Privacy Policy

Effective date: February 17, 2026.

This Privacy Policy describes how Intelitive processes personal data in connection with JURIXA Automations. JURIXA is designed for legal operations, consultation scheduling, intake coordination, and administrative workflows, and follows data-minimization principles.

1. Scope and roles

Depending on context, Intelitive may act as a data processor (on behalf of a law office or legal-services organization) or as a controller for account, billing, and service-security operations.

2. Data categories we process

• Account and organization data: email, role, organization/domain settings
• Operational scheduling metadata: consultation references, timestamps, statuses, office/location IDs
• Messaging metadata: channel, delivery state, consent flags, routing events
• Security and audit records: login events, permission changes, system logs
• Billing data: subscription state, invoices, payment status via Stripe

JURIXA is not intended to store privileged legal memos, evidence files, or full case documents as core product scope.

3. Cookies and similar technologies

JURIXA uses cookies/local storage to operate securely and improve usability.

• Strictly necessary cookies: authentication/session integrity, CSRF protection, security controls
• Preference storage: user settings such as language preference
• Operational telemetry (if enabled): service-quality and reliability analysis with minimized identifiers

You can control browser cookie settings, but blocking essential cookies may affect core login and security behavior.

3.1 Cache and local browser storage policy

To avoid users seeing stale content, JURIXA sends explicit browser cache headers for all authenticated and dashboard-facing pages and similar app pages. This disables local reuse of those pages after navigation and prevents outdated legal, support, and operational information from being kept in cache.

• HTML application pages use short-term cache directives: no-store, no-cache, must-revalidate.
• Static files such as images, JavaScript, CSS, and fonts follow normal static asset caching.
• Essential authentication and organization pages are prioritized for fresh response headers after login and role/permission changes.

If needed, users do not need manual cache clearing for normal operation: each visit gets a fresh secure response from the app, while assets are refreshed on deployment through standard static updates.

4. GDPR legal bases

Where GDPR applies, legal bases may include contract performance, legitimate interests (security, fraud prevention, reliability), legal obligations, and consent where required.

5. Data retention and minimization

We retain data only as needed for service delivery, legal obligations, and security operations. Operational free-text handling is minimized by design and subject to retention controls.

6. Data sharing and subprocessors

Data may be processed by vetted subprocessor services required for operation (for example, infrastructure, billing, and messaging providers). Processing is limited to necessary service functions.

7. International transfers

If data is transferred across jurisdictions, Intelitive applies appropriate safeguards required by applicable data protection law.

8. Security measures

JURIXA applies defense-in-depth security controls, including encrypted transport, access controls, audit logging, rate limiting, and hardened infrastructure configurations.

9. Data subject rights (GDPR)

Where applicable, data subjects may request:

• Access to personal data
• Rectification of inaccurate data
• Erasure (right to be forgotten), subject to legal constraints
• Restriction or objection to processing
• Data portability where technically feasible
• Withdrawal of consent where processing is consent-based

You may also lodge a complaint with your competent data protection authority.

10. Organizational controls

Customer organizations are responsible for configuring role access, consent practices, and lawful communication workflows in their environment.

11. Policy updates

We may update this Privacy Policy periodically. Material updates become effective on the posted effective date.

12. Contact and requests

Privacy and data-rights requests can be submitted through your organizational support channel or official Intelitive contact point.