Privacy Policy

1. Service operator

jury.mn and chat.jury.mn are operated by Смарт интел ХХК, registration number 6986897. Address: 11th khoroo, Sukhbaatar District, Ulaanbaatar 14190, Mongolia. Phone: 88110921. Email: info@jury.mn.

2. Information we process

We process the following information as part of operating the service. You choose what to include in a question, and legal questions may contain sensitive information.

• your verified phone number if you sign in with one; account and login timestamps; and authentication-token records;
• if you sign in with Google or Facebook, the provider’s stable user identifier, the time it was linked to your Jury account, and the name and email address the provider shares (for Google, only a verified email). The name and email are used only to show which account you are signed in to and for support, never to find or merge accounts. A Google profile-picture URL is not saved;
• questions, answers, conversation titles and history, and saved legal sources;
• PDF, Word and text documents and images you attach, their filenames and sizes, and text extracted from documents;
• information about conversations, models, tokens, costs, usage allowances, and usage totals;
• product code, amount, status, transaction identifiers, provider, timestamps, and payment-gateway event information;
• organization name, registration number, billing email, membership, invitation, role, and audit information;
• IP address and request, security, and error-related technical information; language, authentication, analytics, and ad-measurement choices stored in the browser.

3. Why we use it

We use information to authenticate users, answer questions, search legal sources, operate conversation history and saved sources, track usage allowances, confirm payments, operate team features, send notices, protect the service, investigate abuse or errors, and respond to requests.

We process information to provide the service, perform our relationship with users, meet legal obligations, protect service security, or, where required, based on your consent. We request separate consent for foreign transfers or sensitive information when required by law.

You can sign in with a phone number, Google or Facebook. The first time you use Google or Facebook, you choose whether to create a new Jury account or to sign in to an existing one and link it. Matching email addresses do not automatically merge accounts.

4. AI and other providers

Your question, relevant conversation context, and excerpts returned by search may be sent to OpenAI to generate an answer or conversation title. A search query may be sent to Google to create a semantic-search embedding. This processing may occur outside Mongolia.

The names and extracted text of documents, and the images selected for a question, are sent with that question to the configured OpenAI or Google AI service. Uploading first extracts document text or validates and stores an image on our server. Images are re-encoded without EXIF and other metadata and may be resized. The selected attachments are used for AI processing when you send the question.

Google or Facebook sign-in opens that provider’s login page. The provider receives your request to sign in to Jury and technical information such as your IP address and browser details. Jury exchanges a verification code with the provider and checks the user identifier. This sign-in flow does not send your Jury conversations, files or billing records to the provider. Google’s and Meta’s own privacy terms also apply.

verify.mn may be involved in phone verification, Bonum and QPay in payment, AWS SES in email delivery, and Cloudflare and infrastructure providers in operating the site and network. Their processing is governed by applicable provider terms, settings, and law. We follow the principle of sending only the information needed for the relevant function.

We use Sentry to diagnose software errors, sending the error type, code location, application release, and environment. Before transmission, error reports exclude chat and document contents, request bodies, authentication information, and user identifiers. Session replay is disabled. Sentry receives network connection metadata, including the IP address, when a report is transmitted.

Only if you arrive from a Facebook or Instagram ad and accept ad measurement, our server reports these events to Meta Platforms through its Conversions API: the visit, a guest’s first question, a new account, and a confirmed payment with its amount. Each report includes your IP address, browser details (user agent) and Meta’s ad click identifier (fbclid). Questions, answers, conversations, files, names, phone numbers and email addresses are never sent to Meta. Meta may use this information under its own terms to measure ad results and improve ad delivery, and the processing may occur outside Mongolia.

5. Analytics and browser storage

The Google tag loads on every page with analytics storage denied by default. Before you choose, or after you decline, it does not create analytics cookies; Google may receive limited cookieless measurement signals containing information such as the page URL, IP address, browser or device information, and consent state. Accept enables analytics cookies. Advertising storage, ad-user data, and ad personalization always remain disabled. Your choice is stored in browser localStorage.

This landing site serves the Lora and Manrope fonts from jury.mn rather than Google. The chat app stores authentication tokens in localStorage; log out when using a public or shared device.

An essential, secure cookie inaccessible to JavaScript binds a social sign-in request to the initiating browser for up to ten minutes. Provider access tokens are not retained in browser storage or the Jury database. Jury’s own session tokens continue to use localStorage.

When the chat app is opened from a link with campaign tags such as utm_source or utm_campaign, it keeps those tags and a random browser identifier in localStorage for up to 90 days and uses them to count visits, first guest questions and new accounts per campaign. This measurement stays on Jury’s own servers; it does not store IP addresses, browser details or Facebook and Google click identifiers, and it is not shared with third parties. Meta ad measurement is a separate choice.

When you arrive from a Facebook or Instagram ad, the chat app asks once whether Meta ad measurement is allowed. If you accept, Meta’s ad click identifier (fbclid) is kept in this browser’s localStorage for up to 90 days and used to report the visit, a guest’s first question, a new account and a confirmed payment to Meta. If you decline, nothing is sent and only your choice is kept. Jury’s server keeps only a record that an event was reported; it does not store the IP address, browser details or click identifier. You can withdraw consent at any time from the chat app’s home page or Settings; withdrawal does not affect reports already sent.

6. Retention and security

Files are stored privately in Cloudflare R2. Our database retains file metadata and extracted text. Unused attachments expire after 24 hours. Files used in questions remain until the file or its conversation is deleted. Deletion revokes access immediately and queues removal of the R2 object. Deselecting a file from a question does not delete it from the server.

Quoted excerpts and filenames may remain in conversation history. Removing an attachment does not immediately remove quotations in answers, backup copies, or copies retained by AI providers.

Retention depends on the information category, service needs, security, accounting, and legal obligations. Conversation, account, payment, audit, security, and accounting records may be retained for as long as needed for those purposes.

Logging out does not erase the account or server-side history. Using a history control, closing an account, or making a request does not mean every payment, accounting, audit, security, backup, or provider copy is automatically erased. No online service can guarantee absolute security.

Temporary social sign-in state expires after ten minutes and is cleaned up every minute while the sign-in service is running. Linked provider identifiers remain until a request to remove the link or account has been processed.

7. Your rights and requests

Subject to applicable law, you may ask whether your data is processed and who received it, request a copy or correction, seek deletion or restriction where legally available, withdraw consent, or request review of an automated-processing result. Email info@jury.mn. We will verify your identity and assess any legal retention duty before acting.

To request removal of a Google or Facebook link, sign-in data, or your Jury account, email info@jury.mn and identify the provider and the phone number or email address on your Jury account. Do not send passwords, SMS codes or access tokens. Removing a link does not itself erase the Jury account, conversations or billing records. Revoking Jury’s access in Google or Facebook does not automatically delete information held by Jury; send a separate deletion request.

8. Contact and changes

For privacy, consent, analytics, or data requests, contact Смарт интел ХХК at info@jury.mn, 88110921, or 11th khoroo, Sukhbaatar District, Ulaanbaatar 14190, Mongolia. If the purposes, data categories, recipients, or retention terms materially change, this page will be updated and new consent will be sought where required by law.