Privacy Notice — Ginsley

1. Who we are

This Privacy Notice is provided by Ginsley ("Ginsley", "we", "us", or "our"), the operator of the Ginsley service (the "Service"). Ginsley acts as the data controller for personal data processed in connection with the Service.

2. Personal data we collect

Account data: name, email address, login credentials, and authentication identifiers.
Case and content data: case details, documents, exhibits, deadlines, notes, and messages you upload or generate inside the Service.
Payment data: billing name, billing address, and payment card details, collected and processed on our behalf by Stripe (see §4). Ginsley does not store full payment card numbers.
Support data: messages you send to us and related correspondence.
Usage and device data: log data, IP address, browser type, device identifiers, pages viewed, and feature interactions.
Cookies and similar technologies: session cookies required to keep you signed in and limited analytics cookies (see §9).

3. Purposes and legal bases

Creating and managing your account — performance of a contract.
Providing the Service, including AI-assisted features — performance of a contract.
Processing payments and managing subscriptions — performance of a contract.
Security, fraud prevention, and abuse detection — legitimate interests.
Customer support — performance of a contract and legitimate interests.
Service improvement and analytics — legitimate interests.
Legal compliance and responding to lawful requests — legal obligation.
Marketing communications, where applicable — consent, which you may withdraw at any time.

4. How we share personal data

We share personal data with the following categories of recipients:

Service providers and subprocessors that help us operate the Service, including hosting, database, authentication, AI inference, email delivery, error monitoring, and analytics providers.
Stripe, Inc. ("Stripe"), our payment processor, for the purpose of processing payments, managing subscriptions, and billing. Stripe processes payment-related personal data under its own privacy notice, available at stripe.com/privacy. Ginsley remains the seller of record and is responsible for billing, invoicing, and tax compliance in connection with your purchase.
Professional advisers such as legal, accounting, and compliance counsel where reasonably necessary.
Public authorities where required by law, court order, or to protect our rights, your safety, or the safety of others.

We do not sell your personal data.

5. International transfers

Where personal data is transferred outside your country of residence (including outside the UK or EEA), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where required.

6. Retention

We retain personal data only for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it. You may request deletion of your account at any time (see §8).

7. Security

We implement appropriate technical and organizational measures designed to protect personal data, including encryption in transit, encryption at rest, access controls, and least-privilege administrative access. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. UK and EEA residents also have the right to lodge a complaint with their supervisory authority. To exercise your rights, contact us at the address in §11. We aim to respond within one month.

9. Cookies

We use strictly necessary cookies to keep you signed in and to provide core features. We may also use limited analytics cookies to understand aggregate usage. You can manage cookies through your browser settings; disabling required cookies may prevent the Service from functioning.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Contact

Questions about this Privacy Notice or our handling of your personal data can be sent to Ginsley via the in-app support channel or by emailing the address listed on our contact page.

12. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date above reflects the most recent revision.