BriefBank Terms of Service

Effective Date: 2026-05-03 Last Updated: 2026-07-09

Cover Page (Commercial Terms)

Acceptance, Authority, and Eligibility

By clicking "I agree," creating an Account, accessing or using the Service, or executing an Order Form, Customer and each User agree to these Terms, including the binding arbitration provision and class-action waiver in Section 14. If you accept these Terms on behalf of a law firm, company, government agency, or other entity, you represent that you have authority to bind that entity, and "Customer" means that entity. Each User must be at least 18 years old and must be either (a) an attorney licensed and in good standing in at least one U.S. jurisdiction, or (b) a paralegal, legal assistant, or other support person using the Service under the supervision of such an attorney. The Service is offered solely for professional and business use in connection with the practice of law and is not intended for personal, household, family, pro se, or consumer legal-advice use. Customer is responsible for ensuring that every User is bound by and complies with these Terms.

1. The Service

1.1 Access and Use. During the Subscription Period and subject to these Terms, Customer may (a) access and use the BriefBank platform, which provides search, analysis, and drafting tools across legal documents ("Cloud Service" or "Service"); and (b) copy and use the included Documentation only as needed to access and use the Service, in each case for its internal business purposes. An authorized User may use the Service only under a properly licensed Account.

1.2 Support. Company will provide Technical Support as described in the Order Form or plan description.

1.3 User Accounts. Customer is responsible for all actions taken on Users' Accounts and for Users' compliance with these Terms. Customer and Users must protect the confidentiality of their credentials and must notify Company promptly of any suspected compromise. Each User must individually accept these Terms before first accessing the Service; Customer's acceptance does not relieve any User of that requirement.

1.4 Feedback and Usage Data. Customer may, but is not required to, provide Feedback. Company may freely use Feedback without restriction. Company may also collect and analyze Usage Data (telemetry such as feature usage, error rates, and performance metrics that does not include the substantive content of Customer Content) to operate, maintain, and improve the Service. Company may disclose Usage Data to third parties only in aggregated, de-identified form.

1.5 Customer Content. "Customer Content" means documents, files, metadata, and chat inputs that Customer or its Users upload to, or generate within, the Service. Customer retains all right, title, and interest in Customer Content; ownership of AI Output is addressed in Section 1.9. Company may copy, store, display, process, and use Customer Content — including storing chat and search history and creating and retaining derived data such as text excerpts, embeddings, and indexes ("Derived Data") — only as needed to provide, operate, secure, and (subject to Section 1.6) improve the Service, as further described in Section 3.8. Customer is responsible for the accuracy, legality, and content of Customer Content.

1.6 Machine Learning and AI Features. The Service uses artificial intelligence and machine learning features ("AI Features"), including large language models provided by third-party subprocessors. "AI Output" means the content the AI Features generate in response to Customer Content or User queries, including text, citations, summaries, analyses, and drafts. Training and data-use rights differ by tier:

(a) Free Tier. Customer Content on the Free tier consists of chat queries made against Company's library of public legal materials (e.g., Supreme Court of the United States opinions). By using the Free tier, Customer authorizes Company to (but Company is not required to) use Customer Content on the Free tier to develop, train, and improve AI Features and the Service generally, provided that such Customer Content is (i) de-identified using commercially reasonable efforts consistent with industry-standard technology and (ii) aggregated with data from other customers before such use. Company will not attempt to re-identify de-identified data and will require recipients of such data not to re-identify it.

(b) Paid Tiers (Professional and Team). Company will not use, and will not permit its subprocessors to use, Customer Content from paid tiers — including uploaded documents, chat inputs, chat outputs, or any content derived from them — to train, fine-tune, or otherwise improve any AI model (whether Company's own or a third party's).

(c) Third-Party Model Providers. Company maintains written agreements with each third-party AI model provider prohibiting the use of paid-tier Customer Content for training. A current list of subprocessors is published and available upon request by emailing info@aibriefbank.com.

(d) Nature of AI Output. AI Features generate output through probabilistic machine-learning processes. AI Output may contain errors, omit relevant information, reference authorities that do not exist (a phenomenon known as "hallucination"), or reflect law that is no longer current. AI Output is not tested, verified, endorsed, or guaranteed by Company. AI Features are not a substitute for human professional judgment. Additional obligations regarding AI Output are in Section 7 (No Legal Advice) and Section 8 (AI Output Verification).

1.7 Trial and Evaluation Use. If Customer is given access to the Service on a free trial, proof-of-concept, beta, or other evaluation or pre-release basis that Company expressly designates as such (which does not include Company's generally available Free tier, governed by Sections 1.6(a), 4.1, and 9.2(b)), such access is (i) for internal evaluation only, not for production or client-representation use; (ii) provided "as is" and "as available" without warranties; and (iii) not subject to Company's indemnification obligations under Section 12. Customer's sole remedy for dissatisfaction with trial or evaluation access is to terminate such access.

1.8 Web Search. The Service may offer an optional web search feature. When a User enables and invokes it, the AI Features formulate one or more search queries based on the User's request and conversation and transmit those generated queries to a third-party search provider in order to retrieve current information from the public internet. The User does not enter the search query directly; the Service generates it, and a generated query may incorporate details drawn from the User's request. Web search is disabled by default and runs only when a User turns it on. Web search results originate from third-party sources that Company does not operate or control; Company does not warrant their accuracy, completeness, currency, or availability, and such results constitute AI Output subject to Sections 1.6(d), 7, and 8. Because a generated query may include details from the User's request, User should not enable web search for, or submit while web search is enabled, any Confidential Information, attorney-client privileged material, or other sensitive information. A third-party search provider engaged for this feature is a Subprocessor subject to Section 3.5, and Company's data-handling and retention practices in Section 3 (including Section 3.4) apply to web search data.

1.9 AI Output Rights. As between Company and Customer, and to the extent ownership is available under applicable law, Customer owns the AI Output generated for Customer, and Company assigns to Customer whatever right, title, and interest Company may have in such AI Output. To the extent any such right cannot be assigned, Company grants Customer a perpetual, worldwide, royalty-free, irrevocable license to use, reproduce, modify, distribute, file, and incorporate that AI Output into Customer's legal work product, client communications, and court or agency submissions, in each case subject to Customer's verification obligations in Sections 7, 8, and 9. Company retains all right, title, and interest in the Service, AI Features, software, models, model weights, prompts, templates, retrieval systems, Documentation, Usage Data, and any Company-provided or third-party legal materials ("Company Materials"), which are not AI Output. For Team accounts, AI Output generated under the account belongs to the Customer organization, not to individual Users. Customer acknowledges that (i) AI Output may not be eligible for intellectual-property protection, and (ii) the Service may generate the same or similar output for other users, and Customer has no claim against Company arising from such independently generated similar output.

2. Restrictions and Obligations

2.1 Restrictions on Customer. Except as expressly permitted, Customer will not (and will not allow anyone else to): (a) reverse engineer, decompile, or attempt to discover source code, model weights, prompts, or underlying algorithms of the Service (except to the extent applicable laws prohibit this restriction); (b) provide, sell, sublicense, or otherwise allow others to access the Service; (c) remove proprietary notices; (d) create derivative works; (e) conduct security or vulnerability tests on, interfere with, or circumvent access restrictions of the Service; (f) access data to which Customer lacks authorization; (g) use the Service to develop a competing product or train a competing AI model; (h) use the Service with any High Risk Activity; (i) use the Service to obtain unauthorized access to third-party networks; (j) submit Customer Content to which Customer lacks the necessary rights; (k) use the Service in violation of any rule of professional conduct or court order; (l) submit Prohibited Data (see Section 3.2); or (m) submit confidential or privileged client information into the Free tier in violation of Section 9.2(b).

2.2 Suspension. Company may temporarily suspend Customer's access if Customer (a) has an undisputed balance overdue for more than 30 days; (b) breaches Section 2.1; or (c) uses the Service in a way that materially harms the Service or other users. Company will try to notify Customer before suspending when practical and will reinstate access when the underlying issue is resolved.

3. Privacy, Security, and Data Handling

3.1 Personal Data and DPA. Before submitting Personal Data subject to GDPR, UK GDPR, or analogous laws, Customer must execute Company's Data Processing Addendum ("DPA"). In case of conflict between the DPA and these Terms as to Personal Data, the DPA controls.

3.2 Prohibited Data. Customer will not submit to the Service: (a) protected health information subject to HIPAA (unless a signed BAA is in place); (b) cardholder data subject to PCI DSS; (c) ITAR-controlled data; (d) data about children under age 13 (or as applicable local law requires); or (e) any data Customer is contractually or legally prohibited from disclosing to a third-party processor.

3.3 Security. Company will maintain administrative, physical, and technical safeguards designed to protect Customer Content, as described in Company's Security Overview (also available upon request by emailing info@aibriefbank.com). Paid-tier Customer Content is stored in a tenant-isolated environment.

3.4 Third-Party Provider Data Handling. To generate responses, the Service transmits prompts, queries, and related context to third-party model and search providers ("AI Providers") that act as Company's Subprocessors (see Section 3.5). Company does not authorize, and its agreements with AI Providers do not permit, the use of Customer Content to train the AI Providers' models. AI Providers' retention of inputs and outputs varies by provider and is limited to what is necessary to deliver the response and to monitor for abuse, security, and legal compliance; AI Providers may retain inputs and outputs for a limited period (in some cases longer for flagged content) before deletion, as described in the Subprocessor information. Each AI Provider's retention and training posture is included in the Subprocessor information available under Section 3.5. This Section describes the AI Providers' handling of data; Company's own retention of Customer Content is described in Section 3.8 and Section 5.5.

3.5 Subprocessors. A current list of Company's subprocessors — including AI model and search providers, hosting, and infrastructure vendors, together with each provider's data retention and model-training posture — is published at that page and available upon request by emailing info@aibriefbank.com. Company will provide at least 30 days' advance notice of any new subprocessor by email to the Account's administrative email on file, during which Customer may object in writing for material reasons related to data protection.

3.6 Data Residency. Customer Content stored at rest is held in data centers located in the United States unless otherwise agreed in writing. To generate responses, certain AI Providers (Section 3.4) use model deployments configured for global or multi-region processing, so prompts, queries, and related context may be processed transiently in regions outside the United States.

3.7 Security Incidents. Company will notify Customer without undue delay after confirming any unauthorized access to, acquisition of, or disclosure of Customer Content processed by Company or its Subprocessors (a "Security Incident"). Company will provide information reasonably available to it regarding the nature of the Security Incident, the Customer Content affected, and the steps Company is taking to mitigate it, and will reasonably cooperate with Customer's investigation, notification, and remediation efforts. Notification under this Section is not an acknowledgment of fault. Where an executed DPA applies, the DPA's incident-notification terms control.

3.8 Company Retention and Indexing. Customer retains ownership of Customer Content (Section 1.5). To provide the Service, Company stores Customer Content — including chat history, search history, and uploaded documents — and creates and stores Derived Data (such as text excerpts, embeddings, and vector indexes) in Company's systems. Company retains Customer Content and Derived Data while the Account is active and during the export and deletion windows described in Section 5.5, and processes them only to provide, operate, secure, support, and (subject to Section 1.6) improve the Service. Derived Data is used solely as Service infrastructure and is not used to train any AI model. For Personal Data within Customer Content, Company acts as Customer's service provider and processor and processes such Personal Data only as permitted by these Terms and the DPA; Company does not sell or share such Personal Data.

4. Subscription Plans, Payment, and Taxes

4.1 Plans. Company offers the following plans; specific features, limits, and pricing are as set forth in the applicable Order Form or as published by Company at the time of purchase:

4.2 Fees. Fees are in U.S. Dollars, exclusive of taxes. Except as expressly allowed, Fees are non-refundable.

4.3 Billing. Paid subscriptions are billed in advance. Company will automatically charge the payment method on file each billing cycle unless Customer cancels before renewal.

4.4 Auto-Renewal. Paid subscriptions auto-renew for successive periods of equal length unless Customer cancels through Account settings at least one day before the next renewal. Customer may cancel at any time; cancellation takes effect at the end of the then-current paid period, with no proration for unused time (except as required by applicable law).

4.5 Price Changes. Company may change prices with at least 30 days' advance notice effective on the next renewal.

4.6 Taxes. Customer is responsible for all taxes, duties, and levies other than taxes on Company's income.

4.7 Late Payment. Undisputed amounts 30+ days overdue accrue interest at 1.5% per month (or the maximum permitted by law, if lower) and are grounds for suspension or termination.

4.8 Payment Disputes. Customer must notify Company in writing of any good-faith billing dispute before the payment due date (or within 30 days of an automatic charge) and must timely pay all undisputed amounts. The parties will work in good faith to resolve the dispute within 15 days.

5. Term, Termination, and Force Majeure

5.1 Term. These Terms take effect for a Customer when Customer first creates an Account or, for enterprise customers, on the Order Form date, and continue through the Subscription Period, renewing per Section 4.4. The "Effective Date" shown at the top of these Terms is the publication date of this version, not any particular Customer's acceptance date.

5.2 Termination for Cause. Either party may terminate these Terms or any Order Form immediately (a) if the other party fails to cure a material breach within 30 days after written notice; (b) if the other party materially breaches in a manner that cannot be cured; or (c) if the other party dissolves, makes an assignment for the benefit of creditors, or becomes the debtor in insolvency proceedings that continue for more than 60 days.

5.3 Termination for Convenience; Inactive Free-Tier Accounts. Customer may cancel a paid subscription at any time through Account settings; cancellation takes effect at the end of the then-current paid period. Company may close a Free-tier Account that has been inactive for three (3) or more consecutive months. Company will provide at least 30 days' advance notice of such closure to the Account's administrative email on file; if the Account remains inactive through the notice period (a sign-in during the notice period keeps the Account open), Company may close the Account, and Customer Content will be deleted as described in Section 5.5(c). An Account is “inactive” when it has had no sign-in and no chat or other product activity during the applicable period.

5.4 Force Majeure. Neither party is liable for any delay or failure to perform (except payment obligations) due to a Force Majeure Event — an event beyond the party's reasonable control, including acts of God, war, terrorism, civil unrest, labor disputes, governmental action, natural disasters, epidemics or pandemics, power or telecommunications outages, cloud-infrastructure failures, or denial-of-service attacks. If a Force Majeure Event prevents the Service from materially operating for 30 or more consecutive days, either party may terminate the affected subscription on notice and Company will provide a pro-rata refund of prepaid unused Fees. A Force Majeure Event does not excuse Fees accrued before termination.

5.5 Effect of Termination. Upon expiration or termination:

(a) Customer's right to access the Service ends.

(b) Data export (paid tiers): For 30 days after termination, Customer may export its uploaded documents and chat history using available export tools. After that window, Company may delete the data.

(c) Data deletion: - Paid tiers: Company will delete Customer Content within 30 days of Customer's written request following termination, subject to Section 5.5(d). - Free tier: Company will delete Customer Content promptly upon account closure, subject to Section 5.5(d).

(d) Permitted retention. Each party may retain the other's Confidential Information or Customer Content (i) as required by applicable law, (ii) in standard backups in the ordinary course of business, or (iii) in de-identified and aggregated form as permitted by these Terms. Retained information remains subject to Section 13 (Confidentiality).

(e) Outstanding Fees accrued before termination remain due.

5.6 Changes Required by Law. If Company determines, in its reasonable judgment, that any aspect of the Service (including AI Features, data handling, training practices, or training-data sources) must be modified, suspended, or discontinued in order to comply with: (a) any new or revised statute, regulation, court order, or binding regulatory guidance; (b) any final judgment, injunction, settlement, or change in third-party AI model provider terms; or (c) any rule of professional conduct or court rule applicable to legal-AI tools, then Company may, on written notice to Customer: (i) modify or suspend the affected portion of the Service; (ii) where the change materially reduces the functionality Customer is paying for, terminate the affected subscription. If Company terminates under clause (ii), Company will refund prepaid unused Fees on a pro-rata basis. Termination or modification under this Section 5.6 is not a breach by Company and is Customer's sole remedy.

5.7 Survival. Sections 1.4, 1.5, 1.6, 2.1, 4, 5.5, 5.6, 5.7, 6, 7, 8, 9, 10, 11, 12, 13, 14, and 15 survive expiration or termination.

6. Representations and Warranties

6.1 Mutual. Each party represents that it has the legal authority to enter into these Terms and will comply with all applicable laws in performing under them.

6.2 From Customer. Customer represents and warrants that it, its Users, and anyone submitting Customer Content each have all rights necessary to submit such content and to permit Company's use of it as described in these Terms, and that such content does not violate any applicable rule of professional conduct, client engagement agreement, or court order.

6.3 From Company. Company represents and warrants that during the Subscription Period it will not materially reduce the general functionality of the Cloud Service and will maintain the security safeguards described in Section 3.3.

6.4 Provider Warranty Remedy. If Company breaches the warranty in Section 6.3, Customer must notify Company within 45 days of discovering the issue. Company will have 45 days to restore functionality. If Company cannot, Customer may terminate the affected subscription and receive a pro-rata refund of prepaid unused Fees. Restoration and termination are Customer's sole remedies for a breach of Section 6.3.

7. No Legal Advice

7.1 No Attorney-Client Relationship; Technology Provider; No Intended Waiver. Company is a technology provider, not a law firm, and does not represent Customer, any User, or their clients. Use of the Service, and communications with Company, do not create an attorney-client relationship with Company, and the Service does not constitute the practice of law. Customer Content submitted on a paid tier may include information subject to the attorney-client privilege or work-product doctrine as between Customer or its Users and their clients. The parties intend that Customer's submission of such Customer Content to Company, acting solely as a technology provider, and Company's processing of it through its Subprocessors, will not waive any attorney-client privilege, work-product protection, or other applicable protection, and Company will not assert that any such protection was waived solely because Customer used the Service. Company will treat Customer Content as Confidential Information under Section 13. Customer remains solely responsible for determining whether submitting any particular information to the Service is consistent with its privilege, confidentiality, and professional-responsibility obligations; Company cannot guarantee that any court or tribunal will agree that privilege or protection was preserved. The Free tier and the web search feature must not be used for privileged or client-confidential information (see Sections 1.8 and 9.2(b)).

7.2 Not Legal Advice. The Service is an information tool for licensed legal professionals. The Service does not provide legal advice, legal opinions, or legal recommendations. Any information provided by the Service — including search results, summaries, analysis, and drafted content — is for informational purposes only and should not be relied upon as a substitute for the advice of a qualified attorney licensed in the relevant jurisdiction.

7.3 Professional Judgment Required. The Service is intended for use by or under the supervision of licensed attorneys who are solely responsible for exercising independent professional judgment regarding the accuracy, completeness, and applicability of any output provided by the Service. User shall not use the Service as the sole basis for any legal decision, filing, or action without independent verification by a licensed attorney.

7.4 No Guarantee of Outcome. Company makes no representation that use of the Service will result in any particular legal outcome. The accuracy and relevance of search results and AI Output depend on factors outside Company's control, including the quality of User's document library, the specificity of User's queries, and the current state of applicable law.

8. AI Output and Citation Verification

8.1 AI-Generated Content Disclaimer. AI Output is generated through probabilistic machine-learning processes and is inherently subject to limitations, including:

(a) Inaccuracy. AI Output may contain factual errors, misstatements of law, or incorrect interpretations.

(b) Hallucination. AI Output may reference cases, statutes, or other legal authorities that do not exist or are incorrectly cited. This is a known limitation of large language model technology.

(c) Incompleteness. AI Output may omit relevant authorities, arguments, defenses, or other material information.

(d) Staleness. AI Output may reflect law that has been superseded, overruled, or otherwise rendered invalid.

(e) Bias. AI Output may reflect biases in the underlying training data or in User's document library.

8.2 Mandatory Verification Obligation. User must independently verify all AI Output before relying on it for any purpose, including:

(a) Citation verification. User must confirm that every case citation, statutory reference, regulatory citation, and other legal authority referenced in AI Output actually exists, is accurately quoted or described, and remains good law. User should use primary legal research tools (such as Westlaw, Lexis, or official court databases) to verify all citations.

(b) Legal accuracy. User must confirm that statements of law, legal standards, or legal analysis in AI Output accurately reflect the current state of applicable law.

(c) Factual accuracy. User must confirm that factual assertions in AI Output are supported by the underlying documents and are accurate.

(d) Completeness. User must independently assess whether AI Output addresses all relevant legal issues, arguments, and authorities.

8.3 Assumption of Risk. User acknowledges and agrees that:

(a) Use of AI Output without independent verification may result in the filing of documents containing inaccurate citations, misstatements of law, or other errors.

(b) Courts have sanctioned attorneys for submitting filings containing AI-generated citations that do not exist. User is solely responsible for the accuracy of any document filed with a court or submitted to any tribunal, regulatory body, or opposing party.

(c) Company is not responsible for any sanctions, penalties, adverse rulings, malpractice claims, disciplinary proceedings, or other consequences arising from User's reliance on unverified AI Output.

(d) The inclusion of a citation or legal proposition in AI Output does not constitute a representation by Company that such citation or proposition is accurate, current, or applicable to User's matter.

8.4 Court AI Disclosure Requirements. User is solely responsible for complying with any court rules, standing orders, or local rules requiring disclosure of the use of AI in the preparation of legal documents. Company does not track or monitor applicable AI disclosure requirements, which vary by jurisdiction and are subject to change. User should consult the applicable court's rules and standing orders before filing any document prepared with the assistance of the Service.

9. Professional Responsibility (ABA Compliance)

9.1 Competence (ABA Model Rule 1.1). Use of AI-assisted legal technology requires a reasonable understanding of its capabilities and limitations. Consistent with the duty of competence under ABA Model Rule 1.1 and its state equivalents, User is responsible for: (a) understanding the capabilities, limitations, and risks of the Service; (b) maintaining sufficient knowledge and skill to evaluate the accuracy and completeness of AI Output; (c) exercising the same degree of care and independent judgment as with work prepared by a junior associate or contract attorney; and (d) seeking additional training if User lacks sufficient understanding of the Service.

9.2 Confidentiality (ABA Model Rule 1.6). User is responsible for ensuring that use of the Service complies with the duty of confidentiality. In particular:

(a) Paid tiers. Customer Content uploaded by paid subscribers is stored in a tenant-isolated environment and is not used to train AI models. Company maintains safeguards as described in Section 3.3 and the Security Overview.

(b) Free tier. The Free tier is limited to publicly available legal materials. User shall not submit, upload, paste, type, or otherwise input into the Free tier any (i) information subject to the attorney-client privilege or work-product doctrine, (ii) personally identifiable information of any client or third party, (iii) confidential client information, or (iv) any other information User is obligated to keep confidential under any rule of professional conduct, engagement agreement, court order, or applicable law. Free-tier chat interactions may be used by Company in de-identified and aggregated form to improve the Service as described in Section 1.6(a). Submission of any prohibited information described in this Section 9.2(b) is a breach of these Terms and a violation of Section 2.1 (Restrictions on Customer).

(c) Third-party subprocessors. The Service uses third-party AI model providers, under contracts prohibiting use of paid-tier Customer Content for training. User is responsible for determining whether use of such subprocessors is consistent with User's obligations under applicable rules of professional conduct.

(d) Informed consent. Depending on the jurisdiction and applicable ethics opinions, User may be required to obtain informed consent from clients before using AI-assisted tools. Company does not provide guidance on whether or when such consent is required.

9.3 Supervisory Duties (ABA Model Rule 5.3). If non-lawyer staff (paralegals, legal assistants, law clerks, or other support personnel) use the Service on User's behalf, User remains responsible for: (a) supervising such use and ensuring compliance with these Terms and applicable rules; (b) ensuring non-lawyer personnel understand that AI Output must be verified and does not constitute legal advice; and (c) implementing reasonable measures to ensure non-lawyer personnel do not submit AI Output to courts, opposing parties, or clients without attorney review.

9.4 Candor to the Tribunal (ABA Model Rule 3.3). User is solely responsible for ensuring that any document filed with a court prepared with the assistance of the Service satisfies the duty of candor to the tribunal. Company is not responsible for any misstatement of law or fact in AI Output.

9.5 Meritorious Claims (ABA Model Rule 3.1). User shall not use the Service to generate arguments or claims that are frivolous or unsupported by existing law or a good-faith argument for its extension, modification, or reversal. The ability of the Service to generate an argument does not mean that argument is meritorious.

9.6 Ethics Opinions. User acknowledges that multiple state bar associations and the ABA have issued ethics opinions addressing AI use in legal practice, including ABA Formal Opinion 512 (July 2024). User is responsible for complying with all applicable ethics opinions and rules in User's jurisdiction(s) of practice.

10. Disclaimer of Warranties

10.1 EXCEPT FOR THE LIMITED WARRANTIES IN SECTION 6, THE SERVICE AND ALL AI OUTPUT ARE PROVIDED "AS IS" AND "AS AVAILABLE." COMPANY DISCLAIMS ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. COMPANY DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE, OR THAT AI OUTPUT WILL BE ACCURATE, COMPLETE, OR CURRENT. THESE DISCLAIMERS APPLY TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW.

10.2 Without limiting the above, Company makes no warranty (a) that the Service will satisfy any rule of professional conduct, court order, or regulatory requirement; (b) that AI Output is free of hallucinations, inaccuracies, or omissions; or (c) that use of the Service will produce any particular legal result.

11. Limitation of Liability

11.1 Liability Caps.

(a) General Cap. Each party's total cumulative liability for all claims will not exceed the General Cap Amount (the greater of fees paid by Customer in the 12 months preceding the claim or US$100).

(b) Increased Cap. For claims arising from breach of Section 3 (Privacy), Section 13 (Confidentiality), or Section 12 (Indemnification) (collectively, "Increased Claims"), total liability will not exceed the Increased Cap Amount (2x the General Cap Amount).

11.2 Damages Waiver. NEITHER PARTY WILL BE LIABLE FOR LOST PROFITS OR REVENUES (WHETHER DIRECT OR INDIRECT), LOSS OF GOODWILL, OR ANY INDIRECT, SPECIAL, INCIDENTAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, EVEN IF INFORMED OF THE POSSIBILITY IN ADVANCE.

11.3 Applicability. The limitations and waivers in this Section 11 apply to all liability, whether in tort (including negligence), contract, statutory duty, or otherwise, and apply even if a limited remedy fails of its essential purpose.

11.4 Exceptions ("Unlimited Claims"). The caps and waivers in this Section 11 do not apply to: (a) Customer's payment obligations; (b) Customer's breaches of Section 2.1; (c) either party's fraud or willful misconduct; or (d) liability for physical bodily injury or death directly caused by a party's gross negligence or willful misconduct, or any other liability that cannot be limited under applicable law. For the avoidance of doubt, indemnification obligations under Section 12 are subject to the Increased Cap Amount in Section 11.1(b) and are not Unlimited Claims.

11.5 Trial Services. Subject to Section 11.4 and any liability that cannot be limited under applicable law, Company's total liability arising out of Free-tier or trial access is capped at US$100.

11.6 Basis of the Bargain. The parties agree that the limitations in this Section 11 reflect a reasonable allocation of risk and are a fundamental basis of the bargain.

12. Indemnification

12.1 By Company (Paid Tiers Only). Company will defend Customer from, and indemnify Customer against, any third-party claim alleging that Customer's use of the Cloud Service in accordance with these Terms directly infringes a U.S. patent, copyright, trademark, or trade secret of the third party ("Provider Covered Claim"), and will pay damages finally awarded or agreed in settlement. This obligation does not apply to claims arising from: (a) Customer Content; (b) combinations of the Service with non-Company products or data; (c) unauthorized modifications; (d) use after Company has notified Customer to stop; (e) use of a superseded version when a non-infringing version was available; (f) Free-tier or trial use; or (g) AI Output that User failed to verify in accordance with Section 8. If a Provider Covered Claim is made or appears likely, Company may (i) procure rights for continued use, (ii) modify or replace the Service with a non-infringing equivalent, or (iii) terminate the affected subscription and refund prepaid unused Fees. This Section 12.1 states Company's sole liability and Customer's sole remedy for third-party IP claims.

12.2 By Customer. Customer will defend Company from, and indemnify Company against, any third-party claim arising from: (a) Customer Content (including claims that Customer Content infringes third-party IP or privacy rights or violates applicable law); (b) Customer's or its Users' violation of Section 2.1 or any rule of professional conduct; (c) Customer's filing or use of AI Output without the verification required by Section 8; (d) Customer's unauthorized disclosure of confidential information in or through the Service; or (e) Customer's violation of applicable law in connection with use of the Service ("Customer Covered Claims").

12.3 Procedure. The indemnified party will promptly notify the indemnifying party of any claim, provide reasonable cooperation (at the indemnifying party's expense), and give the indemnifying party sole control of the defense and settlement. The indemnifying party may not settle any claim in a manner that admits fault by or imposes a non-monetary obligation on the indemnified party without its consent.

12.4 Free-Tier and Trial Exclusion. Company has no indemnification obligation for claims arising from Free-tier or trial access to the Service.

13. Confidentiality

13.1 Confidential Information. "Confidential Information" is defined in Section 16 (Definitions). Customer Content is Customer's Confidential Information and is also governed by Sections 1.5, 1.6, and 3.

13.2 Obligations. The party receiving Confidential Information (the "Receiving Party") will: (a) use the disclosing party's (the "Disclosing Party") Confidential Information only as necessary to exercise its rights and perform its obligations under these Terms; (b) protect it using at least the same degree of care it uses to protect its own confidential information of like importance, and in no event less than reasonable care; and (c) not disclose it to any third party except to its employees, contractors, advisors, and Subprocessors who have a need to know and are bound by confidentiality obligations at least as protective as this Section 13.

13.3 Exclusions. Confidential Information does not include information that the Receiving Party can demonstrate: (a) is or becomes publicly available through no breach of these Terms by the Receiving Party; (b) was rightfully known to the Receiving Party without a confidentiality obligation before receipt; (c) is rightfully received from a third party without a confidentiality obligation; or (d) is independently developed without use of or reference to the Disclosing Party's Confidential Information.

13.4 Compelled Disclosure. The Receiving Party may disclose Confidential Information to the extent required by applicable law, regulation, or valid legal process, provided that, where legally permitted, it gives the Disclosing Party reasonable advance notice and reasonable cooperation (at the Disclosing Party's expense) to seek confidential treatment or a protective order.

13.5 Equitable Relief. The Receiving Party acknowledges that unauthorized use or disclosure of Confidential Information may cause irreparable harm for which monetary damages are an inadequate remedy. Accordingly, the Disclosing Party may seek injunctive or other equitable relief, as contemplated by Section 14.10, without the need to post a bond.

13.6 Return or Destruction. Upon the Disclosing Party's written request following expiration or termination, the Receiving Party will return or destroy the Disclosing Party's Confidential Information, subject to the permitted-retention rights in Section 5.5(d).

14. Dispute Resolution

Summary of this Section 14 (plain language — not a substitute for the full terms below): You and Company agree to resolve disputes through binding individual arbitration instead of going to court, and not through class actions. You may opt out of arbitration entirely within 30 days of accepting these Terms (Section 14.9). Small-claims court is always available (Section 14.10). If you are an individual using the Service for personal purposes, consumer arbitration rules apply: hearings can happen in your home county or remotely, your filing fee is capped, and Company pays the other arbitration fees (Sections 14.3–14.4). If many similar claims are filed at once, they may be coordinated in batches for efficiency, but each claim is still decided individually (Section 14.7).

14.1 Informal Resolution. Before initiating arbitration, a party must send a written notice of dispute (to Company at info@aibriefbank.com and the address in Section 15.7, or to the Customer at the Account's administrative email) describing the claim and the relief sought, and the parties will attempt in good faith to resolve it. If the dispute is not resolved within 30 days after receipt, either party may proceed under this Section 14. Applicable limitation periods and filing deadlines are tolled while this Section 14.1 process is pending.

14.2 Federal Arbitration Act; Agreement to Arbitrate; Jury Waiver; Delegation. The Service and these Terms involve interstate commerce, and this Section 14 is governed by the Federal Arbitration Act (9 U.S.C. § 1 et seq.). Except as provided in Sections 14.6, 14.9, and 14.10, all disputes arising out of or relating to these Terms or the Service will be resolved by binding, individual arbitration rather than in court, and the parties waive any right to a jury trial and to litigate in court except as expressly permitted by this Section 14. The arbitrator — and not any court — has exclusive authority to resolve threshold disputes about the interpretation, applicability, enforceability, or formation of this arbitration agreement, except that a court, and not the arbitrator, decides: (i) the enforceability of the class-action waiver in Section 14.5; (ii) whether an arbitration may proceed on a class, collective, consolidated, or representative basis; (iii) any claim within Sections 14.6, 14.9, or 14.10; and (iv) any challenge directed specifically at this delegation provision.

14.3 Administrator; Rules; Consumer Disputes. Arbitration is administered by the American Arbitration Association ("AAA"). A "Consumer Dispute" is a dispute involving an individual Customer who obtained or used the Service primarily for personal, family, or household purposes, or any dispute that the AAA or a court of competent jurisdiction determines must proceed under consumer arbitration rules or standards. Consumer Disputes are administered under the AAA Consumer Arbitration Rules and the AAA Consumer Due Process Protocol. All other disputes — including disputes involving Customers who use the Service for business, professional, or organizational purposes (such as use in connection with the practice of law, Team accounts, and any Customer that has signed an Order Form) — are administered under the AAA Commercial Arbitration Rules. If the AAA determines that its Consumer Arbitration Rules apply to a dispute, that determination controls. The applicable rules are available at adr.org.

14.4 Arbitrator, Format, Location, and Fees. A single neutral arbitrator conducts the arbitration in English. Hearings are held by videoconference, by telephone, or on written submissions, unless the arbitrator finds an in-person hearing necessary or the applicable rules provide otherwise. For Consumer Disputes: any in-person proceeding will be held in the county (or comparable locale) of the Customer's residence, or another location agreed by the parties or set under the AAA Consumer Arbitration Rules; no individual Customer is required to travel to Delaware; the Customer's filing fee is capped as provided in the AAA Consumer Arbitration Rules fee schedule, and Company will pay all other AAA administrative fees and all arbitrator compensation that those rules and the Consumer Due Process Protocol require a business to pay. For Commercial-Rules arbitrations, the seat is New Castle County, Delaware (or videoconference by agreement), and fees are allocated per the AAA Commercial Arbitration Rules. Each party bears its own attorneys' fees unless the applicable rules or applicable law provide otherwise; nothing in this Section 14 limits any non-waivable right to recover attorneys' fees or costs under applicable law.

14.5 Class Action Waiver (Standalone). TO THE FULLEST EXTENT PERMITTED BY LAW, EACH PARTY MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS, COLLECTIVE, CONSOLIDATED, PRIVATE-ATTORNEY-GENERAL, OR REPRESENTATIVE PROCEEDING, WHETHER IN ARBITRATION OR IN COURT. This waiver applies independently of the agreement to arbitrate and survives if any other part of this Section 14 is found unenforceable or if a dispute proceeds in court for any reason (including a valid opt-out under Section 14.9). The arbitrator may not consolidate claims of different Customers or preside over any form of class or representative proceeding, except for the administrative coordination described in Section 14.7 (which does not alter the individual nature of each Customer's claim). If this Section 14.5 is found unenforceable as to a particular claim, that claim alone proceeds in the courts identified in Section 14.10 and all other claims proceed in arbitration.

14.6 Remedies; Public Injunctive Relief. The arbitrator may award any remedy on an individual basis that a court could award to the individual claimant, including monetary, declaratory, and injunctive relief, and including public injunctive relief where a non-waivable right to seek it exists under applicable law. Nothing in this Section 14 waives, or shall be construed to waive, any right to any non-waivable remedy. If, notwithstanding the foregoing, a court of competent jurisdiction finally determines that a claim for public injunctive relief cannot be arbitrated, that claim — and only that claim — will be severed and heard in the courts identified in Section 14.10, and may be stayed pending completion of the individual arbitration of the arbitrable claims, in any event for no longer than reasonably necessary.

14.7 Coordinated / Mass Arbitration. If 25 or more arbitration demands with material similarities are filed against Company within 180 days by or with the coordination, involvement, or assistance of the same or coordinated counsel or organizations ("Coordinated Demands"), the Coordinated Demands will be administered under the AAA Mass Arbitration Supplementary Rules as then in effect (or, in a substitute forum under Section 14.8, the substitute administrator's mass or coordinated-proceeding procedures as then in effect, which the parties expressly adopt), as supplemented by this Section 14.7: (a) Completeness and tolling. A demand is complete if it identifies the claimant, the associated Account (email or account identifier), counsel (if any), the claims asserted and relief sought, and bears the claimant's or counsel's signature or certification. Deficiencies are determined by the administrator or a process arbitrator appointed under the applicable rules — not by Company. All applicable limitation periods are tolled for every Coordinated Demand from its good-faith submission and remain tolled throughout the procedures in this Section 14.7. (b) Concurrent initial batch. An initial batch of up to 100 Coordinated Demands, selected randomly with reasonable proportionality across counsel groups, proceeds to individual arbitration concurrently, each before its own arbitrator, targeting awards within 120 days after each initial conference (extendable by the arbitrator). No award, finding, or outcome binds, or has preclusive effect against, any Customer or against Company with respect to any Customer who was not a party to that arbitration. (c) Global mediation. After awards issue in the initial batch, or 150 days after batch selection (whichever is earlier), the parties will participate in a single global mediation of up to 60 days, with the mediator's fees paid by Company. (d) Election to proceed in court. Within 30 days after conclusion of the mediation, either side (any claimant, or Company as to any claimant) may elect in writing to have that claimant's remaining Coordinated Demand proceed in the courts identified in Section 14.10 as an individual action, subject to Section 14.5. (e) Continued batching. Claims not resolved and not the subject of a Section 14.7(d) election proceed in further concurrent batches of up to 100, with no fewer than 10 batches proceeding concurrently (or all remaining claims, if fewer), unless the administrator or process arbitrator sets a different concurrency to avoid unfair delay or administrative infeasibility. (f) No suspension. Nothing in this Section 14.7 suspends the administrator's intake or administration of demands, the assessment or payment of fees when due under the applicable rules and this Section 14, or the tolling in Section 14.7(a).

14.8 Substitute Arbitration Forum. If the AAA is unavailable or unwilling to administer an arbitration for reasons not caused by Company's failure to satisfy the AAA's consumer-clause registration or Consumer Due Process Protocol obligations, the arbitration will be administered by JAMS as the substitute arbitration forum, under the JAMS rules applicable to the dispute as then in effect (including, for Consumer Disputes, the JAMS Consumer Arbitration Minimum Standards, and for Coordinated Demands, the JAMS Mass Arbitration Procedures, which the parties expressly adopt), with Company paying the fees those standards require a business to pay. If JAMS is also unavailable or unwilling to administer for such reasons, either party may apply to a court of competent jurisdiction to appoint a neutral arbitrator or arbitral administrator under 9 U.S.C. § 5, and the appointed arbitrator will apply the consumer or commercial rules (as applicable under Section 14.3) of the administrator last named above. This Section 14.8 provides for substitution of an arbitral forum only; it does not permit selection of a court except as expressly provided in Sections 14.5, 14.6, 14.7(d), 14.9, and 14.10.

14.9 Opt-Out. A Customer may opt out of this Section 14 (other than Section 14.1 and, to the extent permitted by law, Section 14.5) by written notice within 30 days after first accepting these Terms (or, for a material change to this Section 14, within 30 days after the change takes effect). The notice must be sent from the Account's registered email (or include information sufficient to identify the Account), state unambiguously that the Customer declines arbitration, and reference this Section 14. Send to info@aibriefbank.com or the address in Section 15.7. A timely opt-out is a one-time right, does not affect any other provision, and will be acknowledged by Company. If a Customer opts out, disputes proceed in the courts identified in Section 14.10, subject to Section 14.5.

14.10 Exceptions; Court Claims. The following are not subject to arbitration and may be brought in the state or federal courts located in New Castle County, Delaware (to whose exclusive jurisdiction the parties consent, subject to any non-waivable right of an individual Customer to sue in the courts of their home jurisdiction): (a) an application by either party for temporary or preliminary relief to preserve the status quo or prevent irreparable harm pending arbitration (including with respect to intellectual property, Confidential Information, or data security), without waiver of the merits arbitration; (b) individual small-claims-court actions within that court's jurisdiction and venue, which an individual Customer may bring in the small-claims court where they reside; (c) claims severed under Sections 14.5, 14.6, or 14.7(d); and (d) any claim that cannot be arbitrated as a matter of law.

14.11 Governing Law. These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-laws principles, except that (i) the Federal Arbitration Act governs this Section 14, and (ii) nothing in this Section displaces any non-waivable consumer-protection right or remedy of an individual Customer under the laws of their state of residence. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

14.12 No Waiver of Arbitration. Filing or pursuing a claim permitted in court under this Section 14 (including an application under Section 14.10(a)), or participating in such a proceeding, does not waive either party's right to compel arbitration of any other claim.

14.13 Severability; Survival. This Section 14 survives termination of these Terms. Except as otherwise provided in Sections 14.5 and 14.6 (which carry their own severability rules), if any part of this Section 14 is found unenforceable, that part is severed and the remainder enforced.

15. General Terms

15.1 Entire Agreement. These Terms, any Order Form, the DPA (if executed), and the documents they reference constitute the entire agreement between the parties and supersede any prior or contemporaneous understandings on the same subject.

15.2 Order of Precedence. In the event of conflict: (a) the DPA controls for Personal Data; (b) a signed Order Form controls over these Terms; (c) these Terms control over any other document.

15.3 Modifications. Company may update these Terms. Company will notify Customer of material changes by email to the Account's administrative contact or by in-Service notice at least 30 days before they take effect (except changes required by law, which may take effect sooner). For material changes, Company may require Customer or the affected User to affirmatively accept the updated Terms before continuing to use the Service. For non-material changes, continued use of the Service after the effective date constitutes acceptance.

15.4 Assignment. Neither party may assign these Terms without the other's consent, except that either party may assign in connection with a merger, acquisition, or sale of substantially all of its assets, subject to written notice to the other party.

15.5 Publicity. Company will not use Customer's name, logo, or trademarks in marketing, publicity, press releases, customer lists, or case studies without Customer's prior written consent. Customer may revoke any such consent prospectively by written notice.

15.6 Independent Contractors. The parties are independent contractors. These Terms do not create any agency, partnership, joint venture, or employment relationship.

15.7 Notices. Legal notices to Company must be sent by email to info@aibriefbank.com and by mail or courier to: Juris Intelligence, Inc., c/o Corporation Service Company, 251 Little Falls Drive, Wilmington, DE 19808. Notices to Customer will be sent to the Account's administrative email on file. Notices are effective on receipt.

15.8 No Third-Party Beneficiaries. These Terms do not create any third-party beneficiary rights.

15.9 Export Controls. Customer will comply with all U.S. and other applicable export control and sanctions laws. Customer represents that it is not located in, and is not a national or resident of, any country subject to U.S. embargo, and is not on any U.S. government list of prohibited or restricted parties.

15.10 Government Rights. The Service is a "commercial item," "commercial computer software," and "commercial computer software documentation" as those terms are used in FAR 12.212 and DFARS 227.7202. U.S. Government end users acquire only the rights set forth in these Terms.

15.11 Severability; Waiver. If any provision is held unenforceable, the remaining provisions remain in effect. A waiver of any provision on one occasion is not a waiver on any other occasion.

15.12 Interpretation. Headings are for convenience only. "Including" means "including without limitation."

16. Definitions

"Account" — Customer's registered account for accessing the Service.

"AI Features" / "AI Output" — defined in Section 1.6.

"Applicable Data Protection Laws" — GDPR, UK GDPR, CCPA/CPRA, and other privacy laws applicable to the parties' processing of Personal Data under these Terms.

"BriefBank" — the consumer-facing brand name under which Company operates the Service.

"Cloud Service" / "Service" — the BriefBank platform as described in Section 1.1.

"Company" — Juris Intelligence, Inc., a Delaware corporation, as defined on the Cover Page.

"Confidential Information" — non-public information disclosed by one party to the other that a reasonable recipient would understand to be confidential, including Customer Content, business plans, technology, and pricing.

"Customer Content" — defined in Section 1.5.

"DPA" — Company's Data Processing Addendum, also available upon request by emailing info@aibriefbank.com.

"Documentation" — Company's user-facing documentation for the Service.

"Fees" — amounts payable for the Service as described in Section 4.

"Force Majeure Event" — defined in Section 5.4.

"High Risk Activity" — any use where failure of the Service could lead to death, personal injury, or severe physical or environmental damage (e.g., life support, nuclear facilities, air traffic control).

"Order Form" — any ordering document executed by the parties for enterprise plans.

"Personal Data" — information relating to an identified or identifiable natural person, as defined in Applicable Data Protection Laws.

"Prohibited Data" — defined in Section 3.2.

"Subprocessor" — a third party engaged by Company to process Customer Content in providing the Service.

"Subscription Period" — the period for which a subscription is purchased, as specified on the plan description or Order Form.

"Usage Data" — defined in Section 1.4.

"User" — an individual authorized by Customer to access and use the Service.

END OF TERMS

Privacy Policy

Effective Date: July 1, 2026  ·  Last Updated: July 10, 2026

1. Who we are and scope

Juris Intelligence, Inc., a Delaware corporation ("Company," "Juris Intelligence," "we," "us," or "our"), operates BriefBank, an AI legal-research and drafting SaaS product.

This Product Privacy Policy applies to the logged-in BriefBank application and to related account, authentication, subscription, billing, support, AI, search, security, and product-operations processing. It does not cover the public marketing website's cookies, website analytics, or marketing-site browsing activity, which are addressed separately in the marketing-site Privacy & Cookie Notice.

BriefBank is U.S.-focused and designed for professional use by licensed attorneys and supervised legal staff. BriefBank offers Free, Professional, and Team tiers. A paid upgrade requires an eligibility attestation that the user is a licensed attorney or supervised legal staff.

Related documents include the Terms of Service, the Data Processing Addendum ("DPA"), the Subprocessor List, and the Security Overview.

Privacy contact: info@aibriefbank.com. Registered agent: Corporation Service Company, 251 Little Falls Drive, Wilmington, DE 19808.

2. Our dual role: controller vs. processor

BriefBank processes different types of information in different legal roles.

"Customer Content" includes uploaded files, documents, chat messages, prompts, and generated responses submitted to or generated within BriefBank. Customers are responsible for determining what Customer Content they submit and for providing any required notices or obtaining any required rights for personal information contained in that content.

3. Information we collect

The table below is our product notice at collection. "Sold/shared?" refers to the sale of personal information or sharing for cross-context behavioral advertising under California privacy law. We do not sell personal data or share it for cross-context behavioral advertising.

BriefBank stores account/control-plane data, data-plane records, extracted document text, and pgvector embeddings in Azure PostgreSQL. BriefBank does not retain the original uploaded file bytes: documents are processed at ingestion and the extracted text and Derived Data are stored; the source system you upload or sync from remains the system of record for the original file. Customer Content at rest is stored in the United States on Azure.

We do not request sensitive personal information. Customer Content may contain sensitive or privileged information if a customer chooses to submit it. Certain categories of regulated data must not be submitted to the Service (for example, HIPAA-protected health information absent a signed BAA, payment-card data, and export-controlled data); see Section 3.2 of the Terms of Service.

4. How we use information

We use information to:

1. Provide BriefBank — create accounts, authenticate users, store libraries and chats, process uploaded documents, generate text chunks and embeddings, retrieve relevant materials, and generate AI-assisted responses and drafts.
2. Administer subscriptions and billing — plan management, renewals, billing, accounting, and Stripe payment processing.
3. Operate, secure, and debug the product — request identifiers, security and reliability logs, error traces, product telemetry, abuse prevention, and enforcement of our Terms.
4. Provide support and communicate — respond to support requests and send operational, legal, and account-related communications.
5. Maintain legal and assent records — clickwrap acceptance records, eligibility attestations, and records needed to administer and enforce our agreements.
6. Analyze product usage using limited telemetry — product analytics are numeric/ID allowlisted and do not intentionally include Customer Content.

No-training commitment

BriefBank does not have any pipeline that trains or fine-tunes models on customer data. Paid-tier content is never used for training. Customer Content, prompts, generated responses, chat history, documents, and embeddings are not used to train any BriefBank, Microsoft/OpenAI, Anthropic, Perplexity, or other third-party model through BriefBank's current product data flows.

Derived Data, including text chunks and embeddings, is used only for retrieval and search infrastructure and is deleted with the related Customer Content.

The Terms reserve a future right to use de-identified and aggregated Free-tier chat to improve the service. BriefBank does not currently exercise that right and does not currently operate a de-identification or aggregation pipeline for that purpose.

5. AI features and third-party AI/search providers

BriefBank uses third-party AI and search providers as subprocessors to provide product features. Depending on the feature, prompts, retrieved context, Customer Content excerpts, generated responses, or query strings may be processed by these providers.

5.1 Azure OpenAI

BriefBank uses Azure OpenAI for inference and embeddings. Microsoft acts as processor under the Microsoft Products and Services Data Protection Addendum. Data sent to Azure OpenAI is not used to train Microsoft, OpenAI, or third-party models, and the models are stateless for inference. By default, Azure OpenAI may retain a sample of prompts and outputs for up to 30 days for abuse monitoring; those logs are logically isolated and subject to human review only if flagged. BriefBank is not currently approved for modified abuse monitoring, so the default Azure OpenAI abuse-monitoring posture applies.

5.2 Anthropic Claude via Azure AI Foundry

BriefBank uses Anthropic Claude via Azure AI Foundry. For this processing, Anthropic — not Microsoft — is the processor under Anthropic's Commercial Terms and DPA, and it is not covered by Azure OpenAI zero-data-retention arrangements. Anthropic does not train on the data by default. Anthropic may retain data for limited operational and safety purposes for approximately 30 days, and flagged content may be retained longer under Anthropic's terms.

5.3 Perplexity web search

Perplexity web search is optional and off by default. If web search is enabled, only the model-formed Perplexity query string is sent to Perplexity; BriefBank does not send documents or chat history to Perplexity for web search. BriefBank calls Perplexity's Sonar API. Under Perplexity's published Zero Data Retention Policy for the Sonar API, Perplexity does not retain the query string, and Perplexity's API terms contractually prohibit using customer content to train models. Perplexity processes the query string under its API terms and auto-incorporated Data Processing Addendum.

5.4 Logging and telemetry transparency

BriefBank does not intentionally log document content. Console logs may retain truncated query fragments of up to 100 characters. PostHog analytics are numeric/ID allowlisted and do not include content. Application error and performance telemetry is captured through Azure Monitor / Application Insights within BriefBank's own Azure tenant; it is not sent to a third-party error-monitoring provider.

6. How we disclose information

We disclose information only as described in this Policy, the Terms, the DPA, and the Subprocessor List.

6.1 Service providers and subprocessors

We use service providers and subprocessors to operate BriefBank, including: Microsoft Azure (including Azure OpenAI, Container Apps hosting, and Azure PostgreSQL); Anthropic; Perplexity, if web search is enabled; PostHog for product analytics; a transactional email provider; and Stripe for billing. These providers process information to provide their services to BriefBank and are listed on the public Subprocessor List.

6.2 Customer organizations and administrators

If you use BriefBank through an organization or team, your organization and its administrators may be able to administer your account, manage users, roles, tiers, and billing, and access information associated with the organization according to BriefBank's roles, permissions, and customer configuration.

6.3 At the customer's direction

For Customer Content, we process and disclose information as instructed by the customer, including to authorized users and to the subprocessors needed to provide BriefBank.

6.4 Professional advisers

We may disclose information to lawyers, auditors, insurers, accountants, and other professional advisers where reasonably necessary for legal, compliance, risk-management, accounting, or business purposes.

6.5 Legal, safety, and compliance reasons

We may disclose information where we believe it necessary to comply with law, legal process, or government requests; protect the rights, property, or safety of BriefBank, customers, users, or others; investigate security incidents or abuse; or enforce our Terms.

6.6 Corporate transactions

We may disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, subject to appropriate protections for the information.

6.7 No sale or cross-context behavioral advertising

We do not sell personal data, and we do not share personal data for cross-context behavioral advertising.

7. Cookies and tracking in the product

The logged-in BriefBank product uses cookies or similar technologies that are necessary for authentication, session management, security, and operation of the application. Product analytics are limited to numeric/ID allowlisted telemetry and do not intentionally include Customer Content. The product does not use advertising cookies for cross-context behavioral advertising. Cookies and analytics on the public marketing website are addressed separately in the marketing-site Privacy & Cookie Notice.

8. Legal bases for GDPR/UK processing

Where GDPR or UK data protection law applies and BriefBank acts as controller, we rely on the following legal bases:

For Customer Content and Derived Data processed on behalf of a customer, the customer is the controller and determines the applicable legal basis; BriefBank processes that information as processor under the customer's instructions and the DPA, where applicable.

9. Data retention and deletion

BriefBank retains information only as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted for legal, security, accounting, dispute-resolution, or compliance reasons.

9.1 Customer Content and Derived Data

Customer Content deletion is event-driven; BriefBank does not currently run a scheduled job that deletes Customer Content after a fixed period. When an account, library, document, or chat deletion is processed, BriefBank's deletion workflow is designed to purge associated database rows and embeddings across the control plane and data plane, and it is idempotent (safe to re-run). Because BriefBank does not retain original uploaded file bytes, there are no stored raw files to delete beyond those records. For paid tiers, Customer Content deletion requests are completed within 30 days; for Free-tier accounts, Customer Content is deleted promptly on account closure. BriefBank may close Free-tier accounts that have been inactive for three or more consecutive months, with at least 30 days' advance notice, as described in Section 5.3 of the Terms of Service; Customer Content is deleted on such closure as described above. Derived Data, including chunks and embeddings, is deleted with the related Customer Content.

9.2 Backups and provider logs

Deleted Customer Content may remain in backups until those backups are overwritten or expire in the ordinary backup cycle. AI-provider abuse, safety, or operational logs may persist according to the applicable provider terms, including the Azure OpenAI and Anthropic practices described in Section 5.

9.3 Controller-side records

Account, authentication, billing, subscription, usage, support, security, and legal/assent records may be retained as needed to operate BriefBank, comply with legal and accounting obligations, investigate security issues, resolve disputes, and enforce our Terms. Immutable clickwrap assent logs may be retained where necessary to maintain legal records.

10. Data residency and international transfers

Customer Content at rest is stored in the United States on Azure. Some AI model deployments used by BriefBank are Global or multi-region; as a result, inference prompts, context, and responses may be processed in regions outside the United States, while Customer Content storage at rest remains in the United States. Where GDPR or UK data protection law applies, international transfers are handled through the DPA, including Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable.

11. Security

BriefBank maintains technical and organizational measures designed to protect information processed through the product; more detail is available in the Security Overview. These measures include:

• Azure-hosted infrastructure using Azure PostgreSQL;
• encryption controls for data in transit and at rest;
• tenant isolation using dual-database row-level security keyed on org_id;
• Azure Active Directory managed-identity service authentication;
• secrets management through Azure Key Vault;
• email/password authentication and Microsoft SSO;
• role and tier controls for account and organization administration;
• least-privilege access controls;
• audit/security logging and request identifiers; and
• immutable clickwrap assent logs.

No security program can guarantee absolute security. Users and organizations are responsible for maintaining the confidentiality of their credentials, configuring access appropriately, and ensuring that Customer Content submitted to BriefBank is authorized for processing. Security-incident handling is addressed in the Terms and, where applicable, the DPA.

12. Your privacy rights

Your rights depend on where you live, the type of information involved, and whether BriefBank acts as controller/business or processor/service provider.

To exercise rights for information where BriefBank acts as controller, email info@aibriefbank.com with enough information to identify your account, organization, and request. We may need to verify your identity or authority before responding.

For Customer Content, BriefBank generally acts as processor/service provider on behalf of the customer. If your request concerns Customer Content controlled by a customer organization, direct the request to that customer; if we receive such a request directly, we will route or assist with it as required by law and the applicable customer agreement.

12.1 California privacy rights

If California privacy law applies, California residents may have the right to: know/access the categories and specific pieces of personal information collected; correct inaccurate personal information; delete personal information; obtain a portable copy of personal information; opt out of the sale or sharing of personal information; limit the use and disclosure of sensitive personal information, where applicable; and be free from discrimination for exercising privacy rights.

BriefBank does not sell personal information or share it for cross-context behavioral advertising, so no sale/share opt-out is necessary for current product processing. Because BriefBank does not sell or share product data for cross-context behavioral advertising, a Global Privacy Control signal does not change any product sale/share setting; we will treat legally recognized opt-out preference signals in accordance with applicable law. California residents may use an authorized agent to submit a request; we may require proof of authorization and may verify the request directly with you where permitted.

12.2 GDPR and UK privacy rights

If GDPR or UK data protection law applies and BriefBank acts as controller, you may have the right to: access your personal data; rectify inaccurate personal data; erase personal data; restrict processing; receive data portability; object to processing based on legitimate interests; withdraw consent where processing is based on consent; and lodge a complaint with a supervisory authority. Where BriefBank acts as processor for Customer Content, the customer/controller is responsible for responding to data-subject requests, and BriefBank assists the customer as required by the DPA.

13. Automated decision-making and AI output

BriefBank does not make solely automated legal decisions about users or clients that produce legal or similarly significant effects. BriefBank provides AI-assisted research and drafting functionality for professional legal users. AI-generated output may be incomplete, inaccurate, or unsuitable for a particular matter, and is not legal advice. Licensed attorneys and supervised legal staff are responsible for reviewing and validating all output before relying on it. See the Terms of Service for additional terms governing AI features.

14. Children and professional use only

BriefBank is not directed to children under 13 and is not a consumer service; it is designed for professional use by licensed attorneys and supervised legal staff. We do not knowingly collect controller-side account information from children under 13. If you believe a child has provided controller-side personal information to BriefBank, contact info@aibriefbank.com. If the information is contained in Customer Content, the relevant customer/controller is responsible for handling the request, and BriefBank will assist as required by the applicable agreement and law.

15. Changes to this policy

We may update this Product Privacy Policy as our practices or legal requirements change. The current version is the version posted for the BriefBank product. If we make material changes, we will provide notice by reasonable means, such as in-product notice, email, or another legally required method. For changes to clickwrap-governed documents, re-acceptance may be required in accordance with Section 15.3 of the Terms of Service. The marketing-site Privacy & Cookie Notice may be updated separately.

16. How to contact us and complaints

For privacy questions, requests, or complaints, contact Juris Intelligence, Inc. at info@aibriefbank.com. Registered agent for service of process: Corporation Service Company, 251 Little Falls Drive, Wilmington, DE 19808.

If GDPR or UK data protection law applies, you may also have the right to lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can try to resolve the issue.

Data Processing Addendum

Effective Date: 2026-07-04

This Data Processing Addendum ("DPA") is incorporated into the BriefBank Terms of Service (Terms §3.1) and applies whenever Juris Intelligence, Inc. ("Company") processes Customer Personal Data on a customer's behalf. For self-serve customers it takes effect on acceptance of the Terms; no separate signature is required. Where the Terms and this DPA conflict as to Personal Data, this DPA controls.

1. Roles and scope

"Customer Personal Data" means Personal Data contained in Customer Content or Derived Data processed on Customer's behalf. Customer is the controller/business; Company is the processor/service provider/contractor (a subprocessor if Customer is itself a processor). Company-controlled account, billing, support, usage, and legal records are governed by the Privacy Policy, not this DPA.

2. Processing instructions

Company will process Customer Personal Data only to provide, secure, support, and operate BriefBank, on Customer's documented instructions (the Terms, product settings, AI-feature use, and this DPA) and applicable law. Company will not train or fine-tune AI models on Customer Personal Data.

3. Confidentiality and security

Personnel authorized to process Customer Personal Data are subject to confidentiality obligations. Company maintains the technical and organizational measures in Annex II and the Security Overview.

4. Subprocessors

Customer grants general authorization to use the subprocessors in the Subprocessor List. Company imposes written data-protection terms on subprocessors consistent with this DPA, remains responsible for their processing, and provides at least 30 days' advance notice of new subprocessors with an objection right (Terms §3.5).

5. Data-subject requests and assistance

Company will reasonably assist Customer with data-subject requests, security obligations, DPIAs, and prior consultations, taking into account the nature of processing and information available to Company. Company may redirect a requester who contacts it directly to Customer.

6. Security incidents

Company will notify Customer of a confirmed personal-data breach involving Customer Personal Data without undue delay, in accordance with Terms §3.7, with information reasonably available to support Customer's obligations.

7. Deletion or return

Upon Customer request or termination, Company will delete Customer Personal Data unless legally required to retain it. Paid-tier deletion requests complete within 30 days; Free-tier account closure triggers prompt deletion. Deletion purges associated database rows and embeddings (original uploaded file bytes are not retained); backups follow the ordinary cycle. Export/return is provided where the Service offers it or as separately agreed.

8. Audits and information

Company will make available information reasonably necessary to demonstrate compliance (the Security Overview, subprocessor information, and reasonable questionnaire responses). Any audit must be reasonable, on advance notice, under confidentiality, and must not compromise other customers, security, or trade secrets.

9. CPRA service-provider/contractor terms

Company will not: sell or share Customer Personal Data; retain, use, or disclose it outside the business purposes in the Agreement; retain, use, or disclose it for a commercial purpose other than providing BriefBank; or combine it with personal data from other sources except as CPRA permits. Company certifies it understands and will comply with these restrictions and will notify Customer if it can no longer comply. Customer may take reasonable steps to stop and remediate unauthorized processing.

10. International transfers

BriefBank is currently offered to customers in the United States only, and Customer Content is stored at rest in the United States. This DPA does not presently rely on EU Standard Contractual Clauses or the UK IDTA because Company does not offer the Service in the EEA or UK.

If Company makes the Service available to EEA or UK customers in the future, the EU Standard Contractual Clauses (Module Two where Customer is controller and Company is processor; Module Three where Customer is a processor and Company is subprocessor, with Clause 9 general written authorization and 30 days' notice) and the UK IDTA or UK Addendum, as appropriate, will be incorporated by an updated version of this DPA before such availability, with Annexes I–III below serving as the SCC Annexes. Onward transfers to subprocessors use appropriate safeguards.

11. Order of precedence

For Customer Personal Data, this DPA controls over conflicting Terms provisions (consistent with Terms §15.2). The Terms otherwise remain in effect.

Annex I — Processing details

• Company: Juris Intelligence, Inc., Delaware corporation; info@aibriefbank.com.
• Customer: the BriefBank customer identified in the applicable account/order.
• Subject matter: provision of BriefBank AI legal research/drafting SaaS.
• Duration: term of service plus deletion/backup periods.
• Nature/purpose: hosting, storing, indexing, chunking, embedding, retrieving, generating responses/drafts, maintaining chat/document libraries, optional web search, security, support, deletion, and compliance.
• Data categories: Customer Content, documents, uploaded files, prompts, chats, generated outputs, resource chunks, embeddings, metadata, and personal data the Customer includes.
• Data subjects: customer users, clients, opposing parties, witnesses, experts, court personnel, attorneys, legal staff, and third parties referenced in Customer Content.
• Sensitive data: only if submitted by Customer; may include special-category, criminal-offense, privileged, or confidential legal-matter data.
• Frequency: continuous/as initiated by Customer use.

Annex II — Security measures

Encryption in transit and at rest; dual-database row-level security keyed on org_id; managed-identity/AAD service authentication; fail-closed authorization; Azure Key Vault for secrets; audit logging; least-privilege access; subprocessor DPAs and diligence; event-driven deletion of database rows and embeddings (original uploaded file bytes are not retained); and incident notification per Terms §3.7. See the Security Overview.

Annex III — Subprocessors

The current Subprocessor List, incorporated by reference.

Subprocessors

Effective Date: 2026-07-04

This page lists the third parties BriefBank engages to process data in providing the Service, as referenced in the Terms of Service (§3.5) and the Data Processing Addendum (Annex III). BriefBank provides at least 30 days' advance notice of new subprocessors by email to each Account's administrative email on file, with an objection right under Terms §3.5.

To receive notice of changes to this list, or to object to a new subprocessor for material data-protection reasons, contact info@aibriefbank.com.

Security Overview

Effective Date: 2026-07-04  ·  Available on request per Terms §3.3; version-controlled.

This overview describes current BriefBank controls. BriefBank is not SOC 2 certified; SOC 2 is a roadmap goal only.

Architecture and storage

Customer Content is stored at rest in Azure in the United States: Azure PostgreSQL holds control-plane and data-plane records, extracted document text, and pgvector embeddings derived from ingested content. BriefBank does not retain the original uploaded file bytes; documents are processed at ingestion and the extracted text is stored.

Core controls

• Encryption in transit and at rest.
• Tenant isolation through dual-database row-level security keyed on org_id.
• Managed-identity (AAD) authentication between services; fail-closed authorization.
• Secrets stored in Azure Key Vault.
• Audit logging and least-privilege access for personnel and systems.
• Email/password and Microsoft SSO authentication.
• Clickwrap acceptance with immutable assent logging.

AI and data commitments

BriefBank does not train or fine-tune models on Customer Content; paid-tier content is never used for training. Provider postures are described in the Privacy Policy §3 and the Subprocessor List. Perplexity web search is opt-in and off by default and sends only the model-formed query string, via Perplexity's Sonar API under its published Zero Data Retention Policy; pre-send PII redaction is planned but not yet built.

Logging and telemetry

Production query-text capture is disabled. Console logs may retain truncated query fragments of up to 100 characters. PostHog is allowlisted to numeric/ID analytics without content. The error monitor is configured with send_default_pii=false, but no message-body scrubber is currently in place, so Customer Content could appear in an exception trace.

Deletion, retention, and backups

Account, library, document, and chat deletion purges related database rows and embeddings across planes; no raw uploaded files are retained, so none need separate deletion. Deletion is idempotent and event-driven; there is no scheduled automatic retention-expiry job. Paid deletion requests complete within 30 days; Free-tier content is promptly deleted on account closure. Backups follow the ordinary backup cycle.

Data residency

Customer Content stored at rest remains in the United States. Some inference may use Global/multi-region model deployments, so prompts/responses may be processed outside the U.S. during inference.

Subprocessors and incidents

BriefBank uses subprocessors under applicable DPAs/terms and provides notice and objection rights under Terms §3.5. Security incidents are handled and notified under Terms §3.7.

Vulnerability reporting

Report suspected vulnerabilities to info@aibriefbank.com with the subject "Security Vulnerability." Do not access other tenants' data, disrupt the Service, or exfiltrate data.

Copyright & DMCA Policy

Effective Date: 2026-07-22

Juris Intelligence, Inc. ("Company," "we," "us," or "our") operates BriefBank. We respect the intellectual-property rights of others and expect our customers and their users to do the same. This page describes our designated agent for copyright notices under the Digital Millennium Copyright Act ("DMCA"), our procedure for handling takedown and counter-notices, and our repeat-infringer policy.

Designated Agent

Notices of claimed copyright infringement should be sent to our designated agent, registered with the U.S. Copyright Office's DMCA Designated Agent Directory:

Our current registration is on file with the U.S. Copyright Office at dmca.copyright.gov.

Notice of Claimed Infringement

If you believe material available through the Service infringes a copyright you own or control, please send our designated agent a written notice that includes, to the extent required by 17 U.S.C. §512(c)(3):

1. A physical or electronic signature of a person authorized to act on behalf of the copyright owner;
2. Identification of the copyrighted work claimed to have been infringed, or a representative list if multiple works are covered by a single notice;
3. Identification of the material claimed to be infringing and information reasonably sufficient to permit us to locate it (for example, a library or document identifier or URL);
4. Contact information for the complaining party, including an address, telephone number, and email address;
5. A statement that the complaining party has a good-faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law; and
6. A statement, made under penalty of perjury, that the information in the notice is accurate and that the complaining party is authorized to act on behalf of the copyright owner.

Please note: under 17 U.S.C. §512(f), anyone who knowingly and materially misrepresents that material is infringing may be liable for damages. Before sending a notice, please consider whether the use you are reporting may be authorized, a fair use, or otherwise non-infringing.

Our Process

Upon receipt of a notice that substantially complies with the requirements above, we will acknowledge receipt, expeditiously remove or disable access to the identified material, and notify the customer whose account contains the material. If a notice is incomplete, we may reply to request the missing information rather than remove the material. We do not monitor customer content for infringement and have no obligation to do so, but we will act expeditiously to remove or disable access to material if we otherwise become aware of facts or circumstances from which infringing activity is apparent.

Counter-Notification

If you believe material you posted was removed or disabled by mistake or misidentification, you may send our designated agent a counter-notice that includes, to the extent required by 17 U.S.C. §512(g)(3):

1. Your physical or electronic signature;
2. Identification of the material that was removed or disabled and its location before removal;
3. A statement, under penalty of perjury, that you have a good-faith belief the material was removed or disabled as a result of mistake or misidentification;
4. Your name, address, and telephone number, and a statement consenting to the jurisdiction of the federal court for your district (or, if outside the United States, for any district in which BriefBank may be found) and that you will accept service of process from the person who submitted the original notice, or an agent of that person.

Upon receipt of a valid counter-notice, we will promptly forward it to the party who submitted the original notice and inform them that we will replace or restore the material in 10 business days. A counter-notice we forward includes your name and address, as required by law. We will restore or replace the material not less than 10, nor more than 14, business days after receipt of your counter-notice, unless our designated agent first receives notice from the complaining party that they have filed a court action seeking to restrain you from the infringing activity, in which case the material will remain disabled pending that action.

Repeat Infringer Policy

In accordance with the DMCA and our Terms of Service, we may, in appropriate circumstances and at our discretion, suspend or terminate the accounts of users or customers who are determined to be repeat infringers.

Questions

For questions about this policy, contact info@aibriefbank.com.

Privacy & Cookie Notice

Effective Date: 2026-06-17    Last Updated: 2026-07-02

This notice explains what this website (aibriefbank.com) collects and the choices you have. It covers the public marketing site only. How we handle data inside the BriefBank product (the logged-in application) is governed by the product Privacy Policy, your customer agreement, and the Data Processing Addendum.

BriefBank is owned and operated by Juris Intelligence, Inc. Questions: info@aibriefbank.com.

What we collect on this site

We use first-party product analytics (PostHog) to understand how visitors use the marketing site so we can improve it. That includes:

• pages viewed and links/buttons clicked;
• the referring page and basic UTM campaign parameters, if present;
• your device and browser type and approximate location derived from your IP address;
• an anonymous visitor identifier stored in a first-party cookie, shared across aibriefbank.com subdomains so that a visit here can be associated with a later sign-up in the app.

We do not sell or rent your personal information, we do not use it for third-party or cross-context behavioral advertising, and this site runs no advertising or social-media tracking pixels.

Cookies & local storage

• Analytics cookie (PostHog) — stores the anonymous visitor identifier described above. This is the only non-essential item, and you can turn it off below.
• Functional storage — your light/dark theme preference and your analytics opt-out choice are kept in your browser's local storage. These are essential to remember your settings and are never used to track you.

Your privacy choices

Analytics on this site is opt-out. You can turn it off at any time for this browser, and we automatically honor the Global Privacy Control signal if your browser sends one.

This choice is stored per browser and per device, so you'll need to set it again on other browsers or if you clear your site data.

Contact

For any privacy question, or to exercise rights you may have under applicable law, email info@aibriefbank.com.