Privacy Policy & Data Protection

Aligned with the Electronic Transactions Ordinance 2002 and Pakistan's Personal Data Protection framework.

1. Commitment to Professional Privilege

PakLegal AI respects the sacred nature of lawyer-client privilege. All legal research history, dispute tracking indices, and template metadata remain entirely confidential and isolated.

2. Zero Third-Party Monetization

We do not track, sell, or distribute user search parameters, case law queries, or newsletter registration data to marketing networks.

3. Granular Information Processing

• Anonymized Visitors: Non-identifiable telemetry (session metrics, query counts) to train and optimize retrieval systems.
• Registered Professionals: Storing verified names, Bar Council IDs (where applicable), contact credentials, and private encrypted document objects.
• Financial Processing: All Premium payments are safely routed through Getsafepay. We do not store full payment card details on our servers; we only maintain transaction references.

4. Cryptographic Security & Server Infrastructure

Data is hosted securely using Google Cloud Platform (GCP) data hubs, heavily protected by multi-factor authentication (MFA) and strict IAM rules. All information is encrypted at rest using AES-256 and in transit via TLS 1.3, with active Firestore Security Rules isolating user property.

5. AI Processing Isolation

Prompts passed to the PakLegal AI Assistant are routed through secure, private server-side pipelines. We do not use your private case data or drafts to train public foundational models.

6. Your Statutory Rights

You have the Right to Access, Right to Rectification, Right to Erasure ("Right to be Forgotten" via account termination with a 30-day log purge cycle), and Data Portability (exporting documents to standard formats like PDF/DOCX).

7. Data Controller Contact

For specific inquiries regarding system encryption, manual data removal keys, or privacy rules, please reach out to our Chief Executive and Data Controller, Babar Ali Rai, via our direct support channels.