Privacy Statement and Practices

1. Introduction

Welcome to Claris. We are committed to protecting your privacy and handling your data with transparency and care. This Privacy Policy explains how Claris ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our legal technology software-as-a-service platform (the "Service").

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Our Commitment Regarding AI Model Training

Claris does NOT use your personal data or client information to train our artificial intelligence models or any machine learning systems.

Specifically:

•        We do not use the content you upload, create, or process through our Service to develop, improve, or train our AI models

•        Your documents, case files, legal research, and all other client-related information remain confidential and are never incorporated into our machine learning training datasets

•        We implement strict data segregation practices to ensure your data is used solely for providing the Service to you

•        Any AI-powered features within our Service operate on your data in real-time for your immediate use only, without retention for model training purposes

This commitment is fundamental to our service and will not change without explicit prior notice to you and an opportunity to terminate your agreement with us.

3. Information We Collect

3.1 Information You Provide

We collect information you provide directly to us, including:

•        Account Information: Name, email address, phone number, law firm or organization name, billing address, and password

•        Professional Information: Bar admission details, practice areas, and professional credentials

•        Client and Case Data: Documents, legal briefs, research materials, case files, client information, and any other content you upload or create using the Service

•        Payment Information: Credit card details and billing information (processed securely through third-party payment processors)

•        Communications: Messages you send to us, including customer support inquiries and feedback

3.2 Information We Collect Automatically

When you access or use our Service, we automatically collect:

•        Usage Data: Information about your interactions with the Service, including features used, pages viewed, time spent, and actions taken

•        Device Information: IP address, browser type and version, device type, operating system, and unique device identifiers

•        Log Data: Server logs, including access times, error logs, and clickstream data

•        Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities

4. How We Use Your Information

We use the information we collect to:

•        Provide, maintain, and improve the Service

•        Process your transactions and manage your account

•        Respond to your inquiries and provide customer support

•        Send you technical notices, updates, security alerts, and administrative messages

•        Communicate with you about products, services, offers, and events

•        Monitor and analyze trends, usage, and activities in connection with the Service

•        Detect, prevent, and address technical issues, fraud, and security incidents

•        Comply with legal obligations and enforce our terms and policies

•        Carry out any other purpose described to you at the time the information was collected

Important: As stated in Section 2, we do not use your client data or personal information for AI model training or machine learning development purposes.

5. How We Share Your Information

We understand the sensitive nature of legal information. We do not sell your personal information. We may share your information only in the following circumstances:

5.1 With Your Consent

We may share your information when you explicitly consent to such sharing.

5.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as cloud hosting, data storage, payment processing, email delivery, and customer support. These providers are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.

5.3 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

5.4 Legal Compliance and Protection

We may disclose your information if required to do so by law or if we believe such action is necessary to:

•        Comply with legal obligations, court orders, or governmental requests

•        Protect and defend our rights or property

•        Prevent fraud or security threats

•        Protect the safety of our users or the public

5.5 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, or other purposes.

6. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include:

•        Encryption of data in transit and at rest using TLS/SSL protocols

•        Regular security assessments and penetration testing

•        Access controls and authentication mechanisms

•        Employee training on data protection and confidentiality

•        Secure data centers with physical and digital safeguards

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider:

•        The nature and sensitivity of the information

•        The purposes for which we collected and process the information

•        Legal, accounting, or regulatory requirements

•        Whether we can achieve those purposes through other means

Upon termination of your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

8.1 Access and Portability

You have the right to access your personal information and request a copy in a structured, commonly used, machine-readable format.

8.2 Correction

You may update or correct inaccurate or incomplete personal information through your account settings or by contacting us.

8.3 Deletion

You may request deletion of your personal information, subject to certain legal exceptions (e.g., where we are required to retain information for compliance purposes).

8.4 Restriction and Objection

You may request that we restrict the processing of your personal information or object to certain processing activities.

8.5 Opt-Out of Marketing Communications

You may opt out of receiving promotional emails by following the unsubscribe instructions in those emails or by adjusting your account preferences.

8.6 Cookie Preferences

You can manage your cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of the Service.

To exercise any of these rights, please contact us using the information provided in Section 13. We will respond to your request within the timeframe required by applicable law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your jurisdiction. When we transfer your information internationally, we implement appropriate safeguards to protect your information in accordance with this Privacy Policy and applicable law, including:

•        Standard contractual clauses approved by relevant authorities

•        Data processing agreements with third parties

•        Compliance with applicable cross-border data transfer regulations

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

•        Posting the updated Privacy Policy on our website with a new effective date

•        Sending you an email notification (if you have provided your email address)

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Claris Legal Technology

Email: privacy@legalecho.co

Address: 1 Murati Avenue, Die Hoewes, South Africa

Phone: +27 81 789 9469

We will respond to your inquiry within a reasonable timeframe as required by applicable law.

14. Jurisdiction-Specific Provisions

14.1 For Users in the European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

•        Legal Basis for Processing: We process your personal data based on: (a) your consent; (b) performance of a contract; (c) compliance with legal obligations; or (d) our legitimate interests

•        Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your jurisdiction

•        Data Protection Officer: You may contact our Data Protection Officer at dpo@legalecho.co

14.2 For Users in California

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

•        Right to know what personal information we collect, use, and disclose

•        Right to request deletion of your personal information

•        Right to opt out of the sale of personal information (note: we do not sell personal information)

•        Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information in Section 13.

15. Acknowledgment and Consent

By using the Claris Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.