Privacy Policy

1. Introduction

JuriStack (Pty) Ltd ("we", "our", or "us") is committed to protecting your privacy and complying with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our legal practice management platform ("Service").

By using our Service, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when registering for and using the Service:

• Contact information (name, email address, phone number)
• Professional information (law firm name, practice number, role)
• Account credentials (email and encrypted password)
• Billing information (processed securely through PayFast)

2.2 Client Data

As a practice management platform, you may store your clients' information on our Service:

• Client names and contact details
• Identity numbers (for FICA compliance)
• Matter and case information
• Documents and correspondence
• Trust account records
• Billing and payment records

You are the responsible party for your clients' personal information under POPIA. We act as an operator processing this information on your behalf.

2.3 Automatically Collected Information

• Device and browser information
• IP address and location data
• Usage patterns and feature interactions
• Error logs and performance data

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain the Service
• To process your subscription and payments
• To communicate with you about your account and the Service
• To provide customer support
• To improve and optimize the Service
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. Legal Basis for Processing

Under POPIA, we process your personal information based on:

• Consent: When you create an account and agree to our terms
• Contract: To fulfil our subscription agreement with you
• Legal obligation: To comply with applicable laws and regulations
• Legitimate interest: To improve our services and ensure security

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure cloud infrastructure (Microsoft Azure)
• Regular security assessments and updates
• Access controls and authentication requirements
• Audit logging of system access
• Employee security training

While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

• Service providers: With trusted third parties who assist in operating our Service (e.g., cloud hosting, payment processing)
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize disclosure

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Upon account termination:

• You have 30 days to export your data
• After 30 days, data is permanently deleted
• Some information may be retained longer to comply with legal obligations

8. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Objection: Object to processing of your information
• Portability: Request your data in a portable format
• Withdraw consent: Withdraw previously given consent

To exercise these rights, please contact our Information Officer at law@juristack.co.za.

9. Cross-Border Data Transfers

Our Service is hosted on Microsoft Azure servers. Data may be processed in data centers located outside South Africa. We ensure that any cross-border transfers comply with POPIA requirements and that adequate safeguards are in place to protect your information.

10. Cookies and Tracking

We use essential cookies to maintain your session and ensure the Service functions correctly. We do not use third-party advertising cookies. You can control cookie settings in your browser, but disabling cookies may affect Service functionality.

11. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our Service. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Regulator if you believe your rights have been violated.

14. Information Regulator