Privacy Policy
This Privacy Policy explains how [JIP Legal Entity Name] ("JIP", "we") collects, uses and protects personal information on the Justice Intelligence Pathway. Because JIP may receive sensitive case information, we aim to collect only what is necessary and to be clear about how it is handled.
Bracketed items such as [JIP Legal Entity Name] are placeholders the operator must complete before publication.
1. Information we collect
We collect information you provide, information generated when you use JIP, and limited technical information, as described below.
2. Account data
Name, email address, password (stored hashed by our authentication provider), language, and optional profile details such as phone, country or organization.
3. Case and question information
Details of legal matters you submit, such as case type, court, dates, parties and your description.
4. Uploaded documents
Judgments, evidence and other files you upload, and text extracted from them for analysis.
5. Communications
Messages exchanged with experts or support through JIP, and notifications we send you.
6. Payments
Where paid services apply, transaction records. Card details are processed by [Payment Provider] and are not stored by JIP.
7. Technical and device information
Log data such as timestamps, approximate request metadata and error reports needed to secure and operate the service.
9. Purposes of processing
To provide accounts and services, analyze documents you submit, match you with experts, process payments, keep the platform secure, meet legal obligations, and — only with your opt-in — send marketing communications.
10. Data minimization
We ask only for information needed for each feature. Please avoid submitting unnecessary sensitive personal information.
11. Consent
When you create an account we record which versions of the Terms of Use and this Privacy Policy you accepted and when. Optional consents, such as marketing, can be changed at any time in your privacy settings.
12. Sensitive personal information
Case files may contain sensitive information (for example about criminal proceedings, health or family matters). We process it only to deliver the services you request and apply stricter access controls to it.
13. Confidential case information
Your cases are private to your account by default. They are shared with an expert or administrator only when needed to deliver a service you requested, to moderate the platform, or where legally required.
14. Storage
Data is stored with our hosting provider [Hosting Provider and Region].
15. Security
We use encryption in transit, access controls, row-level data isolation and audit logging. No system is completely secure, and we cannot guarantee absolute security.
16. Access controls
Staff and expert access is role-based, limited to what is necessary, and logged.
17. Third-party providers
We use service providers that process data on our behalf: [Hosting Provider], [Authentication Provider], [AI Processing Provider], [Payment Provider], [Email Provider]. They may use data only to provide their services to us.
19. Professional referrals
When you request an expert, the relevant case information is shared with the selected expert inside a private workspace.
20. AI processing
Uploaded documents may be processed by [AI Processing Provider] to extract text and generate analysis. [State whether the provider may retain or train on data.] AI output is labelled and may be reviewed by humans on request.
21. Retention
We keep account and case data while your account is active and for [Retention Period] afterwards, unless a longer period is required by law. Consent records are kept as evidence of acceptance.
22. Deletion
You can delete cases and documents you own, and request account deletion by contacting [Privacy Contact Email]. Some records may be retained where legally required.
23. Access and correction rights
You can view and correct your profile in account settings and request a copy of your personal information from [Privacy Contact Email]. Further rights may apply under the law of [Applicable Jurisdiction].
24. Withdrawal of optional consent
You may withdraw optional consents at any time. Acceptance of the Terms of Use is required to use JIP; if you no longer accept them you may close your account.
25. Breach response
If a personal data breach occurs, we will investigate, contain it and notify affected users and authorities where required by law.
26. International transfers
Our providers may process data outside your country. [Describe transfer safeguards, if applicable.]
27. Minors
JIP is not directed at children. Minors should use JIP only with the involvement of a parent, guardian or legal representative where permitted.
28. Marketing
We send marketing communications only if you opt in. You can opt out at any time in privacy settings or via the link in each message.
30. Complaints
Contact [Privacy Contact Email] with any privacy concern. You may also have the right to complain to [Data Protection Authority].
31. Contact
Data controller: [JIP Legal Entity Name], [JIP Registered Address]. Email: [Privacy Contact Email].
32. Changes to this policy
Material changes receive a new version number and effective date, and you will be asked to review them before continuing to use JIP.