Privacy Policy

1. Information We Collect

JurisMon collects only the minimal data necessary to provide and secure your regulatory monitoring account:

• Account Identifiers: Your work email address, and optionally your name or firm identifier when provided at registration.
• Authentication Credentials: Your password, which is hashed immediately using the salted bcrypt cryptographic hashing algorithm. Your plain-text password is never stored on disk, never written to log files, and never accessible to JurisMon administrators.
• Subscription Status: External subscription reference numbers issued by PayPal, subscription plan identifier, subscription state (such as active, cancelled, or expired), and billing cycle timestamps.

2. Information We Do NOT Collect

Zero Payment Card Data: JurisMon does not collect, receive, process, or store credit card numbers, debit card details, bank account numbers, or CVVs. When you subscribe, all transaction details are entered directly on PayPal's secure, PCI-compliant infrastructure. PayPal only transmits back a subscription identifier, status indicator, and payer email for entitlement verification.

3. Named Third-Party Processors

To deliver the monitoring service, JurisMon utilizes trusted infrastructure providers under strict operational boundaries:

Processor	Role	Data Received
PayPal Inc.	Payment processing & recurring subscription lifecycle	Payer email, plan ID, external subscription tokens, transaction events
Supabase Inc.	PostgreSQL cloud database hosting & persistence	Encrypted/hashed user records, crawl records, subscription statuses
Resend	Transactional email delivery	Recipient email address, 6-digit confirmation and password reset codes

4. Verification & Password Reset Codes

During registration and password recovery, the system generates temporary 6-digit confirmation codes using a cryptographically secure random number generator. These codes:

• Carry a strict 15-minute expiration window;
• Are automatically purged and set to NULL upon successful verification or password reset to prevent code replay attacks;
• Are never stored alongside plaintext passwords.

5. Cookies & Local Storage

JurisMon maintains a strict privacy footprint:

• No Third-Party Analytics: We do not deploy Google Analytics, tracking pixels, or marketing beacons.
• No Advertising Cookies: We do not track users across external websites or sell behavioral data.
• Local Storage: When you log in, your browser stores a standard JSON Web Token (JWT) and basic profile metadata in localStorage under jurismon_token and jurismon_user. This is used solely to authenticate API requests and maintain your active session. You can clear this at any time by logging out or clearing your browser storage.

6. Data Retention

We retain user profile data and subscription entitlement records only as long as your account remains open or as required by applicable commercial accounting laws. If an account is closed or deleted upon request, personal identifiers are permanently removed from production databases.

7. UK & EU GDPR Rights

If you are located in the United Kingdom or the European Economic Area, you hold statutory rights under the UK GDPR and EU General Data Protection Regulation regarding your personal data:

• Right of Access: You may request a copy of the personal information JurisMon holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal details;
• Right to Erasure: You may request deletion of your personal account data ("Right to be Forgotten");
• Right to Restrict Processing: You may request temporary suspension of data processing;
• Right to Data Portability: You may request an export of your account data in a structured, machine-readable format.

To exercise any of these rights, please contact our privacy coordinator using the contact details below. We respond to all verified requests within thirty (30) days without charge.

8. Privacy Contact Route

For questions about this policy, data subject requests, or privacy concerns, please contact:
Email: support@jurismon.com