Privacy policy
This policy explains what personal data Jurisyn handles, why, and what you can ask us to do about it. It covers both this website and the Jurisyn product.
Last updated 28 July 2026. This is a plain-language policy. It is not a substitute for the data processing agreement, which governs our handling of your client material and takes precedence over this page where the two differ.
Who we are
Jurisyn (“we”, “us”) is a legal technology company based in Bengaluru, Karnataka, India. For questions about this policy, write to privacy@jurisyn.ai.
Two different roles
We handle personal data in two capacities, and the rules differ.
As a controller, for data about people who visit this website or contact us: your name, firm, email address and anything you write to us.
As a processor, for the contents of a customer’s documents. The law firm is the controller of that material. We only process it on their written instructions, under a data processing agreement.
What this website collects
- Nothing automatically beyond server logs. This site sets no advertising or analytics cookies and uses no third-party trackers.
- No third-party requests at all. Fonts, styles and scripts are served from this domain. Loading a page here does not tell Google, or anyone else, that you visited.
- The demo form does not submit to a server. It opens your own email client with the details filled in, so we only receive what you choose to send.
- Server logs record IP address, browser type and pages requested, for security and diagnostics. Deleted after 30 days.
What the product handles
Inside a customer deployment, Jurisyn processes the documents a firm connects to it, and records who asked what. It does not use any of that content to train models. Model providers used for reasoning operate under zero-retention terms and do not store or train on the passages sent to them.
Why we hold what we hold
- To answer your enquiry and run a demo, because you asked us to.
- To provide and support the product, under our contract with your firm.
- To keep the service secure and to meet our own legal obligations.
We do not sell personal data, and we do not use it for advertising.
Who else sees it
Cloud hosting, email, and the model provider used for reasoning. Each is bound by contract, and the full list of subprocessors is set out in the data processing agreement. We give 30 days’ notice before adding one.
Where it is stored
Website data is held in India. Product data is held in the region chosen by the customer at deployment: India, the European Union, the United Kingdom, or the customer’s own cloud tenancy.
How long we keep it
- Enquiries and correspondence: three years from our last exchange, unless you ask us to delete it sooner.
- Server logs: 30 days.
- Customer indexes and query logs: for the term of the contract, then deleted within 30 days, with written confirmation.
Your rights
Under the GDPR and India’s Digital Personal Data Protection Act, 2023, you can ask us for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict processing. Write to privacy@jurisyn.ai and we will respond within 30 days.
If the data concerns a firm’s client documents, direct the request to that firm. They are the controller and we will act on their instruction.
You may also complain to a supervisory authority: the Data Protection Board of India, or your local authority in the EU or UK.
Security
Encryption in transit and at rest, tenant isolation, single sign-on, and no standing staff access to customer content. The detail is on the security page.
Changes
If we change this policy in a way that affects you, we will update the date above and tell customers by email before the change takes effect.
Last updated 28 July 2026