Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide to us, including:

• Account Information: Name, email address, password, and profile details
• Student Verification: Educational email address (.edu or .edu.ph) for student plan eligibility
• Payment Information: Processed securely through PayMongo (we do not store credit card details)
• Legal Queries: Questions and searches you submit to our AI system
• Generated Documents: Legal documents and drafts you create using our service
• Communication Data: Emails, support tickets, and feedback you send us

1.2 Information Automatically Collected

When you use our Service, we automatically collect:

• Usage Data: Pages visited, features used, search queries, and interaction patterns
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP address, access times, and referring URLs
• Cookies and Similar Technologies: Session cookies, preference cookies, and analytics cookies
• AI Interaction Data: Queries submitted to AI, response times, and error logs

2. How We Use Your Information

2.1 Service Provision

We use your information to:

• Create and manage your account
• Process your legal queries through our AI system
• Generate legal documents and research results
• Enforce usage limits (3 searches/1 draft per day for free users)
• Process payments and manage subscriptions
• Verify student status for educational pricing

2.2 Service Improvement

We analyze usage patterns to:

• Improve AI accuracy and response quality
• Develop new features and services
• Optimize platform performance
• Fix bugs and technical issues
• Understand user needs and preferences

2.3 Communication

We may contact you to:

• Send account-related notifications
• Respond to inquiries and support requests
• Provide service updates and announcements
• Send marketing communications (with your consent)
• Notify about price changes or terms updates

3. AI-Specific Privacy Considerations

3.1 AI Data Processing

• Queries are processed by multiple AI providers (Gemini, OpenAI, DeepSeek)
• We do not share personally identifiable information with AI providers
• Queries are anonymized before processing when possible
• AI responses are cached temporarily to improve performance

3.2 Content Retention

• Search queries are retained for 90 days for quality assurance
• Generated documents are stored in your account until deleted
• AI conversation history may be retained for service improvement
• You can request deletion of your data at any time

4. Information Sharing and Disclosure

4.1 We DO NOT Sell Your Information

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Limited Sharing

We may share your information only in these circumstances:

• Service Providers: With trusted vendors who help operate our service (e.g., PayMongo for payments)
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, property, or safety, or that of others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to sharing

5. Data Security

5.1 Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit using HTTPS/TLS
• Secure password hashing using industry-standard algorithms
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure data centers with physical security measures

5.2 Data Breach Response

In the event of a data breach:

• We will notify affected users within 72 hours
• We will provide information about the nature of the breach
• We will take immediate steps to secure the system
• We will cooperate with relevant authorities

6. Your Privacy Rights

6.1 Your Rights Include:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your data

6.2 Exercising Your Rights

To exercise any of these rights, contact us at privacy@batasnatin.com. We will respond to your request within 30 days.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services and AI models

Specific retention periods:

• Account data: Until account deletion
• Search queries: 90 days
• Generated documents: Until manually deleted by user
• Payment records: 7 years (legal requirement)
• Support tickets: 2 years

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality
• Authentication Cookies: Keep you logged in securely
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand usage patterns

8.2 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than the Philippines. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete that information promptly.

11. Third-Party Services

We integrate with the following third-party services:

• PayMongo: Payment processing (PCI DSS compliant)
• Google OAuth: Optional authentication method
• AI Providers: Gemini, OpenAI, DeepSeek for AI processing

These services have their own privacy policies. We encourage you to review them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

For privacy-related questions or concerns, please contact our Data Protection Officer:

14. Philippine Data Privacy Act Compliance

We comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. As a data controller, we ensure:

• Lawful and fair processing of personal data
• Implementation of appropriate security measures
• Respect for data subject rights
• Accountability in data processing activities

You may file complaints with the National Privacy Commission if you believe your privacy rights have been violated.