Privacy Policy

Maple Juris (“we”, “us”) is a Canadian legal citation verification service operated by 13538087 Canada Inc. This policy describes how we collect, use, and protect personal information when you use maplejuris.com and the Maple Juris API (together, the “Service”).

• Account information. When you create an account we collect your name, email address, and profile picture through our authentication provider, Clerk. If you sign in with Google or GitHub, we receive this information from that provider.
• Billing information.Payments are processed by Stripe. Card details are entered on Stripe’s own pages and go to Stripe directly; they never reach us. We keep your Stripe customer id, your plan and your subscription status. Deleting your account deletes this data.
• Usage data. We record API request counts per API key for quota metering and billing, and standard server logs (IP address, timestamps, request metadata) for security and reliability.
• Query content. Citation strings and discovery descriptions you submit are processed to return results and are retained only in transient logs. A language model reads your query to turn it into structured fields or search terms; it does no legal reasoning, and whether a citation is valid is decided by a deterministic lookup against our legislative graph, never by a model. Sending pre-parsed structured input skips the model entirely, leaving nothing to send outside our systems. Otherwise your query text runs through OpenAI’s API platform, not the consumer ChatGPT product: OpenAI does not use API data to train its models, and deletes it within 30 days, which it keeps for abuse monitoring. Please do not include confidential, privileged or sensitive personal information in a query. The API documentation sets out what not to send.

If you sign in with Google, we request only your basic profile information: name, email address, and profile picture. We use this information solely to create and authenticate your account, display your profile within the Service, and contact you about your account.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or share it with third parties except the service providers listed below.

We use personal information to provide and secure the Service, authenticate you, meter API usage against your plan, process payments, respond to support requests, and send transactional messages about your account. We do not sell personal information or use it for third-party advertising.

We share personal information only with the service providers that operate the Service on our behalf: Clerk (authentication), Stripe (payment processing), Google Cloud (hosting and infrastructure), and OpenAI (only to read your query text; never to store your personal information, and never your account or billing details). Each processes data under its own contractual and security obligations. We may also disclose information where required by law. These providers operate in the United States, so information we hold is stored and processed there and is subject to the laws of that country, including lawful access by its authorities. We may change providers, and will update this list when we do.

We retain account information while your account is active. You may delete your account at any time from your account settings, or request deletion by emailing [email protected]. Upon deletion we remove your personal information from our systems within 30 days, except records we must keep for legal or accounting purposes. Deleting your account also cancels any paid subscription immediately and deletes your usage data, API keys and billing record; Stripe keeps invoices as tax records.

All traffic to the Service is encrypted in transit with TLS. Access to production systems is restricted and credentialed, and secrets are stored in managed secret storage. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.

Subject to applicable law - including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) - you may request access to, correction of, or deletion of your personal information by contacting us at [email protected].

We may update this policy from time to time; the date above reflects the latest revision, and material changes will be announced on this page. Questions about this policy can be sent to [email protected].