Privacy Policy

Junes Legal Services, Inc. ("CaseOrbit," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform.

1. Information We Collect

1.1 Information You Provide

• Account registration details (name, email, firm name, role)
• Case and matter information you enter into the platform
• Documents uploaded to the document management system
• Payment and billing information (processed via PCI-compliant processor)
• Communications and support requests

1.2 Automatically Collected Information

• Usage data and activity logs for audit purposes
• Device and browser information
• IP addresses and access timestamps
• Performance and error telemetry

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the CaseOrbit AI platform
• Process transactions and manage your account
• Send administrative notices, deadline reminders, and updates
• Respond to support requests and provide customer service
• Comply with legal obligations and enforce our policies
• Detect and prevent fraud, abuse, and security incidents

We do not sell your data. We do not use client matter data to train AI models without explicit consent.

3. Data Security

We implement industry-leading security measures including:

• AES-256 encryption at rest; TLS 1.3 in transit
• Azure Key Vault for cryptographic key management
• Multi-factor authentication and role-based access controls
• Complete audit trail for all data access and modifications
• SOC 2 Type II certification
• Regular third-party penetration testing

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account termination, you may request data export within 90 days. After that period, data is securely deleted in accordance with our data destruction policy.

5. Sharing of Information

We may share information with:

• Service providers who assist in platform operations (cloud hosting, payment processing) under strict data processing agreements
• Legal requirements — when compelled by law, court order, or governmental authority
• Business transfers — in connection with a merger, acquisition, or sale of assets, with advance notice to users

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict certain processing
• Data portability

To exercise these rights, contact us at privacy@caseorbit.app.

7. Cookies

We use essential session cookies for authentication and optional analytics cookies. You may disable non-essential cookies in your browser settings. We do not use third-party advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email to registered users and posted prominently in the platform at least 30 days before taking effect.

9. Sub-processors

We use a limited number of service providers to operate the Platform, for functions such as hosting, storage, email delivery and payment processing. We maintain a current list of these sub-processors and make it available on request. Each is engaged under written terms imposing data-protection obligations no less protective than those we owe you, and we remain responsible for their acts and omissions as if they were our own. We will give you at least thirty (30) days' notice before adding or replacing a sub-processor that handles your data. If you object on reasonable data-protection grounds within that period, we will work with you in good faith to find an alternative; if none is available, you may terminate the affected part of the service without penalty and receive a pro-rata refund of any fees paid in advance for it.

10. Our Role and Your Instructions

For the personal data contained in your matters, your firm decides what is collected and why, and we handle it on your behalf — you are the controller and we are the processor, or the equivalent roles under the data-protection law that applies to you. We process that data only on your documented instructions, including these terms, unless law requires otherwise, in which case we will tell you before processing unless that law prohibits it. Our personnel are bound by confidentiality. We maintain technical and organisational measures appropriate to the risk, assist you in responding to individuals exercising their rights, and notify you without undue delay after becoming aware of a breach affecting your data, with the information you need to meet your own notification duties. At the end of the service we return or delete the data as section 16 of the Terms describes. On reasonable request we make available the information you need to demonstrate compliance, and we will cooperate with audits you reasonably require.

11. Contact

We use a limited number of service providers to operate the Platform, for functions such as hosting, storage, email delivery and payment processing. We maintain a current list of these sub-processors and make it available on request. Each is engaged under written terms imposing data-protection obligations no less protective than those we owe you, and we remain responsible for their acts and omissions as if they were our own. We will give you at least thirty (30) days' notice before adding or replacing a sub-processor that handles your data. If you object on reasonable data-protection grounds within that period, we will work with you in good faith to find an alternative; if none is available, you may terminate the affected part of the service without penalty and receive a pro-rata refund of any fees paid in advance for it.

CaseOrbit AI Privacy Team
Junes Legal Services, Inc.
123 Legal Innovation Drive, Suite 800
New York, NY 10001
Privacy_Sec9_Line5