Privacy policy

What we process and why

• Account: login, optional e-mail, date the terms were accepted. Basis: contract (Art. 6(1)(b) GDPR).
• Password: never stored, not even as a hash. It is used to derive a key (Argon2id) that opens the account key.
• Cases and evidence (paid plan): stored encrypted with your account's key. The operator cannot access them without your password.
• Sessions and security: IP address and browser at sign-in, to protect against password guessing; web server log with IP addresses, kept up to 30 days. Basis: legitimate interest in security (Art. 6(1)(f)).

Artificial intelligence

When you start an analysis in the paid plan, the necessary excerpts of the case are sent to the chosen AI provider (for example Anthropic, Google, OpenAI, Mistral). Some are established outside the EU; the transfer relies on standard contractual clauses or an adequacy decision. Searching the law library sends nothing to AI providers.

Cookies

The website uses no cookies. The application uses only one, a session cookie required for signing in. No advertising or analytics cookies.

Retention

Data is kept while the account exists. After closure it is deleted; encrypted backups expire within 90 days.

Your rights

Access, rectification, erasure, restriction, portability (full export of cases in open formats) and objection. You can lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.