Privacy Policy

• Account Information: Name, email address, password (hashed), profile picture
• Payment Information: Billing address, payment method details (processed by Stripe)
• Debate Content: Questions, context, and tasks you submit for AI analysis
• Communications: Support requests, feedback, and correspondence with us
• Preferences: Language, notification settings, and display preferences

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, debate history, timestamps
• Log Data: IP address, access times, referring URLs, error logs
• Performance Data: Page load times, interaction patterns, crash reports

• Google OAuth: Name, email, and profile picture when you sign in with Google
• Payment Processors: Transaction confirmations and billing status from Stripe
• Analytics Providers: Aggregated usage statistics

When you use jurowl, we process the questions and context you provide through third-party AI services. This data is used to generate debate responses and may be subject to the privacy policies of our AI providers (OpenAI, Google, DeepSeek, xAI).

• Process and facilitate AI debates based on your submissions
• Create and manage your user account
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Send service-related communications and updates

• Analyze usage patterns to improve features and user experience
• Develop new products, services, and functionalities
• Monitor and analyze trends, usage, and activities
• Debug and fix technical issues
• Conduct research and analysis on debate quality and AI performance

We process your data based on:

• Contract Performance: Processing necessary to provide the Service
• Legitimate Interests: Improving services, security, fraud prevention
• Consent: Marketing communications, optional analytics
• Legal Obligation: Compliance with laws and regulations

We share data with trusted third parties who assist in operating our Service:

If you choose to make debates public, the question, AI responses, and final report will be visible to all users. Your email address and account details are NOT shared on public debates.

We may disclose your information if required to:

• Comply with legal obligations or valid legal processes
• Protect and defend our rights or property
• Prevent fraud or investigate potential violations
• Protect the safety of users or the public

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

• Essential Cookies: Required for basic functionality (authentication, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use the Service
• Performance Cookies: Monitor and improve Service performance

You can control cookies through your browser settings. Note that disabling certain cookies may affect Service functionality. For detailed information, see our Cookie Policy.

We currently do not respond to Do Not Track (DNT) browser signals. We treat all users consistently regardless of DNT settings.

• Account Data: Retained while your account is active, plus 30 days after deletion
• Debate Content: Public debates retained indefinitely; private debates retained for account lifetime
• Payment Records: Retained for 7 years for tax and legal compliance
• Log Data: Retained for 90 days for security and debugging purposes
• Analytics Data: Aggregated data retained indefinitely; identifiable data for 26 months

When you delete your account, we will delete or anonymize your personal data within 30 days, except for data we are required to retain for legal or legitimate business purposes.

If you are in the European Union or EEA, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of data processing
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Lodge Complaint: File a complaint with your local data protection authority

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell data)
• Non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

We implement appropriate technical and organizational measures to protect your data:

• Encryption: All data transmitted via TLS/SSL encryption
• Password Security: Passwords are hashed using industry-standard algorithms
• Access Controls: Role-based access and principle of least privilege
• Infrastructure: Secure cloud hosting with regular security updates
• Monitoring: Continuous monitoring for security threats
• Backups: Regular encrypted backups with secure storage

In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law, typically within 72 hours of becoming aware of the breach.