jLaw Privacy Policy
Last updated: 12 November 2026
jLaw is a legal technology platform operated by Jirtuu Software Labs (JSL) ("JSL", "we", "us", or "our"). This Privacy Policy explains how we handle personal information when you visit jlaw.et, use jLaw, request a demonstration, or contact our team.
Our headquarters are at 22 Town Square Mall, Addis Ababa, Ethiopia. You can contact us about privacy at [email protected]. Our company website is jirtuu.com.
1. Scope and responsibilities
This policy covers the jLaw service operated by JSL and related communications. Independently operated installations and third-party websites have their own privacy arrangements.
JSL acts as a data controller when it decides why and how to process information for account administration, demo requests, customer support, security, and its business relationship with customers.
When a law firm or another organization uses jLaw to process client documents and matter information on its instructions, that organization normally acts as the data controller and JSL acts as its data processor. The organization's privacy notices and our applicable service and data-processing agreements also govern that processing. An individual can be covered by this policy even without a jLaw account, for example when their information appears in a document uploaded by a customer.
2. Information we handle
The information involved depends on the features you use and what you or your organization provide.
| Category | Examples |
|---|---|
| Account and organization information | Name, email address, profile details, organization membership, invitations, roles, preferences, and authentication records. |
| Client and matter content | Documents, attachments, matter details, correspondence, notes, comments, and information about clients, counterparties, witnesses, employees, or other people mentioned in that material. |
| AI interactions and work product | Prompts, conversation history, documents or excerpts supplied for analysis, search queries, generated drafts, summaries, review results, and feedback you submit. |
| Demo requests and support | Your name, email address, phone number, optional notes, correspondence with our team, and records of our response. |
| Technical and security information | IP addresses, browser and device information, request times, authentication events, service errors, and identifiers used to investigate faults or abuse. The fields retained depend on the system and its configuration. |
| Connected-service information | Authorization details and content retrieved or sent through integrations that you or your organization enable. |
We receive information directly from you, from authorized members of your organization, from connected services, and from your use of jLaw. Research features may also retrieve material from public legal sources. Some records, such as analysis results and service diagnostics, are generated while providing the service.
Information needed to sign in, secure an account, or carry out a requested feature is necessary for that function. If you do not provide it, that function may be unavailable. Optional information, such as additional demo-request notes, is not needed to browse the public website.
3. How we use information
We use information to:
- Create and manage accounts, authenticate users, and administer organization access.
- Store and organize matter content, support collaboration, and carry out document processing and user-directed AI tasks.
- Deliver requested drafts, searches, summaries, reviews, and exports.
- Respond to demo requests and support enquiries, including sending confirmations and follow-up messages.
- Send account, invitation, security, and service communications.
- Diagnose errors, maintain reliability, investigate misuse, and protect the service and its users.
- Administer customer relationships and comply with applicable legal obligations.
Depending on the activity, our legal basis is consent, a contract with you or steps you request before a contract, a legal obligation, or legitimate interests balanced against your rights. Organization-controlled content also requires the organization's lawful instructions. Sensitive information requires an additional permitted basis. These grounds are addressed in Articles 7–9 of Ethiopia's Personal Data Protection Proclamation No. 1321/2024.
This policy is a notice, not a request for blanket consent. Where consent is needed, it must be requested separately. Requesting a demo does not by itself subscribe you to unrelated promotional messages. You can ask us to stop promotional communications at any time; essential account and security messages may still be necessary.
4. Client confidentiality and sensitive information
Legal documents may contain highly sensitive information, including health details, identification information, financial circumstances, criminal allegations, or information about children. Upload only information you are authorized to provide and that is needed for the intended task. Avoid including unnecessary identifiers or confidential material in demo-request forms or ordinary support emails.
Your organization is responsible for assessing its professional duties, client instructions, and the suitability of the enabled features for particular matters. The use of jLaw does not itself establish that a disclosure is authorized or that legal professional privilege is preserved in every jurisdiction.
5. AI processing
When you use an AI feature, jLaw processes your instructions and relevant context to produce a response. That context can include conversation history, document text or excerpts, and results retrieved by tools. Depending on the feature and model configured for your organization, this information may be transmitted to an external AI provider or a connected service. Information sent to a provider can include personal information contained in the material you submit.
The providers available to a workspace depend on its configuration. Their processing, retention, and any permitted use of submitted information depend on the applicable provider agreements and settings. Contact JSL or your organization administrator for the providers and data-handling terms that apply to your workspace; this policy does not promise that every provider offers identical retention or model-training restrictions.
Processing content to answer a request is distinct from using that content to train or fine-tune a model. This policy does not grant permission to reuse your client or matter content for unrelated model training. Any additional purpose requires its own assessment, notice, and lawful basis.
jLaw's AI features assist users with research, drafting, and review. They produce suggestions that require human checking and may contain inaccurate personal information. They are not intended to make final decisions about a person's legal rights or other significant interests. If you believe an output contains inaccurate information about you, contact us or the organization responsible for the matter.
6. Who may receive information
Information may be disclosed to the following recipients for the purposes described in this policy:
- Your organization and authorized collaborators. Access depends on organization roles, workspace permissions, and sharing choices. Organization administrators can manage membership and applicable data policies. Leaving an organization does not necessarily delete its matter records.
- Service providers. Hosting, database, file-storage, backup, email, security, and diagnostic services process information needed to operate jLaw. Cloudflare services may be used for file storage, content delivery, and Turnstile anti-abuse checks. If error reporting is enabled, a diagnostic provider may receive filtered technical events and correlation identifiers.
- AI providers and enabled integrations. These receive the information needed for the features described in Section 5 and the integrations you or your organization authorize. A connector's permissions determine what it can retrieve or send.
- Authorized JSL personnel and advisers. Access may be needed to provide support, operate the service, investigate incidents, or address legal and business matters, subject to the applicable access and confidentiality arrangements.
- Authorities and other legally entitled recipients. Disclosure may be necessary to meet a binding legal requirement, respond to lawful process, or establish or defend legal claims.
- A successor business. Information may be involved in a merger, acquisition, or business transfer, subject to applicable confidentiality and data-protection requirements and any required notice.
We do not sell or rent personal information. Sharing data with a provider to carry out a requested service is separate from making it available for that provider's independent purposes. Provider-specific roles and terms must be considered when selecting an integration.
Disconnecting an integration prevents future authorized access through that connection, but does not automatically erase material already transferred to the connected service. Its retention and deletion arrangements also apply.
7. Cookies, browser storage, and diagnostics
jLaw uses cookies for authentication and session security, and browser storage to remember settings such as workspace and model preferences. Blocking or clearing this storage may sign you out or prevent features from working.
The demo-request form uses Cloudflare Turnstile to help distinguish legitimate requests from abuse. The check can involve your IP address, browser information, and challenge results. Cloudflare explains its handling of this information in its privacy policy.
Where error reporting is enabled, jLaw is designed to send filtered technical diagnostics rather than document contents or AI conversations. Diagnostic identifiers may still be associated with internal records, so these reports should not be assumed to be anonymous. Infrastructure providers may also process network information needed to deliver and protect the service.
You can manage cookies and site storage through your browser. If optional analytics or advertising technologies are introduced, we will explain their use and provide any consent or choice required before enabling them.
8. Storage locations and international processing
JSL is based in Ethiopia. Depending on the deployed infrastructure and enabled services, personal information may also be processed outside Ethiopia, including by AI, storage, email, or security providers. Contact [email protected] for the providers, processing locations, and transfer arrangements relevant to your organization.
Ethiopian law requires local storage of locally collected personal data and prior regulatory approval for overseas transfers of sensitive personal data. Other transfer conditions also apply. A user's acceptance of this policy does not replace those requirements. See Articles 18–22 of the Personal Data Protection Proclamation.
9. Retention and deletion
Retention depends on the type of information, its purpose, your organization's instructions, and applicable legal requirements:
- Account records are kept while needed to administer access and the customer relationship. Some records may remain after closure for security, disputes, or legal obligations.
- Matter content and AI history remain subject to the organization's retention and deletion policies. Removing a user's access or deleting their account may leave organization-owned or shared work in place. Departure archives may allow an organization to recover or reassign work before it is deleted.
- Demo and support records are retained while needed to respond, manage the enquiry or customer relationship, and address related issues.
- Security and diagnostic records are retained according to the investigation, operational need, and the relevant provider's configuration.
- Backups and recovery copies may retain information after it is removed from active systems until the applicable backup-retention and cleanup process completes. Deletion from the live application does not mean every backup copy is erased immediately.
Legal preservation requirements may delay deletion of particular records. Contact us for the retention periods and deletion arrangements applicable to your account or organization, or to request deletion. Export and deletion controls in the application may depend on your role and organization policy; those controls do not replace your statutory privacy rights.
10. Security
jLaw uses controls designed to protect information, including authentication, role-based access, secure connections, and protections around file access and service credentials. Backup and diagnostic controls depend on the deployed configuration.
Security also depends on users protecting their accounts, choosing appropriate sharing settings, and reporting suspected misuse. No online service can guarantee complete security. If a personal-data incident occurs, we will investigate and provide notifications required by applicable law and our customer agreements.
11. Your rights and choices
Subject to applicable conditions and exceptions, you can request access, correction, erasure, restriction, or portability of your personal information; object to processing; withdraw consent; and seek human intervention concerning a qualifying automated decision. Withdrawal does not invalidate earlier lawful processing. You can complain to the Ethiopian Communications Authority. See Articles 8 and 24–32 of the Personal Data Protection Proclamation and the Authority's website.
To make a request, email [email protected] with the subject "Privacy request". Describe the request and provide enough information to identify the relevant account or records. We may need proportionate identity or authorization verification. Do not send passwords, authentication codes, or unrelated client documents.
We will respond without unnecessary delay and within applicable legal time limits. Requests are handled without charge where the law requires. If we cannot fulfil a request, we will explain the applicable reason and available next steps.
For information controlled by your law firm or another organization, you can also contact that organization directly. When JSL acts as its processor, we will assist with or direct the request to the responsible controller as appropriate. You do not need a jLaw account to raise a concern about your personal information.
12. Children and information about children
jLaw is intended for professional use and is not directed at children. Information about a child may nevertheless appear in an authorized legal matter. Such information requires particular care and an appropriate lawful basis; a child's information should not be included merely because an adult can access the platform.
If you believe a child has provided information directly to jLaw without appropriate authorization, or have a concern about a child's information in the service, contact us so that we can assess and address it.
13. Changes to this policy
We may update this policy as jLaw and its data practices change. The current version will be available at jlaw.et/privacy, with an updated revision date. We will provide additional notice of material changes when required, and seek separate consent where necessary. Publishing a revised policy does not by itself authorize an incompatible new use of previously collected information.
14. Contact JSL
For privacy questions, requests, or concerns, contact:
Jirtuu Software Labs (JSL)
- Attention: jLaw Privacy
- Email: [email protected]
- Headquarters: 22 Town Square Mall, Addis Ababa, Ethiopia
- jLaw: jlaw.et
- Company website: jirtuu.com