Privacy policy

Version 2026-11-06 · last updated 6 November 2026

Juriset is a product of Rocky Labs, which is responsible for the personal information described here. We hold very little of it. The rules we publish are public records, and the Service is built so that you never need to send us information about the people you serve.

What we collect

Account. Your email address, to send sign-in links and notices; your plan; the time you accepted the terms and which version. Payments, when paid plans are available, are handled by Stripe: we keep a Stripe customer reference, not your card details.
API use. For each request made with a key: which key, which endpoint, the response status, the time and how many lookups it counted. We use it to apply your plan, show your usage and keep the Service running.
Requests without a key. To apply the keyless limits we count requests per caller using a fingerprint: your IP address combined with a random value that changes every day and is thrown away after that. We cannot turn a fingerprint back into an address once the day's value is gone, and the counters are deleted after two days.
Reports. If you report an issue, the message, the rule it is about, the source you suggest and, only if you choose to give it, your email address so we can reply. Please do not include personal details about anyone. A report is kept with the review that followed it, as part of the audit trail.
Website visits. Privacy-friendly analytics that set no cookies and build no profile of you, and error reports that can include the page address and technical details of your browser. We do not use advertising or tracking cookies.
Network and server logs. Cloudflare, which sits in front of the website and API, and our hosting provider handle your IP address to deliver the Service and protect it from abuse.

What we do not collect

No case data. An API request names a jurisdiction and a rule type; it carries no information about a person, and we do not want it to. Juriset does not run rules against your cases, so it never sees them. If you embed a version id in your own records, that stays with you.

Cookies

Visitors get no cookies. If you sign in to your account, we set one strictly necessary cookie that keeps you signed in; it is not readable by scripts and is removed when you sign out or it expires.

Who handles it for us

We use service providers to run Juriset. They handle your information only to provide their service to us: Supabase (database), Railway (hosting), Cloudflare (network and storage of source copies), Resend (sign-in and notice emails), Stripe (payments), Sentry (error reports) and PostHog (analytics). Two AI companies, Anthropic and Google, read the public government pages we cite so that we can extract and verify rules; those pages contain no information about you. We do not sell personal information and we do not share it for advertising.

How long we keep it

Account information stays while your account is open and for as long afterwards as we need it for billing, security and our records. Keyless counters are deleted after two days. Rule versions, source copies and audit results are permanent public records and contain no personal information about customers.

Your choices

You can ask us to show you what we hold about you, correct it, delete your account, or remove the email from a report you sent. Write to [email protected]; we will reply and act within a reasonable time. If you are in a place whose law gives you further rights over your information, we will honour them.

Children

The Service is for businesses and developers and is not directed at children.

Changes

We will change this policy when what we collect changes. The version and date are at the top; we will tell account holders by email about material changes.