Privacy Policy

This Privacy Policy describes how [YOUR LEGAL ENTITY NAME] ("Practica," "we," "us") collects, uses, and shares personal information when you use Practica by JurisAI (the "Service"). By using the Service, you agree to this policy.

1. Information we collect

Information you provide

• Account information: name, email address, password (stored hashed), and optional profile details such as your law school and year.
• Content you create: outlines, notes, flashcards, case briefs, community posts, and the prompts and text you submit to AI features.
• Payment information: processed by Stripe. We receive limited billing details (such as plan, status, and the last four digits / card brand) but do not store your full card number.
• Communications: messages you send us (e.g. support requests).

Information collected automatically

• Usage data: features used, AI actions, study activity, scores, and timestamps.
• Device & log data: IP address, browser type, device information, and pages viewed.
• Cookies & similar technologies: used for authentication, preferences, and basic analytics. See Section 6.

Note: some features (such as your Notebook and chat history) are stored locally in your browser and are not transmitted to our servers unless a feature explicitly syncs them.

2. How we use your information

• Provide, operate, maintain, and secure the Service;
• Create and manage your account and process payments and subscriptions;
• Generate AI responses you request;
• Enforce usage limits and prevent fraud and abuse;
• Personalize your experience and show progress and statistics;
• Communicate with you about your account, updates, and support;
• Improve the Service and develop new features;
• Comply with legal obligations.

3. Legal bases for processing (EEA/UK users)

Where the GDPR or UK GDPR applies, we process personal data on these bases: performance of a contract(to provide the Service), legitimate interests (to secure and improve the Service and prevent abuse), consent (where required, e.g. certain cookies or marketing), and legal obligation.

4. How we share information

We do not sell your personal information. We share it only with service providers that help us run the Service, under contracts that require them to protect it:

• Anthropic — processes the text you submit to AI features to generate responses;
• Stripe — payment processing;
• Supabase — database and authentication hosting;
• Resend — transactional email delivery;
• Vercel — application hosting and delivery.

We may also disclose information to comply with law, enforce our Terms, or protect the rights, safety, and security of Practica, our users, or the public; and in connection with a merger, acquisition, or sale of assets (you will be notified).

5. AI processing of your content

When you use AI features, the prompts and content you submit are sent to our AI provider (Anthropic) to generate output. Per Anthropic's commercial terms, such inputs and outputs are not used to train their models. Avoid submitting sensitive personal information you do not want processed by a third-party AI service. [CONFIRM CURRENT AI-PROVIDER DATA-HANDLING TERMS AND UPDATE THIS SECTION ACCORDINGLY.]

6. Cookies & tracking

We use cookies and local storage for essential functions (keeping you logged in, remembering preferences) and limited analytics. You can control cookies through your browser settings; disabling essential cookies may break parts of the Service. [IF YOU ADD THIRD-PARTY ANALYTICS OR ADS, DISCLOSE THEM HERE AND ADD A COOKIE BANNER WHERE REQUIRED.]

7. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is legally required.

8. Data security

We use reasonable administrative, technical, and organizational safeguards (such as encryption in transit, hashed passwords, and access controls) to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. To exercise these rights, contact us at [SUPPORT EMAIL]. We will respond as required by applicable law.

California (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or "share" personal information as those terms are defined under California law.

10. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact us and we will delete it.

11. International data transfers

We and our service providers may process your information in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

13. Contact us

Questions or requests about your privacy? Contact us at [SUPPORT EMAIL] or [BUSINESS MAILING ADDRESS].