Jurisphere Privacy Statement

1.About This Privacy Statement

This Privacy Statement explains how Jurisphere ("Jurisphere", "we", "us") processes personal data in connection with our legal intelligence platform and legal services.

Jurisphere is committed to protecting your privacy and processes personal data in accordance with applicable data protection laws, where applicable. This statement provides an overview of what personal data we process, for what purposes, and your rights as a data subject.

2.Who Is Responsible for Processing Your Personal Data?

Jurisphere is the data controller for personal data processed in connection with our services. This means that we determine the purposes and means of processing and are responsible for ensuring compliance with applicable data protection laws.

3.Which Personal Data Do We Process and for What Purposes?

3.1 Legal services and platform usage

In connection with providing our services and platform, Jurisphere processes personal data relating to customers, their employees, representatives, counterparties, and other individuals referenced in documents or communications.

We process personal data to the extent necessary for legitimate business and legal purposes, including:

• Establishing and managing customer relationships
• Performing conflict checks, customer due diligence, and compliance obligations (e.g., KYC/AML where applicable)
• Providing legal intelligence, legal services, and supporting licensed legal professionals
• Case management, documentation, and correspondence
• Billing, invoicing, and administrative operations
• IT operations, platform security, logging, and audit trails
• Improving our services through analysis of anonymized and/or redacted materials to enhance workflows, templates, institutional memory, and service quality
• Complying with legal, regulatory, or professional obligations

The categories of personal data processed may include:

• Contact information (name, email address, phone number, role, organization)
• Identification and verification information (e.g., ownership or authority details, where required)
• Case-related information contained in agreements, communications, and supporting documents
• Billing and invoicing information

Special categories of personal data may be processed where necessary for the establishment, exercise, or defense of legal claims, or where otherwise permitted by applicable law.

3.2 Suppliers and business partners

We also process personal data relating to suppliers, consultants, and other business partners. This typically includes contact details such as name, position, telephone number, and email address, as well as other information required to communicate, manage relationships, or perform agreements.

Processing is based on contractual necessity or our legitimate interest in administering business relationships and maintaining professional communications.

4.Who Do We Share Your Personal Data With?

4.1 Data processors

Personal data may be shared with trusted service providers that process data on our behalf. These include:

• Licensed legal professionals engaged for specific matters
• Providers of cloud hosting, infrastructure, authentication, security, and IT systems
• Other technical or operational service providers necessary for delivering our services

We enter into appropriate data processing agreements with such providers to ensure personal data is processed only for specified purposes and protected in accordance with applicable law.

4.2 Other third parties

We do not disclose personal data to third parties except where there is a lawful basis to do so. Such disclosures may occur where:

• Required to provide legal services
• Necessary to comply with legal or regulatory obligations
• Required in connection with legal proceedings or enforcement
• You have provided explicit consent

Examples may include courts, regulators, public authorities, counterparties, and external legal advisors, but only to the extent necessary for a specific matter.

5.Your Rights

Subject to applicable law, you may have the following rights:

• Access: to obtain confirmation and information about how we process your data
• Rectification: to correct inaccurate or incomplete data
• Erasure: to request deletion of personal data
• Restriction: to limit processing in certain circumstances
• Data portability: to receive data in a structured, machine-readable format
• Objection: to object to processing based on legitimate interests
• Complaint: to lodge a complaint with the relevant data protection authority

You may exercise your rights by contacting us at [email protected].

6.How Long Do We Retain Your Personal Data?

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Statement or to comply with legal, regulatory, or professional obligations.

Case-related materials may be retained for extended periods where required to protect customer interests, meet professional standards, or comply with applicable laws.

Anonymized or irreversibly redacted data used for service improvement may be retained longer and cannot be used to identify individuals.

7.How We Protect Your Personal Data

Jurisphere implements appropriate technical and organizational security measures to protect personal data, including:

• Encryption in transit and at rest
• Role-based access controls
• Secure hosting and infrastructure
• Monitoring, logging, and audit mechanisms
• Internal policies and training to ensure ongoing compliance

Security and confidentiality are foundational to our services.

8.Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our services, legal requirements, or operational practices. The latest version will always be made available through our website or platform.