JuriOS Privacy Policy

What this policy says — in five points

We collect only what we need to run JuriOS. We don't collect anything to sell to advertisers.

Your data is stored in Canada and never leaves Canada. We are not subject to US data access laws.

We do not sell your data, share it with advertisers, or use it to train AI models.

You own your data. You can export it, correct it, or delete it at any time.

If you cancel, your data is accessible for 90 days and then permanently deleted — except trust data retained as required by Law Society regulations.

Section 1

What we collect.

We collect three categories of information. Here is exactly what's in each.

Account data

Name, email address, firm name, billing address, payment method (tokenized — we never store card numbers), and your plan selection. This is the minimum required to create and maintain your account.

Practice data

Everything you enter into JuriOS: client names, matter details, time entries, trust account transactions, invoices, documents, notes, and billing rates. This is your data. We are a custodian of it, not its owner.

Usage data

How you use JuriOS: which features you use, how often, and what errors you encounter. This is collected in aggregated, anonymized form to improve the product. It does not include the content of your matters or client names.

What we explicitly do not collect

We do not sell your data to anyone, for any purpose

We do not use your practice data to train AI models

We do not share data with advertisers or data brokers

We do not use tracking cookies or advertising pixels

We do not collect data from your clients directly

Section 2

How we use your data.

There are four purposes for which we use the information we collect. We do not use your data for any purpose beyond these four.

To provide the service. Running your JuriOS account, processing your trust transactions, generating your Law Society reports, and delivering invoices to your clients. This is the primary purpose.

To improve the service. We analyze aggregated, anonymized usage patterns to understand which features are most valuable and where the product has friction. We never use identifiable client data for this purpose.

To communicate with you. Sending invoices, product updates, security notices, and support responses. You can opt out of non-essential communications at any time in your account settings.

To comply with legal requirements. If we are required by law to retain or disclose data — for example, under a valid court order from a Canadian court — we will comply and notify you to the extent we are legally permitted to do so.

Section 3

Where your data is stored.

All JuriOS data is stored in Canadian data centres. Primary storage is in Toronto, Ontario. Disaster recovery backups are in Montreal, Quebec. No data processing occurs outside Canada.

This is significant for your professional obligations. Client data held outside Canada may be subject to foreign access laws — including US laws that allow government access to data held by US companies regardless of where the data is stored. JuriOS's Canadian-only infrastructure eliminates this risk.

For technical details on our data residency controls, see our Security page.

Section 4

How long we keep your data.

Active account: Your data is retained for as long as your account is active. We do not delete data from active accounts.

After cancellation: Your data remains accessible and exportable for 90 days. After 90 days, all data is permanently and irreversibly deleted from our systems, including all backups.

Trust account data: Law Society regulations require trust account records to be retained for a minimum of 7 years. JuriOS retains trust data for 7 years from the date of each transaction, even after account cancellation, unless you provide written instruction that your regulatory obligations permit earlier deletion.

Billing records: Retained for 7 years as required by Canadian tax law.

Section 5

Your rights over your data.

Under PIPEDA and Canada's privacy framework, you have the following rights. All of these can be exercised without contacting us — they are available directly in your account settings.

Access your data

Download a complete export of all your practice data, client records, trust transactions, and billing history at any time.

Available in: Settings → Export

Correct your data

Update any account information or practice data directly within JuriOS. Changes are reflected immediately.

Available in: All record screens

Delete your data

Request complete deletion of your account and all associated data. We will action deletion requests within 5 business days.

Email: privacy@jurios.io

Data portability

Export your complete data set in machine-readable formats (CSV, JSON) at any time. No proprietary lock-in.

Available in: Settings → Export

Section 6

Third-party services we use.

We use a small number of sub-processors to deliver specific functions. Each receives only the minimum data required for that function. None receive client matter data or trust account information.

Service	Purpose	Data received	Location
Stripe (Canadian entity)	Payment processing	Payment amount, payment token only. No client data.	Canada
Postmark	Transactional email	Recipient email address, email content only.	Canada
Internal monitoring	Error tracking	Anonymized error logs only. No user data.	Canada

We do not use: Google Analytics, Facebook Pixel, Mixpanel, HubSpot, Salesforce, Intercom, or any other third-party analytics, marketing, or CRM platform that would receive identifiable user data. No advertising networks have access to JuriOS data.

Section 7

Cookies.

JuriOS uses session cookies only. A session cookie maintains your login state while you're using the application. It expires when you close your browser or when your session times out (default: 8 hours, configurable).

We do not use: tracking cookies, advertising cookies, cross-site cookies, or any cookies that share data with third parties. We do not use cookie banners because we have nothing to consent to beyond functional session management.

Section 8

Changes to this policy.

If we make material changes to this policy, we will provide 30 days notice by email to all account holders before the changes take effect. "Material" means changes that affect how we collect, use, or share your data — not minor clarifications of language.

The version history of this policy is maintained and available on request. The version number and last-updated date are shown at the top of this page.

Section 9

Contact our privacy team.

Privacy questions get answered by a real person, not an automated response. We respond within 2 business days.