1. Who we are, and our role
The operator of myAIcaselaw is Trance Limited — an overseas entity registered with Companies House under section 4 of the Economic Crime (Transparency and Enforcement) Act 2022 (registration OE025742) and with the UK Information Commissioner's Office (ICO registration C1894395), incorporated in the Turks and Caicos Islands.
For account data about you, the professional user, Trance Limited is the data controller. For client personal data that you upload in the course of a matter, you (or your firm) are the controller and we act as your processor on your instructions; a data processing agreement is available on request. For any privacy enquiry or data-subject request use our contact form; you may also contact the ICO at ico.org.uk or 0303 123 1113.
2. What we collect
- Account data: your name, work email, firm or chambers, optional phone number, password (hashed using bcrypt), and your subscription and billing status
- Service data: the queries you run, documents you upload, answers generated, and your usage history
- Technical data: IP address, browser, timestamps and minimal logs needed to operate the service securely
3. Client and special-category data
Material you upload about a matter may include personal data and, sometimes, special-category data under UK GDPR Article 9. You control what you upload and the lawful basis for it; we process it only on your instructions to provide the service. Please upload only what is relevant to your research question and follow your own confidentiality and privilege obligations.
4. Lawful basis for account data we control (UK GDPR Article 6)
- Performance of contract — to provide the service and manage your subscription
- Legitimate interests — security, fraud prevention and improving the service (we never use your content to train AI models)
- Legal obligation — accounting, tax and regulatory records
- Consent — for any optional marketing, withdrawable at any time
5. Who we share data with (sub-processors)
- Anthropic — AI inference on your queries (sent for processing, not retained for training under their commercial API terms)
- Resend — transactional email delivery
- Hetzner — server hosting (UK / EU data residency)
- Stripe — subscription payment processing, for paid accounts
We do not sell or rent your data, and we do not share it with advertising networks. We do not transmit your matter data to any third party other than the sub-processors needed to run the service.
6. Where your data is stored
Your data is stored on servers located in the United Kingdom / European Economic Area. Some providers (for example Anthropic, for AI inference) may process data outside the UK under appropriate contractual safeguards including the UK International Data Transfer Addendum.
7. How long we keep it
- Account data: while your account is active, plus 6 years after closure for limitation and regulatory purposes
- Uploaded matter content: while your account is active; you can delete items at any time; on account deletion, removed within 30 days except where retention is required by law
- Billing records: 6 years (statutory)
- Backups: rolling 7 days local plus offsite
8. Your rights
Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, to port it, and to withdraw consent. Use our contact form to exercise any right; we aim to respond within 30 days. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.
9. Cookies
See our Cookies Policy.
10. Security
We use TLS encryption for all traffic, encrypted backups, hashed passwords, least-privilege access controls and offsite data backups. No system is perfectly secure; in the event of a notifiable breach we will notify the ICO and affected users without undue delay.
11. Children
The service is intended for professional use and is not directed at, or available to, under-18s.