Privacy Policy

Last updated: April 9, 2026

NorthLaw.ai is committed to protecting your privacy in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. Who We Are

NorthLaw.ai is operated by NorthLaw Inc., based in Ontario, Canada. We provide AI-powered legal analytics tools for legal professionals.

Privacy Officer: privacy@northlaw.ai

2. Information We Collect

Data Type	What We Collect	Purpose
Account Information	Name, email, password (hashed)	Account creation and authentication
Payment Information	Processed by Stripe — we never see or store your full card number	Subscription billing
Case Text	Text pasted into prediction tools	Real-time analysis only — not stored after prediction
Usage Data	Tool usage counts, timestamps	Service improvement and billing
Technical Data	IP address, browser type, device info	Security and service optimization

3. How We Use Your Information

We use personal information for the following purposes:

Service delivery: Processing predictions, managing your account, and providing customer support.
Billing: Processing payments through Stripe.
Service improvement: Analyzing aggregate usage patterns to improve our tools (never using individual case text).
Communications: Sending account-related notices and, with your consent, product updates.

4. Case Text: Our Core Privacy Commitment

We do not store case text. When you paste case text into any prediction tool, it is processed in real time to generate a prediction and is immediately discarded. We do not log, store, or use submitted case text for model training or any other purpose.

5. Consent

Under PIPEDA, we collect and use your personal information only with your knowledge and consent. By creating an account and using the Service, you consent to the collection and use described in this Policy. You may withdraw consent at any time by contacting us or deleting your account.

6. Data Sharing

We do not sell your personal information. We share data only with:

Stripe: For payment processing (subject to Stripe's Privacy Policy).
Cloud infrastructure: Amazon Web Services (AWS) hosts our servers in Canada/US regions.
Legal requirements: When required by law, court order, or regulatory authority.

7. Data Retention

Case text: Not retained — deleted immediately after prediction.
Account data: Retained while your account is active. Deleted within 30 days of account closure.
Usage logs: Retained for 12 months for billing and service improvement, then anonymized.
Payment records: Retained as required by Canadian tax law (generally 7 years).

8. Data Security

We protect your information with:

HTTPS encryption (TLS 1.3) for all data in transit.
Encrypted storage for account credentials (bcrypt hashing).
Server access restricted to authorized personnel only.
Regular security updates and monitoring.

9. Your Rights Under PIPEDA

You have the right to:

Access your personal information held by us.
Correct any inaccurate information.
Withdraw consent for data collection (which may limit your use of the Service).
Delete your account and associated personal data.
Complain to the Office of the Privacy Commissioner of Canada if you believe your rights have been violated.

To exercise any of these rights, contact privacy@northlaw.ai. We will respond within 30 days.

10. Cookies

We use essential cookies for session management and authentication only. We do not use advertising cookies or third-party tracking. No cookie consent banner is required as our cookies are strictly necessary for the Service to function.

11. International Transfers

Your data may be processed on servers located in Canada and the United States (AWS). We ensure appropriate safeguards are in place for any cross-border transfers in compliance with PIPEDA.

12. Children's Privacy

The Service is designed for legal professionals and is not intended for individuals under 18. We do not knowingly collect information from minors.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or notice on the platform. The "Last updated" date at the top indicates the most recent revision.

14. Contact Us

For privacy inquiries or to exercise your rights:

NorthLaw Inc.
Privacy Officer
Email: privacy@northlaw.ai

You may also contact the Office of the Privacy Commissioner of Canada if you have concerns about our privacy practices.