Privacy Policy

At JudgePrep (operated by JudgePrep, LLC), we understand that attorneys handle sensitive and privileged information. This Privacy Policy explains what information we collect, how we use and protect it, and your rights regarding your data. We have designed our data practices with the confidentiality obligations of legal professionals in mind.

1. Information We Collect

Information You Provide

• Account Information: Email address (required), name (optional), and password (stored securely using bcrypt hashing)
• Case Session Content: Queries and fact patterns you submit during judicial profile consultations
• Payment Information: Processed securely by Stripe—we do not store your credit card numbers

Information Collected Automatically

• Usage Data: Session counts, feature usage, and interaction patterns
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP addresses, access times, and pages viewed

2. How We Use Your Information

We use your information to:

• Provide and maintain the JudgePrep judicial intelligence service
• Process your subscription and payments
• Send transactional emails (verification, password reset, subscription updates)
• Enforce usage limits based on your subscription plan
• Improve the accuracy and quality of our judicial reasoning profiles
• Detect and prevent abuse or fraud
• Comply with legal obligations

We never sell your personal data to third parties.

3. Case Session Data and Attorney Confidentiality

We recognize that attorneys may input information related to client matters when consulting judicial profiles. We have designed our data handling practices accordingly:

• Solo Plan: Case session content is processed in real time and is not retained after the session ends
• Litigator Plan: If you opt in to encrypted case folders, session content is encrypted at rest using AES-256 encryption and is accessible only to your account
• We do not use your case session content to train AI models
• We do not review, analyze, or mine your case session content for any purpose beyond providing the service
• Case session content is never shared with other users or third parties

Important: You are responsible for determining whether information you input is subject to attorney-client privilege or other confidentiality obligations. We recommend using anonymized or hypothetical fact patterns rather than entering personally identifiable client information.

4. Third-Party Services

We use trusted third-party services to operate JudgePrep:

Each of these services has their own privacy policy governing their handling of your data. We select service providers that maintain security practices appropriate for handling professional services data.

5. AI Processing and Your Data

When you consult a judicial profile on JudgePrep:

• Your queries are sent to our AI provider (currently Google Gemini) via their API to generate judicial analysis responses
• Under our API terms with Google, query data sent via the Gemini API is not used to train Google's models
• We do not use your session content to train or fine-tune any AI models
• We may use anonymized, aggregated usage patterns (not session content) to improve our judicial reasoning profiles

6. Data Retention

We retain your data as follows:

• Account data: Retained while your account is active
• Solo plan session content: Not retained after session ends
• Litigator plan encrypted case folders: Retained while your account is active (if you opted in); permanently deleted within 30 days of account closure
• Payment records: Retained for 7 years for tax and legal compliance
• Log data: Retained for up to 90 days

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

7. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using bcrypt (never stored in plain text)
• All data is transmitted over HTTPS/TLS encryption
• Database access is restricted and encrypted at rest
• Encrypted case folders use AES-256 encryption
• Rate limiting protects against abuse
• Regular security reviews and updates

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

All Users

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Export: Receive your data in a portable format

European Users (GDPR)

If you are in the European Economic Area, you have additional rights including:

• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: contract performance (providing the service), legitimate interests (improving and securing the service), and consent (where applicable).

California Users (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your rights

To exercise any of these rights, contact us at support@judgeprep.com

9. Cookies

We use cookies and similar technologies to:

• Essential cookies: Keep you logged in and maintain your session
• Preference cookies: Remember your settings and preferences
• Analytics cookies: Understand how you use our service (via Vercel Analytics)

Most browsers allow you to control cookies through settings. Disabling essential cookies may affect your ability to use JudgePrep.

10. Age Requirement

JudgePrep is a professional service designed for licensed attorneys and legal professionals. You must be at least 18 years old to create an account. We do not knowingly collect personal information from anyone under 18.

11. International Data Transfers

Your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the service at least 30 days before they take effect. The “Effective Date” at the top indicates when the policy was last revised.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

JudgePrep, LLC
Email: support@judgeprep.com

We aim to respond to all requests within 30 days.