Privacy Policy.

JudicialMind is a product of QuantumShell Intelligence Private Limited ("QuantumShell", "we", "us" or "our"). QuantumShell is the entity that operates the JudicialMind website, the JudicialMind platform and any associated APIs or services.

References to "JudicialMind" in this policy refer to the product and, where context requires, to QuantumShell as the operating company.

For personal data we collect about visitors to our website, prospects, applicants and individual users of JudicialMind (for example, authentication data and usage telemetry), QuantumShell is the controller.

For Customer Content that our business customers upload or generate in JudicialMind - including matter files, documents, prompts and outputs - the customer is the controller and QuantumShell acts as the processor on the customer's behalf under a written Data Processing Addendum.

Account and identity data - name, work email, employer, role, authentication credentials and, where enabled, identity attributes from your single sign-on provider.

Usage data - logs of platform interactions such as feature use, request timestamps, approximate location derived from IP, device and browser information, and error diagnostics.

Customer Content - documents, matter data, prompts, annotations and outputs submitted or generated within the platform. This may contain personal data that our customers are responsible for.

Communications - information you provide when you contact us, request a demo, respond to a survey or engage support.

To provide, operate, secure and improve JudicialMind; to authenticate users and manage access; to respond to support requests; to communicate about the service; to meet legal, tax and accounting obligations; and to prevent fraud and abuse.

We do not sell personal data. We do not share personal data for cross-context behavioural advertising.

Customer Content is processed to deliver the features you use - retrieval, analysis, generation, review, automation and the rest of the platform. It is handled under our DPA and scoped to the customer's tenant.

Customer Content is not used to train shared or foundation models. Where we invoke third-party models to produce an output for you, we contract for no-retention and no-training terms wherever the model provider supports them, and we document the invocation in tenant audit logs.

Customers can configure retention, regional processing where available, and access controls within their tenant.

Where GDPR or UK GDPR applies, we rely on: performance of a contract to provide the service; legitimate interests to secure, improve and market the service in a proportionate way; compliance with a legal obligation; and consent where required (for example, for certain cookies or direct-marketing communications).

For Customer Content, the legal basis is determined by the customer as controller.

We share personal data with service providers that support hosting, infrastructure, email delivery, analytics, customer support and payment processing, and with subprocessors that support AI model inference. Subprocessors are bound by written agreements and confidentiality terms.

Our current list of subprocessors is available on request and is maintained under our DPA. Material changes are notified in line with the DPA.

We may disclose personal data when required by law, to respond to lawful requests from public authorities, to enforce our Terms, or to protect our rights, users and the public.

JudicialMind is operated from India and is used by customers and users worldwide. Where personal data is transferred across borders, we rely on appropriate safeguards - including the EU Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, and equivalent mechanisms - and we apply additional technical and organisational measures where needed.

Account and usage data is retained while your account is active and for a reasonable period afterwards to meet legal, audit and legitimate business needs. Customer Content is retained for the term of the customer contract and deleted or returned as set out in the DPA.

Audit logs are retained for the period configured by the customer, subject to technical minimums.

Depending on where you are, you may have the right to access, correct, delete, port or restrict the processing of your personal data, to object to certain processing, and to withdraw consent where processing is based on consent.

If you are an individual user of a customer tenant, please raise rights requests with the customer (the controller) in the first instance. If you contact us directly, we will route the request appropriately.

You may also have the right to lodge a complaint with your local supervisory authority.

We take the protection of personal data and Customer Content seriously. Our current security practices are described on our Security page. We are an early-stage company and are investing continuously in our security programme. No system is perfectly secure; we commit to handling data carefully and to being transparent about what we do and don't do.

JudicialMind is a professional tool and is not intended for children. We do not knowingly collect personal data from children.

We may update this policy from time to time. Material changes will be communicated through the product or by email where appropriate. The "Last updated" date at the top of this page reflects the current version.

For privacy questions, rights requests or DPA enquiries, write to privacy@judicialmind.ai. The data controller is QuantumShell Intelligence Private Limited.