Privacy Policy

The responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA) is JUSTICE 4 ME (Pty) Ltd (CIPC Reg. No. 2026/407259/07), trading as JUSTICE 4 ME at justice4me.co.za.

Contact: info@justice4me.co.za

• Account data: name, email, phone (optional), password hash (we never store plain passwords)
• Matter data: intake answers, uploaded documents, generated drafts, chat history in your workspace
• Billing data: subscription status, Paystack references — card data is held by Paystack only
• Technical data: IP address, browser type, session logs for security and abuse prevention
• Marketing: only if you opt in — newsletter email, matter interest where provided

We process personal information to perform our contract with you (providing the platform), with your consent where required (marketing), and where necessary to comply with South African law — including the Companies Act 71 of 2008 (record-keeping), tax legislation, and court-ordered disclosure if ever required.

We are a legal-technology operator, not a law firm. We align our conduct with the Legal Practice Council guidance on technology supporting self-represented litigants: we do not hold ourselves out as legal practitioners and we do not create attorney–client privilege through use of the platform.

• No sale to data brokers. We do not sell, rent, or trade your personal information — including matter summaries, ID numbers, or uploaded evidence — to data brokers, list vendors, or behavioural advertisers.
• No training on your confidential uploads for third-party model vendors beyond what is strictly necessary to generate your documents in-session, subject to our processor agreements.

You. After email-verified sign-in, only your authenticated session can read your cases, documents, and drafts. Our Postgres database uses row-level security (RLS): every row is scoped to auth.uid() matching your user ID.

Platform operators. A limited number of authorised administrators may access submissions (contact forms, counsel referrals) and, when you request support, your account metadata. Routine browsing of user matter files is not part of normal operations.

Processors. We use vetted subprocessors only where needed: Supabase (database, auth, storage), Vercel (hosting), Resend (transactional email), Paystack (payments), and AI providers for document generation. Each is bound by contract and minimum-necessary data sharing.

• TLS encryption in transit; encryption at rest on Supabase infrastructure
• Email verification before trial activation; secure session cookies (not localStorage tokens)
• Supabase Auth — OAuth 2.0 / OIDC-compatible; PKCE for public clients per upstream best practice
• Cloudflare Turnstile on public submission forms when keys are configured
• Rate limits on expensive endpoints (evaluation, drafting) to reduce abuse
• Private storage bucket for case uploads — no public URLs on evidence files

Trial watermarked drafts: auto-deleted 48 hours after trial ends if unpaid (per product policy). Paid drafts: retained while your subscription is active or for 90 days after a once-off purchase, whichever is longer, unless you delete the case sooner.

Dormant accounts: archived after 24 months of inactivity, deleted after 36 months with prior notice — see About us and AGENTS.md retention policy.

Billing records: retained as required by the Companies Act and tax law.

You may request access to personal information we hold about you, correction of inaccuracies, deletion where legally permitted, and objection to direct marketing (we honour one-click unsubscribe on every marketing email).

Email info@justice4me.co.za with the subject line "POPIA request". We respond within a reasonable period prescribed by POPIA.

If you believe your information has been compromised, contact us immediately. We will assess notification obligations under POPIA section 22.

We use essential cookies for authentication and session continuity. We do not use third-party advertising cookies. Analytics, if enabled, are configured to minimise personal data collection.

Material changes to this policy will be posted on this page and, where appropriate, emailed to registered users at least 14 days before taking effect.