delete a single note, or clear all of them. Memory is on by default; you can turn it off with the "Use memory" switch in Settings → Memory. Turning memory off stops Jurisio from saving or using notes, but it does not delete notes already saved; delete those in the project. We also keep a "home state," the US state whose law Jurisio assumes by default. It may come from you, from your signup, or from Jurisio's guess based on your chats, and Settings shows which. You can change it, or stop Jurisio from guessing it with the "Don't guess my state" switch in Settings → Memory; turning off memory or guessing also clears a state that was guessed or taken from your signup.

Payments: Stripe processes payments. We receive information needed to administer your subscription, such as customer and subscription identifiers, payment status, and transaction records. Payment information submitted directly to Stripe is also subject to Stripe's Privacy Policy.

Operational information: Requests, timestamps, errors, security events, device and browser information, IP addresses, usage limits, and records of support interactions. Depending on workspace protections, troubleshooting records may include prompts and responses as described below.

Approximate location: General location information, such as a state, city, county, or region, that you provide or that we infer from your activity, device, or connection. If you choose to share your device's location to set your state, we round the coordinates to two decimal places (roughly a kilometer) and send them to a free US government service, the FCC Area API, to look up your state and county.

Inferences: Information we infer from your activity, such as general characteristics of your requests or your likely location. Where available, you can review and manage certain inferences in Settings, such as your home state (see "Memory and home state" above). We do not attempt to infer sensitive characteristics about you.

3. How we use information

We use information to provide requested features, tailor responses, save your work, authenticate access, process payments, administer subscriptions, provide support, investigate abuse, maintain security and reliability, understand feature usage, communicate with you, and comply with law. When a response relies on information we infer from your activity, we aim to say so.

Jurisio does not use your uploaded files, prompts, conversations, or generated outputs to train or fine-tune AI models. This commitment applies to Juris Technology LLC and its personnel acting on its behalf. The limited rights you grant us to operate the service do not grant us a right to train AI models on your content.

Training is different from processing your content to answer a request or reviewing an error. Where permitted below, we may evaluate responses, investigate problems, and improve software without using your content to train or fine-tune a model. Our commitment describes Jurisio's own conduct; third-party AI providers are governed by their own policies, as explained in Section 4.

We may use statistics that do not reasonably identify a person or reveal private content to understand service performance. This does not create an exception to our commitment against training on your content.

4. AI providers and other processors

For standard workspaces, we send the information needed to perform your request to third-party AI services, including OpenRouter (a routing service) and the model providers it selects to serve the request. That information can include your question, prior messages in the conversation, and the text or images of documents the request uses.

Jurisio never trains AI models on your data. Your requests are processed by third-party AI providers that we reach through OpenRouter or Amazon Bedrock. Whether a provider may retain submitted content, or use it to train or improve its own models, is governed by that provider's own policies. Please review those policies through OpenRouter's provider information and OpenRouter's Privacy Policy.

Guest use. If you use Jurisio without signing in, we send your requests through a cost-optimized route: OpenRouter serves them using third-party models and providers chosen primarily for cost, and if a model is unavailable the request may move to another. The models and providers on this route may change without notice. As of the effective date, guest answers are written by contributor-tier models from Meta, served by Meta, or, if those are unavailable, by a Z.ai model served by providers OpenRouter selects. Some supporting steps, such as naming a conversation, suggesting follow-up questions, and describing progress while an answer is prepared, use OpenAI models served through Amazon Bedrock or, as a fallback, by OpenAI-model hosts that OpenRouter selects. For some features, guest requests may also use other models routed through OpenRouter on this same route. Guest searches are also processed by the search and privacy-check providers listed on our service providers page. Jurisio does not guarantee that the guest route offers zero data retention, and we do not restrict it to providers that have committed not to use submitted content for training. Providers on this route may retain your questions, the content a request uses, and generated outputs, and some may use that content to train or improve their own models or products, in each case under their own terms. For example, Meta states that prompts and outputs sent to its contributor-tier models may be used to improve Meta's products, and OpenRouter's published provider information lists a 30-day prompt retention period for those models. According to that information, the other models currently on the route are served by providers that do not train on requests, although some of those providers retain prompts. Providers on this route may also receive a pseudonymous identifier for your guest session, supplied through OpenRouter, and may apply their own content moderation to your requests. Content already sent cannot be recalled. Do not submit as a guest confidential, privileged, or sensitive personal information, including client or case information you are not prepared to have a third-party AI provider handle under its own policy. Creating an account or signing in before you submit a question moves your future requests to the no-training routing described below.

Signed-in accounts (Free, Pro, and Max plans). For every signed-in account, on every plan, we instruct OpenRouter to route requests only to providers that have committed to zero data retention and not to use submitted content to train or improve AI models. Some steps, such as naming a conversation or suggesting follow-up questions, run on Amazon Bedrock, the AI service of our cloud provider Amazon Web Services, when it is available, and otherwise through OpenRouter under the same zero-retention routing. These commitments cover the AI providers only: Jurisio itself keeps AI request and response logs for up to 180 days for troubleshooting, security, and abuse prevention (Section 7), and documents and conversations you save stay until you delete them.

If you connect Google Drive. Requests from an account with Google Drive connected are, like all signed-in requests, processed only by providers that have committed not to use submitted content for training, as Google's API Services User Data Policy requires for content from Google. See "Google user data" below.

Firm workspaces. AI processing for firm workspaces is governed by the organization's written agreement with Jurisio.

Google user data

If you sign in with Google or connect Google Drive or Google Calendar, we receive the Google account information you authorize: your name, email address, and profile image when you sign in with Google or connect Drive, and only your email address when you connect Google Calendar. For Google Drive, we receive only the files you choose through Google's file picker; we do not request access to browse your whole Drive. For Google Calendar, we request only the calendar.app.created permission, so Jurisio can see and change only the "Jurisio" calendar it creates and the events in it, and only to add or remove the dates you ask for; it cannot see your other calendars or events (see "Calendar connections" in Section 2).

Jurisio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide and improve user-facing features you request; we do not use it for advertising, do not sell it, and do not use or allow it to be used to develop, improve, or train generalized AI or machine-learning models. Jurisio personnel do not read Google user data unless you give specific permission, it is necessary for security purposes such as investigating abuse, it is required to comply with law, or it has been aggregated and anonymized for internal operations.

Other processors

Other providers help us host information, deliver email, process payments, provide analytics, and operate the service, and we disclose information needed for those functions. They currently include Amazon Web Services (hosting, storage, email delivery, and some AI processing through Amazon Bedrock), OpenRouter and the model hosts it routes to (AI processing), TypeSafe (a privacy check that helps keep private details out of outgoing web searches), web search providers such as Exa and Tavily (they receive search queries derived from your requests and the addresses of pages to read), Free Law Project's CourtListener (case-law lookups), Stripe (payments), and PostHog (product analytics). Google, Microsoft, Dropbox, and Box receive requests from Jurisio only when you connect their services. Our service providers page lists each provider, what it does, and where it processes information, including AI hosts that may process requests in the European Union. We remain responsible for our own disclosures and privacy commitments; referring to a provider's policy does not waive your rights against us.

5. Human access

Standard workspaces. Jurisio staff do not read your conversations to evaluate or improve quality. Authorized personnel can see how the service handled your requests (for example, which tools ran, how long each step took, error codes, and why a step stopped) without seeing what you wrote or what Jurisio answered.

Staff read the text of a conversation only:

• (a) when you send us a problem report and leave "Let support read this chat" selected. Access is limited to the conversation you reported, up to the moment you reported it, and ends 30 days after you send the report; or
• (b) when reasonably necessary to investigate a security incident or abuse of the service, or when required by law.

Every such access is logged. Access for support or security never authorizes AI model training.

Firm workspaces. Access to firm content is governed by the organization's written agreement with Jurisio.

6. Analytics, cookies, email, and possible advertising

We use necessary cookies or similar technologies to sign you in, maintain sessions, and remember settings. These are distinct from product analytics.

We use an analytics tool to understand how our website and services are used so we can improve them. It does not set cookies or record sessions, and it never receives what you type or the contents of your documents. Events may describe features you use and how you interact with them, general categories of requests, information we infer from your activity, approximate location, plan category, or whether an attachment was present; they do not include the text of your prompts, document contents, or file names. Like any web service, the analytics tool receives technical information such as IP address when it receives an event.

By creating an account, you agree that we may email you about your account, billing, security, changes to the service, and problems affecting your use of Jurisio, including follow-up about issues you report or that we detect. We may also send promotional emails about Jurisio; each one includes a way to unsubscribe.

We do not sell personal information. Advertising may be introduced in free plans in the future. Before introducing advertising that changes how information is collected, used, or disclosed, we will explain those practices and provide any legally required choices or consent. This statement does not authorize undisclosed advertising trackers or disclosure of your private content to advertisers.

7. Retention and deletion

Saved content. We keep your saved documents, generated work, and conversations until you delete them or your account is closed, so you can return to your work. We do not promise permanent archival storage, and you remain responsible for your own recordkeeping.

Other account records. Unless a shorter period is stated here, the following are kept while your account is open and deleted within a reasonable period after you ask us to delete your account, except where we must keep something longer (for example, billing records for tax and accounting): your account and profile information, including your settings and home state; memory notes, which you can also delete yourself and which are removed when you delete the project they belong to; and the identifiers of a calendar Jurisio created and of events it added. Calendar access credentials are deleted as soon as you disconnect the calendar. A connected Ella for Word session expires after 30 days without use, or sooner if you disconnect it in Settings; saved Word versions are kept until you delete them or the conversation they belong to. Payment and subscription records are also kept by Stripe under its own policies. Analytics events are not linked to your name, email address, or account, so they cannot be looked up or deleted for a particular person; our analytics provider keeps them under its retention settings.

Guest data. When you use Jurisio as a guest, we create a temporary guest identifier and store under it your questions, conversations, and generated answers, the related request records, settings, usage counters, and a record that you accepted the Terms of Service and this Privacy Policy (including your browser's user-agent and the site the request came from). If you create an account from that guest session, those conversations become part of your account and are kept as described above for saved content. If you do not, an automated daily process begins deleting the guest identifier and everything stored under it once 30 days have passed since the guest session began, and ordinarily completes that deletion within a few days. That process does not remove troubleshooting and security logs, which follow the operational retention periods below; any usage and cost statistics linked to the guest identifier, which do not contain the text of questions or answers and expire on their own schedules; short-lived rate-limit records, which hold a keyed hash of your network address and expire within a few days; backups, which expire on their normal schedule; or copies retained by AI providers under their own terms (Section 4).

Deletion. Deleting an item in the product removes it from your account. Some underlying working copies and backups may remain for a limited period after deletion. To request complete erasure of your content or account, contact support@jurisio.ai; we will remove it from active systems, and remaining backup copies expire on their normal schedule. We verify your authority before acting. Removing a member's account does not automatically delete records owned by a firm or shared workspace. Canceling a subscription is also separate from requesting deletion.

Disconnecting Google Drive, Dropbox, Box, or Microsoft OneDrive is not a request to delete imported files. To request deletion of imported copies stored in your Jurisio account, use the available Jurisio deletion controls or contact support@jurisio.ai.

Separate operational records. Saved content and internal logs serve different purposes. For standard workspaces, prompts and responses may be retained in troubleshooting logs for up to 180 days, and certain evaluation inputs for up to seven days. Security and audit records may be retained longer where needed for security or legal purposes.

We may preserve narrowly limited records necessary to meet legal obligations, establish transactions, resolve a specific dispute, enforce rights, or investigate a documented security incident. We restrict such records to the relevant purpose and do not use these exceptions to justify indefinite retention of all private content.

Deletion from Jurisio does not by itself erase copies you exported, copies another authorized person holds, or copies independently retained by a provider under the disclosed processing terms. We will address processor deletion obligations as applicable rather than treating provider copies as outside all responsibility.

8. Changes in plan or workspace

Changing plans changes features and usage limits for future requests; it cannot reverse processing or provider retention that already occurred. Likewise, creating an account or signing in after guest use changes routing only for later requests; it cannot reverse processing, retention, or training by guest-route providers that already occurred.

If you move from Pro or Max to the Free plan, we keep your saved documents and conversations. New requests after the change remain on no-training routing, including requests that use documents or conversations you saved while on a paid plan.

9. Other disclosures and security

We may disclose information when legally required, including in response to valid legal process. We may also disclose limited non-content information as reasonably necessary to protect the service and investigate fraud. Commitments in a firm's written agreement continue to apply except where binding law requires otherwise.

If Jurisio undergoes a merger, acquisition, or sale, information may transfer with the service, subject to applicable law and existing privacy commitments. We will provide notice of material changes as required.

We use administrative and technical safeguards intended to protect information. You can add two-step verification to your account from account settings; we recommend it if you store sensitive material. No service can guarantee perfect security. Nothing in this policy implies that Jurisio holds security certifications it has not obtained.

The service is offered to US users. Eligibility is not a promise that every processor operates exclusively in the United States.

10. US state privacy rights

Several US states, including California, give their residents specific privacy rights. This section explains how those rights work at Jurisio. For records a firm or other organization controls in its workspace, please contact that organization first (Section 1).

What we collect. The categories of personal information we collect are: identifiers (such as name, email address, account and guest identifiers, and IP address); account and commercial information (such as your plan and subscription records); internet and device activity (such as usage events, request logs, and browser and device information); approximate location; the content you submit and the responses and documents we generate for you; and inferences (such as your likely home state). Section 2 describes each category and where it comes from, Section 3 explains why we use it, Section 4 and our service providers page list who we disclose it to, and Section 7 explains how long we keep it.

No sale and no sharing for advertising. We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising, and we do not use it for targeted advertising, as those terms are used in state privacy laws. We do not use personal information for profiling that produces legal or similarly significant effects about you.

Sensitive information. Files and questions you submit may contain sensitive information about you or other people, such as health, immigration, criminal history, financial, or government identification information. We use and disclose that information only to provide the service you request, including features that are on for your account, such as memory (on by default; you can turn it off), and for purposes state privacy laws allow, such as security, preventing fraud, and complying with law. We do not use it to infer characteristics about you or for advertising.

Your rights. Depending on where you live, you may have the right to know what personal information we have collected about you and to get a copy of it, to have it deleted, to have inaccurate information corrected, and to opt out of the sale or sharing of personal information, targeted advertising, and certain profiling. Because we do not sell or share personal information or use it for targeted advertising, there is currently nothing to opt out of; if that changes, we will provide a way to opt out before it begins.

How to make a request. Email support@jurisio.ai from the email address on your account, say which right you want to use, and put "Privacy request" in the subject line. Jurisio does not currently offer a self-service way to delete your whole account, so account deletion is handled by email; you can delete individual conversations and documents yourself in the product at any time. To protect your information, we verify requests, usually by confirming that you control the account's email address, and we may ask for more information when needed. We will respond within 45 days, or within any shorter time required by the law that applies to you; where the law allows, we may extend that period once and will tell you if we do. Guest sessions are not tied to a verified identity, so we may not be able to act on a request about guest activity; guest data is deleted automatically as described in Section 7.

Authorized agents. Someone you authorize may make a request for you. We may ask for your signed permission and ask you to confirm your identity with us directly.

Appeals. If we decline your request in whole or in part, you may appeal by replying to our decision or by emailing support@jurisio.ai with "Privacy appeal" in the subject line. We will respond in writing within the time applicable law requires and explain what we decided and why. If you are not satisfied with the result of your appeal, you may contact your state attorney general.

No discrimination. We will not deny you service, charge you a different price, or give you a different level of service because you exercised these rights.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out and do not load our analytics tool on our website or in the Jurisio app while the signal is on. Because we do not sell or share personal information, the signal does not change anything else.

11. Your rights and contact

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, and to appeal certain decisions; Section 10 explains these rights for residents of US states with privacy laws. Send requests or appeals to support@jurisio.ai. We may verify identity and authority, and will respond within applicable legal deadlines. We will not unlawfully discriminate against you for exercising privacy rights. Authorized agents may contact us with evidence of their authority where applicable law permits.

We do not knowingly offer accounts to children. If you believe a child has provided account information, contact us. Adults may submit lawful case materials involving minors where they have authority to do so; those materials remain subject to this policy.

We will post an updated effective date when this policy changes and provide appropriate notice of material changes. Where a change requires consent, we will obtain it; posting a revised policy does not by itself supply that consent.

Juris Technology LLC

support@jurisio.ai

1218 SE Petunia Ave

Port Saint Lucie, Florida 34952