Last updated: August 2026. How Justis AI collects, uses, and protects your data, how AI features are designed to support lawyers who stay in control of every professional decision, and where responsibility sits between us.
Related: Terms of Service
Your matter content stays yours. We process it only to run the features you ask for, never sell it, and never train foundation models on it without your explicit consent. For that content you are the Data Fiduciary and we act on your instructions, so you decide what is uploaded and you hold the consents behind it. AI output is a draft: verify it before you rely on it.
Justis AI is India's AI-native legal operating system for advocates, law firms, and in-house counsel. It helps legal professionals research, draft, review, and manage matters with greater speed and consistency, while keeping lawyers firmly in control of every professional decision. The platform is operated by Justis AI ("we", "us", or "our"). For privacy matters, contact help@askjustis.com.
This Privacy Policy explains what personal data and matter data we collect, why we collect it, how we use and protect it, and the rights available to you under Indian law, including the Digital Personal Data Protection Act, 2023 (DPDPA). It applies to the Justis AI web application at askjustis.com and related APIs or integrations. Our Terms of Service govern your use of the product, including the mandatory verification duty, indemnity and limitation of liability, and are incorporated into this Policy by reference. Where this Policy and the Terms differ on liability, the Terms prevail.
For your account data, Justis AI is the Data Fiduciary. For the matter content you upload or create — client documents, pleadings, contracts, correspondence and the personal data inside them — you (or your firm or organisation) are the Data Fiduciary and Justis AI acts as a Data Processor, processing that content only on your documented instructions to deliver the features you request. You decide what is collected, uploaded and retained, and on what lawful basis. You are responsible for obtaining any notice, consent or authority required from your clients and from the individuals whose personal data appears in the material you upload, for honouring their rights, and for responding to their requests. We will reasonably assist you with such requests at your cost.
Justis AI is built to make lawyers more productive, not to replace professional judgment. Features may include an AI assistant for drafting and review, case law research (Supreme Court, High Courts, tribunals and regulators), document workspaces and projects, digital-twin style preferences, tabular due diligence, and workflow automation. Outputs are tools to accelerate your practice. You remain responsible for verifying accuracy, citations, and fitness for client work before relying on any result.
We may collect: (a) Account Data: name, email, organisation, role, and authentication credentials; (b) Usage Data: features used, queries, uploads, session timing, and in-product activity; (c) Document & Matter Data: files, contracts, pleadings, briefs, orders, and other content you upload or create; (d) Prompt & Output Data: instructions you give the AI and the responses returned; (e) Preference & Profile Data: style settings and digital-twin related preferences you configure; (f) Technical Data: IP address, device, browser, OS, and error logs; (g) Billing & Plan Data: subscription tier, payment references, and invoicing information processed via our payment provider. We do not ask for, and you should not upload, data you are not authorised to process.
We use account and authentication data to create and secure your workspace. We use usage and technical data to operate, improve, secure and debug the platform, including aggregated and de-identified statistics that do not identify you, your clients or your matters. We use document, matter, prompt, output, and preference data solely to deliver the features you request. We do not sell your matter content. We do not use your confidential matter content to train foundational AI models without your explicit consent. Billing data is processed to manage subscriptions and meet GST and invoicing obligations under Indian law. We may also use and disclose data where necessary to enforce our Terms, establish, exercise or defend a legal claim, or comply with law, a court order or a regulator.
When you use AI features, prompts and relevant document context may be sent to AI model providers for inference so Justis AI can generate drafts, summaries, research aids, or extracted insights. AI systems can be wrong, incomplete, outdated, or confidently incorrect. Justis AI does not ask you to trust AI blindly. Every answer, citation, draft clause, research note, and extracted finding must be independently double-checked and cross-verified by a qualified lawyer before use in advice, filings, negotiations, or client communications. Our design goal is to help you move faster with better starting points, while your professional review remains the final gate. Justis AI accepts no responsibility for any consequence of unverified reliance on an output.
We treat documents and matter content as confidential. Access is limited to you and authorised workspace members; infrastructure and AI sub-processors bound by contractual confidentiality and data-use restrictions; and Justis AI staff only when strictly necessary for support, security or legal compliance, under confidentiality obligations. You are responsible for deciding whether privilege, client confidentiality, court orders, or regulatory rules allow specific matter content to be processed through the service. Justis AI does not provide legal advice on privilege or confidentiality questions, and does not accept liability for any claim of waiver or disclosure arising from content you chose to upload.
Depending on configuration, Justis AI may route prompts and document context to third-party AI providers for inference and, where enabled, embedding providers for semantic retrieval. Providers process inputs under enterprise terms that typically include data-use restrictions, no-training commitments on API inputs, and security controls. By using AI features you acknowledge and consent to relevant content being transmitted to those providers for the purpose of fulfilling your request. We select sub-processors with reasonable care, but we are not liable for their independent acts, omissions or security incidents beyond our reasonable control. You can review model-related settings in Account where available.
We process personal data on the bases of: (a) contractual necessity, to provide the services described in our Terms of Service; (b) legitimate interests, platform security, fraud prevention, and reliability; (c) legal obligation, including the Information Technology Act, 2000, the DPDPA 2023, and GST and accounting rules; and (d) consent, where you opt in to specific uses such as certain communications or future training programmes. For matter content, the lawful basis for the underlying personal data is determined by you as the Data Fiduciary.
Platform data is stored using managed database and object-storage infrastructure, with authentication handled by our auth provider. Hosting may involve cloud regions inside or outside India. Where cross-border transfers occur, we use contractual safeguards consistent with applicable Indian law, including the DPDPA 2023.
Account and usage data is generally retained for the life of your subscription and up to 12 months after closure, unless you request earlier deletion where legally permitted. Document and matter data is retained while your workspace exists and typically purged from live systems within about 90 days after deletion from the interface; backups may linger for a further short period. Billing records are retained for periods required by Indian tax and accounting law (commonly up to 7 years). We may retain data for longer where necessary to comply with law or to establish, exercise or defend a legal claim. Export anything you need before you terminate: we are not liable for data deleted in accordance with these periods.
Under the DPDPA 2023 and applicable Indian law, you may have rights to access a summary of personal data we hold, correct inaccurate data, erase data that is no longer necessary (subject to legal retention), withdraw consent where processing is consent-based, and nominate a representative. Email help@askjustis.com to exercise these rights. We aim to acknowledge within 72 hours and respond within 30 days. Where a request concerns personal data inside your matter content, we will direct it to you as the Data Fiduciary and act only on your instructions. We may verify your identity before acting and may decline requests that are manifestly unfounded, excessive or repetitive.
We apply industry-standard controls such as encryption in transit, encryption at rest, access controls, and audit logging of privileged operations. Security is shared: you are responsible for the strength and secrecy of your credentials, for who you invite into a workspace and at what role, for removing members who leave, for the devices and networks you use, and for deciding what content is appropriate to upload. No system is perfect and no platform can be guaranteed free of vulnerability or attack. We will notify you and, where required, the Data Protection Board of India of a personal data breach affecting you, within the time and manner the DPDPA prescribes. Report a security concern to help@askjustis.com.
So the position is stated plainly in one place: Justis AI is a software tool and not a law firm; it gives no legal advice and forms no advocate–client relationship. Outputs are drafts requiring your independent verification, and the risk of unverified reliance sits with you. You warrant that you have the rights, consents and authority for everything you upload, and you indemnify Justis AI against claims arising from your content, your use of outputs, your failure to verify them, or your breach of law or professional rules. Our liability is limited and capped as set out in Section 15 of the Terms of Service, claims are time-barred as set out there, and disputes are resolved under Indian law by arbitration seated in Patna, Bihar. These protections are a condition of providing the service at the price we provide it.
We use cookies and local storage for authentication and preferences. We may use privacy-respecting analytics to understand aggregate product usage. We do not serve advertising cookies and do not sell data to advertising networks.
Justis AI is for legal professionals and organisations. We do not knowingly collect personal data from anyone under 18. If a minor has registered, contact us and we will delete the account promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated in-app or by email with reasonable notice before they take effect. Continued use after the effective date constitutes acceptance of the revised policy. The version published at askjustis.com/privacy is the operative version at any time.
For anything — privacy queries, data requests, security disclosures, or legal notices — write to help@askjustis.com. See also our Terms of Service for product use, AI verification duties, indemnity and liability terms.