Privacy Policy

JuryForge is built and operated by Eterlio. Eterlio is the data controller for the personal data needed to run your account, bill you, secure the Service and communicate with you.

For personal data that an Organization or user puts into JuryForge as part of its own work, such as clients, parties, witnesses, students and people named in case files, that Organization or user is the data controller and Eterlio processes the data on its behalf. Requests about that data should go to the Organization first.

We collect only what we need to run the Service for you and your Organization.

• Account details: your name, email address, password (stored only as a one-way hash), account type, school email for student accounts and, if you use Google sign in, the basic profile Google shares with us.
• Organization data: organization names and types, members, roles, invitations, seats, settings, features and billing plan.
• Your content: cases, hearings, practice sessions, research conversations, prompts, drafted documents, contracts, playbooks, coursework, grades, notes, messages and files you upload.
• Live session data: audio, video and screen sharing during live hearings, meetings and lectures, plus recordings and transcripts when one is started.
• Billing data: plan, seats, invoices, credits and payment status. Card and mobile money details are entered with and held by Stripe or Paystack; we do not store full card numbers.
• Acceptance records: the version of these terms and the Privacy Policy you accepted, and when, together with the device and network details of that acceptance.
• Technical data: a random device identifier, IP address, approximate country derived from your IP address, browser and device type, notification subscriptions, and request, security and audit logs.
• Support data: messages, tickets and feedback you send us.

JuryForge is a simulation and does not need real client material to work. If you choose to put real case files or information about real people into the Service, you are responsible, as controller, for having a lawful basis to do so and for complying with your duties of confidentiality, privilege and data protection, as explained in our Terms of Service.

Please anonymize or redact personal details wherever you can, and do not upload special personal data, such as health, criminal, religious, sexual or biometric information, or information about children, unless the law clearly allows it and it is necessary for your purpose.

We use personal data for these purposes and on these grounds:

• to create and secure your account, run your Organization, deliver hearings, meetings and lectures, and store and show your work, because this is necessary to perform our contract with you;
• to process payments, keep financial records, meet tax obligations and respond to lawful requests, because the law requires it;
• to prevent fraud and abuse, enforce our terms, apply country and plan restrictions, keep the Service reliable, provide support and improve the Service, because these are our legitimate interests and do not override your rights;
• to send service emails such as sign in links, invitations, receipts and important notices, and, where you have agreed, push notifications and product news, which you can turn off at any time.

We do not sell your personal data, we do not use your content to train artificial intelligence models, and we do not use your content to advertise to you.

When you use AI features, such as simulated judges, counsel, witnesses and juries, research, drafting, contract review, risk assessment and strategy, the prompts you submit and the context needed to answer them, which can include parts of Your Content, are sent to OpenAI for processing. We use OpenAI through its business API, under terms that do not allow it to use that data to train its models.

Generated courtroom voices are produced on our own servers. Dictation and live captions use the speech recognition built into your browser, which may send your audio to your browser provider, such as Google for Chrome, under that provider's own terms. You can choose not to use dictation or captions.

Live audio and video are carried by a LiveKit media server that we host and operate ourselves. Media streams are relayed between participants and are not stored unless a recording is started.

Recordings are stored in our Amazon Web Services storage and are available to members of the Organization that held the session, according to their permissions. Whoever starts a recording is responsible for telling participants and obtaining any consent the law requires.

We share personal data with the following providers only as needed to run the Service, under contracts that require them to protect it:

• Amazon Web Services, for storing recordings, uploaded files and backups.
• OpenAI, for processing AI features as described above.
• Stripe and Paystack, for processing payments.
• Resend, for delivering service emails.
• Google, only if you choose to sign in with a Google account.
• Your browser's push service, such as Google, Apple or Mozilla, only if you turn on notifications.

We also share personal data:

• with the owners and administrators of any Organization you belong to, and with members and Guests of the sessions you join, as the Service is designed to work;
• when the law, a court order or a competent authority requires it, or where it is necessary to protect the rights, safety or property of our users, the public or Eterlio;
• with a buyer or successor if Eterlio is involved in a merger, acquisition, reorganization or sale of assets, subject to this policy;
• with anyone else when you ask us to or agree to it.

Some of our service providers store or process data outside Ghana, including in the United States and the European Union. Where we transfer personal data abroad, we do so as permitted by the Data Protection Act, 2012 (Act 843) and rely on providers that give appropriate protection for it. By using the Service you understand that your data, and any content you upload, may be processed in those countries.

We use a secure cookie to keep you signed in and your browser local storage to remember a random device identifier, your cookie choice and preferences such as theme and your active Organization. We do not use advertising or third-party tracking cookies. Our Cookie Policy lists the cookies we use and explains your choices.

We keep account and Organization data for as long as the account or Organization is active. Content, documents and recordings remain until you or an Organization administrator delete them, or until the account or Organization is closed, after which we may delete them 30 days later.

We keep payment, tax and acceptance records, and security and audit logs, for as long as we need them to meet legal obligations, resolve disputes and enforce our agreements. Copies held in routine backups are removed as those backups are replaced.

Data is sent over encrypted connections, passwords are hashed, access to Organization content is limited to its members, and sign ins, sessions and sensitive actions are logged. No system is perfectly secure, so please use a strong password and keep sign in links, guest links and passcodes private. If a breach affects your personal data, we will notify you and the Data Protection Commission where the law requires.

Under the Data Protection Act, 2012 (Act 843) and other laws that apply to you, you can ask us for a copy of your personal data, ask us to correct or delete it, object to or ask us to restrict certain processing, and withdraw any consent you have given. You can update your profile in your account settings and leave an Organization at any time.

To use these rights, contact us at the email address below. We may need to verify your identity, and we may keep information where the law requires or allows. For content held by an Organization, we will refer your request to that Organization. If you are not satisfied with our response, you can complain to the Data Protection Commission of Ghana.

JuryForge is not intended for children. Student accounts for people under 18 are allowed only with the consent of a parent or guardian, or through an institution that has obtained that consent. If you believe a child has given us personal data without that consent, contact us and we will delete it.

We may update this policy as the Service changes. When we make a material change we will update the date at the top and tell you in the app or by email before it takes effect.