Privacy Policy

• Account information you provide: name, email, province, hashed password (we never store plain-text passwords).
• Profile information for lawyer accounts: bar enrollment number, professional details, optional phone number.
• Chat content: legal queries, uploaded documents, and assistant replies you choose to retain.
• Payment records: provider transaction IDs and amounts. We do NOT store full card numbers — these stay with the payment processor.
• Usage telemetry: pages visited, features used, credits consumed, error logs, approximate device and browser fingerprint.
• Cookies: pla_anon_id (anonymous session continuity, signed) and auth_token (signed-in sessions only).

• To deliver core features: chat, document analysis, lawyer matching, billing, and support.
• To prevent fraud, abuse, and credit-system gaming.
• To improve the Service quality, including measuring AI accuracy via aggregate, anonymized signals.
• To comply with Pakistani law, court orders, and lawful requests by public authorities.
• To send transactional emails (receipts, alerts, account changes). Marketing emails are opt-in only.

We do NOT sell your data. We do NOT train third-party foundation models on your private chat content. We may use aggregated, de-identified usage signals to improve our retrieval and ranking systems.

You can request deletion of your stored chat history at any time from Account → Privacy.

We share data only with vetted sub-processors that help us run the Service:

• Cloudflare — hosting, edge compute, R2 object storage, KV cache.
• Stripe / Easypaisa / JazzCash — payment processing.
• OpenAI / Anthropic — AI model providers (queries are sent without your name or email; content is not used to train their public models).
• Email delivery provider — for transactional and authentication emails.
• Sentry — error monitoring (PII is scrubbed on the client and server).

• Active account data is retained while the account is active and for 90 days after deletion (to honor financial-record obligations).
• Chat history is retained until you delete it or close your account.
• Anonymized usage logs are retained up to 24 months.
• Transaction records are retained for the period required by Pakistani tax law (currently 6 years).

To exercise any of these rights, email privacy@paklawai.pk from the address registered on your account. We respond within 30 days.

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to update inaccurate information.
• Deletion — close your account and erase associated data, subject to financial-record retention.
• Portability — export your chat history and account data in machine-readable form.
• Withdrawal of consent — revoke marketing consent at any time without affecting service access.

We use TLS in transit, encryption at rest, hashed passwords with modern KDFs, signed cookies, role-based access control, and audit logging on admin actions. No system is 100% secure — promptly notify privacy@paklawai.pk if you suspect your account or data has been compromised.

• pla_anon_id — anonymous-session continuity, signed, expires after 30 days.
• auth_token — signed-in session, HttpOnly, expires when you log out.
• No third-party advertising or tracking cookies are set by PakLawAI.

PakLawAI is intended for users 18 and older. We do not knowingly collect data from children. If you believe a child has registered, contact privacy@paklawai.pk and we will delete the account.

We may update this Policy from time to time. Material changes will be announced by email and an in-app banner at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Questions about this Policy or your data can be sent to privacy@paklawai.pk. We respond within 7 working days.