Privacy Policy

1. Introduction

Juralex (“we”, “our”, or “us”) is a project owned and operated by Brandsparkle Sp. z o.o. We are committed to protecting your privacy and comply fully with the GDPR (EU) 2016/679, the EU AI Act (2024/1689), and Polish data protection laws.

2. Data Controller & Company Information

Until a dedicated Juralex legal entity is formed, the Data Controller is:

3. Information We Collect

We collect information you voluntarily provide:

• Contact Data: Name, email, phone.
• Professional Data: Firm name, Bar ID (ORA/OIRP), practice area.
• Case Data: Documents and inputs you upload for analysis.

4. AI Processing & Transparency (2026 Update)

In accordance with the EU AI Act:

• Interaction: You are interacting with an AI system.
• No Training: We do not use your uploaded case data or private legal research to train our AI models or third-party models.
• Marking: AI-generated content is marked as such in machine-readable formats.

5. How We Use Your Information

We use data to:

• Provide AI-powered legal analysis.
• Match clients with verified legal professionals.
• Comply with mandatory AI safety logging.

6. Legal Basis for Processing

• Consent: For marketing and waitlists.
• Contract: To provide the service.
• Legal Obligation: Maintaining Article 26 EU AI Act logs for 6 months.

7. Data Retention

We retain personal data for as long as needed (max 24 months for inactive accounts). Mandatory AI activity logs are kept for 6 months as required by law.

8. Data Security & The Sovereign Vault

• Location: All data is stored on servers within the European Union.
• Zero-Access: We use end-to-end encryption. Brandsparkle Sp. z o.o. cannot read your unencrypted case files.
• Encryption: SSL/TLS 1.3 for all transmissions.

9. Your Rights Under GDPR

You have the right to access, correction, erasure, and data portability. You also have the right to withdraw consent at any time.

10. Right to AI Explanation

Under 2026 regulations, you have the right to request an explanation of how our AI reached a specific conclusion or summary if it affects your legal standing.

11. Cookies

We use Essential Cookies for security and Session Cookies for account functionality. We do not use third-party tracking cookies without your explicit consent.

12. Third-Party Sharing

We do not sell data. We only share data with vetted EU-based infrastructure providers (e.g., server hosting) under strict Data Processing Agreements (DPAs).

13. International Transfers

Data remains in the EEA. We do not transfer data to jurisdictions (like the US) that do not provide an adequate level of protection under the “Cloud Act.”