Privacy & trust at PakLawAI

We collect the minimum data needed to run a legal directory and consultation marketplace — and we treat it like a Pakistani user’s data should be treated, not like a US growth experiment.

• Right to export your data

  One click on /account/data-export delivers a downloadable JSON archive of your chats, bookings, payments and uploads — nothing held back.

• Right to delete your account + data

  One click on /account/delete starts a 30-day grace period during which you can change your mind. After 30 days everything is purged.

• 30-day auto-delete of uploaded files

  Documents you upload to share with a lawyer are auto-deleted from R2 storage 30 days after the matter closes. You can extend or download anytime.

• Tokenised payments only

  We never store raw card numbers, JazzCash PINs, or Easypaisa credentials. All sensitive payment data is held by the payment provider (Stripe / JC / EP) under their PCI / SBP licence.

• No third-party advertising trackers

  Public PakLawAI pages do not load Facebook Pixel, Google Ads tag, or any advertising tracker. We do use first-party analytics to fix bugs and measure free → paid conversion.

• Audit log on every admin access

  When a PakLawAI moderator views your case or refund — for verification, escrow, or dispute handling — that action is logged. Logs are reviewed monthly.

• Sentry + Cloudflare logs only

  Application errors are shipped to Sentry (PII-scrubbed) and edge requests to Cloudflare Logs. Both are retained for 30 days, then deleted.

• No PDPA in Pakistan — we hold ourselves to GDPR anyway

  Pakistan does not yet have a comprehensive data-protection law. We voluntarily commit to GDPR-equivalent rights for every user, anywhere.

Where to reach us