Privacy and confidentiality

Who runs this installation

[Operator name: set OPERATOR_NAME] runs this installation and is responsible for your data. Contact: [contact: set OPERATOR_CONTACT].

What is stored

• Your account: name, email, and a one-way scrambled form of your password (never the password itself).
• Your case folders: parties, cheques, dates, properties, the documents you draft (with their earlier versions), your court and letterhead presets, and the private notes you type.
• If you use the Firm page: the firm's name, who is in it and in what role, pending invitations, the firm's shared letterhead, courts and filing checklists, and a record of who changed what in shared and firm folders (the kind of change and the folder's case number, never a party's name or any case text).
• The papers you upload to a folder (scans, photos, Word and text files), with the title, kind, date and file name you give them.
• Your notes of client meetings, calls and site visits, with their date, title and the diary date they are attached to. The diary itself is built from dates, papers, notes and drafts already in the folder.
• So that a case can be searched, the text read out of each paper you upload (PDF, Word, text) is kept in the database, encrypted, together with a list of keyed hashes of its words. The hashes cannot be turned back into words without the server's key. Scanned papers without a text layer are found by title and note only.
• Which colleagues you have shared a folder with, and whether they may view or edit it.
• Technical records of AI use (action, model, token counts, time taken, error code; never your text).
• A counter of failed sign-ins and sign-ups, kept against the email or network address for about two hours at most, to stop password guessing.

The law library, judgments and stamp rules are public information shared by everyone. They contain nothing about your clients.

Who can see your cases

• You, when signed in, and only the colleagues you choose to share a folder with. Every request is checked against the account, so another advocate cannot open your case even by guessing its web address. A colleague with “view only” can read the folder and its papers; one who “can edit” can also change them; only you can delete the folder or change who it is shared with. Your letterhead, court presets and saved checklists stay yours.
• If you join a firm: the firm's owner and admins can open and change every folder that has been put into the firm, and see the firm's activity record. Other members can open a firm folder only if it was opened to the whole firm or shared with them. Nobody in a firm can open another member's personal folders. When a member leaves or is removed, the firm folders they put in go to the firm's owner (or the person an admin chooses); their personal folders stay theirs.
• Administrators can edit the shared law library. That does not give them a screen to read your cases.
• The person who hosts the server and holds its database and encryption key could technically read stored data. That is why you should choose a host you trust, and why the key is kept separate from the database backups.

How data is protected

• Sensitive fields are encrypted in the database (AES-256-GCM): addresses, phone numbers, email addresses and ID numbers of parties, cheque and account numbers, tracking numbers, the description of the debt, property descriptions and land records, your notes (including meeting notes and who was there), who a letter was with, the branch and their reference numbers, the contents of every document you draft and its earlier versions, and the files you upload as papers.
• Some details are kept readable so the app can search and sort: party names, case numbers and titles, dates, amounts, bank names, court names, and the title, kind, date and file name of each paper. Anyone with direct access to the database could read these.
• Passwords are stored only as bcrypt hashes. Sign-in is rate-limited, and a wrong email and a wrong password give the same message.
• Connections should use HTTPS (set up on the server). Session cookies are marked HTTP-only.
• The app uses one cookie, to keep you signed in. It has no advertising, analytics or tracking scripts.

AI features

AI features are switched off on this installation. Nothing is sent to any AI service.

Keeping and deleting data

• Deleting a case folder permanently deletes its facts, documents and their versions, dates, papers, notes and checklist ticks, and removes it for every colleague it was shared with.
• On your Account page you can delete your whole account and everything in it, after confirming your password. This cannot be undone. If you are in a firm, the folders you put into the firm go to the firm's owner first; a firm's owner with other members must hand the firm over before deleting their account.
• Backups made by the operator may keep deleted data until they expire. Ask the operator how long backups are kept.

What this app is not

It is a drafting aid for advocates. It does not give legal advice, and templates, deadlines, stamp-duty notes and AI suggestions must be verified by the advocate before use. Draft templates carry a visible “not reviewed by an advocate” badge until they are approved.

Questions or problems

Contact the operator named above. If you believe your data was exposed or misused, tell them straight away so they can act.