1. Introduction

JCG, PC (Business Registration No. 514-85-30408, hereinafter "JCG") and HSOLLC Co., Ltd. (Business Registration No. 583-87-00035, hereinafter "HSOLLC") jointly operate the online legal services platform at juriscreators.com (the "Platform"). JCG provides legal services as a licensed law firm; HSOLLC provides the technology platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Korean Personal Information Protection Act (PIPA), the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other applicable laws.

2. Information We Collect

2.1 Information You Provide

• Account registration: name, email address, password, phone number (optional)
• Social login data (Google, Naver, Kakao): profile name, email, profile image as authorized by you
• Consultation booking: case description, preferred schedule, contact information
• Attorney registration: name, bar association number, education, credentials, areas of specialization
• Payment information: billing name, payment method details (processed by PayPal and Toss Payments; we do not store full card numbers)

2.2 Automatically Collected Information

• IP address, browser type, operating system, device identifiers
• Access logs, pages visited, time and date of visits, referring URLs
• Cookies and similar tracking technologies (see Section 7)

2.3 AI Session Data

When you use AI-powered features (QNA Debate, DIY tools, Digital Staff, Voice Control, etc.), your inputs (text, voice recordings) may be processed by third-party AI providers. We do not use your personal session content to train AI models.

3. Purpose of Collection and Use

• Providing and improving legal consultation, AI-powered legal tools, and platform services
• User account management and authentication
• Processing payments and issuing receipts
• Communicating service updates, appointment confirmations, and legal notices
• Ensuring platform security, preventing fraud, and complying with legal obligations
• Generating anonymized and aggregated analytics to improve service quality

4. Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Attorneys: Case-related information necessary for consultation services
• Payment processors: PayPal (International, USD) and Toss Payments (Korea, KRW) for transaction processing
• AI service providers: Anonymized or necessary input data for AI features (e.g., OpenAI, Groq, Anthropic, Google)
• Cloud infrastructure: AWS (Amazon Web Services) for hosting and data storage
• Legal obligations: When required by Korean law, court order, or government regulation

5. Retention Period

Personal information is retained for the duration of your account membership. Upon account deletion or withdrawal, personal information is destroyed within 30 days, except where retention is required by law:

• Records of contract or subscription withdrawal: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of payment and supply of goods: 5 years
• Records of consumer complaints or dispute resolution: 3 years
• Website access logs: 3 months (Protection of Communications Secrets Act)

6. Your Rights

Under Korean PIPA, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate personal information
• Request deletion of your personal information (subject to legal retention requirements)
• Withdraw consent for processing at any time
• Request suspension of processing of your personal information

To exercise these rights, contact us at the address provided in Section 10.

7. Cookies and Tracking

We use cookies for session management, authentication, and user preference storage. You may disable cookies through your browser settings, but this may affect platform functionality. We use:

• Essential cookies: Session authentication, CSRF protection
• Functional cookies: Language preference, dark mode setting
• Analytics cookies: Usage patterns for service improvement (anonymized)

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Rate limiting and brute-force protection on authentication endpoints
• Regular security audits and vulnerability assessments
• Access controls limiting personnel access to personal information

9. International Data Transfers

Your data may be processed by AI service providers and cloud infrastructure located outside of the Republic of Korea. We ensure appropriate safeguards are in place in accordance with PIPA requirements for cross-border data transfers.

10. Contact Information

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform at least 7 days prior to taking effect. Continued use of the Platform after such changes constitutes acceptance of the updated policy.