Privacy Policy

1. Who We Are and Our Role

IurisIQ provides software tools to licensed attorneys and law firms. Your law firm is the data controller for all client and case data you store in the platform — you determine what is collected and how it is used. IurisIQ acts as a data processor, handling that data only to provide, maintain, and secure the Service on your behalf.

Client data stored in IurisIQ may constitute attorney work product and be protected by attorney-client privilege. We treat all such data with the highest level of confidentiality and do not use it for any purpose beyond delivering the Service.

2. Information We Collect

Account and Firm Information

When you register for or administer an IurisIQ account, we collect:

• Firm name, address, and contact information
• Attorney bar number(s) and state of licensure
• Names and email addresses of authorized users
• Billing and payment information (processed by our payment processor; we do not store full card numbers)

Case and Client Data

As part of using the Service, you and your staff will enter case files, client personal information, immigration documents, correspondence, intake forms, and other legal matter data. This data belongs to your firm. We process it only to deliver the Service and as otherwise permitted by this Policy or required by law.

Usage and Log Data

We automatically collect information about how you interact with the Service, including:

• Log data (IP address, browser type, pages accessed, timestamps)
• Feature usage patterns (which modules are used, frequency of access)
• Error reports and performance data

Usage data is collected at the firm level and used to improve the platform. It is not linked to individual client records.

Communications

If you contact us for support or otherwise communicate with us, we retain records of those communications to resolve issues and improve our support.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information (receipts, renewal notices)
• Respond to support requests and troubleshoot issues
• Monitor and analyze usage to improve performance and features
• Detect, prevent, and address security incidents or abuse
• Comply with applicable legal obligations
• Communicate service updates and required notices

We do not sell your information or your clients' information to any third party.

We do not use case or client data to train AI models without your express written consent. AI features within the platform operate on your data to assist you; that data is not shared with third-party model providers for training purposes.

4. Government API Data

The Service may integrate with government APIs, including the USCIS API, to retrieve case status information or submit immigration filings on your clients' behalf. Data obtained through such APIs is:

• Handled in accordance with the terms and conditions of each respective government API program
• Stored within your firm's isolated tenant environment
• Not used for any purpose beyond facilitating the specific case action you initiated
• Subject to applicable government data handling requirements

By using government API integrations within IurisIQ, you represent that you have the authority to submit requests on behalf of the applicable clients and that your use complies with all applicable government terms, immigration regulations, and professional responsibility rules.

5. Data Sharing and Disclosure

Service Providers (Subprocessors)

We share data with trusted third-party vendors who help us operate the Service, under written data processing agreements that require them to protect your data:

• Cloudflare, Inc. — Cloud infrastructure, content delivery, DDoS protection, and database services. Data processed in the United States.
• Payment Processor — Billing and subscription management. Card data is tokenized and not stored on our systems.
• Transactional Email Provider — Delivery of account notifications and receipts.

We do not share client case data with subprocessors beyond what is necessary to host and deliver the Service.

Legal Requirements

We may disclose information if required to do so by law, regulation, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of IurisIQ, our customers, or others.

Business Transfers

If IurisIQ is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our Site before your data is subject to a different privacy policy.

6. Data Security

We implement industry-standard technical and organizational measures to protect your data:

• Encryption in transit: All data is transmitted over TLS 1.2 or higher
• Encryption at rest: Data is encrypted at the storage layer
• Single-tenant architecture: Each law firm's data is logically isolated from all other customers
• Access controls: Role-based permissions limit data access to authorized personnel within your firm
• Audit logging: Access to sensitive data is logged and reviewable by firm administrators
• Two-factor authentication: Available and recommended for all accounts

No method of transmission or storage is 100% secure. If you become aware of a potential security incident involving your IurisIQ account, please notify us immediately at [email protected].

7. Data Retention

We retain your account and case data for as long as your subscription is active and as needed to provide the Service.

After account termination or subscription cancellation, we retain your data for 60 days to allow export of your records. After that period, your data is permanently deleted from production systems. Encrypted backups are overwritten within 90 days of the deletion date.

Usage logs and aggregate analytics data may be retained in de-identified form for up to 24 months for product improvement purposes.

8. Your Rights and Choices

As a subscriber, you and your firm have the following rights with respect to your data:

• Access: Request a copy of the data associated with your account
• Correction: Update or correct inaccurate account information at any time through the platform or by contacting us
• Deletion: Request deletion of your account and associated data (subject to legal hold obligations that may apply to your firm)
• Portability: Export your case data in structured, machine-readable formats at any time while your account is active
• Restriction: Request that we limit processing of your data in certain circumstances

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. IurisIQ does not sell personal information. To exercise your California privacy rights, contact us at [email protected].

9. Cookies and Tracking

Our Site and Service use cookies strictly necessary for operation:

• Session cookies: Maintain your login state during an active session
• CSRF tokens: Protect against cross-site request forgery attacks
• Preference cookies: Remember your display and accessibility settings

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics scripts that collect personally identifiable information.

10. Children's Privacy

The Service is intended for licensed attorneys and law firm professionals. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

11. Third-Party Links

Our Site may contain links to third-party websites or services (such as government portals or bar association resources). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (to the address on file for your account) and by posting a prominent notice on our Site at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Security incidents: [email protected]
• Mail: IurisIQ, Attn: Privacy, PO Box 37810, Raleigh, NC 27616

We will respond to verifiable requests within 30 days.