← Judicari

Privacy

Last updated

We collect only what we need to run Judicari, keep it no longer than we must, and never sell it.

Who we are

NB Limited LTD EOOD (НБ Лимитед ЕООД), UIC 207251740, registered in Sofia, Bulgaria, is responsible for the personal data described here. For anything about your data, write to privacy@nb-limited.com.

What we collect

  • Your account: your email address, your credit balance, and a record of every change to it: purchases, refunds and each validation you run.
  • Your validations: the idea and context you enter, the report, and the progress steps shown while it ran, including the searches made and the sources found.
  • Payments: Link (Stripe) handles them as merchant of record and tells us only whether a purchase was paid or refunded. We never see your card details.
  • Technical data: to protect sign-in, Cloudflare Turnstile checks signals from your browser, and your IP address is shared with Cloudflare for that check. To limit abuse we store a keyed one-way hash of your IP address with each validation, never the address itself. Our hosting provider keeps standard request logs for a short time. We use no analytics.

Why we use it

We use your account and validation data to provide the service you signed up for, under Article 6(1)(b) of the GDPR, and technical data to keep the service secure and stop free validations being collected through repeat accounts, which is our legitimate interest under Article 6(1)(f). A report is an automated analysis of your idea, not a decision about you.

Who else handles it

  • Vercel Inc. hosts the site and runs the validations, in its Frankfurt region.
  • Neon Inc. stores the database, in Frankfurt.
  • OpenRouter, Inc. passes your idea and the evidence found to the language model, run by DeepInfra, Inc., which does not store or train on it.
  • Tavily and Algolia (Hacker News search) receive the search queries written from your idea, never your email address.
  • Stripe, through Link, sells the credits as merchant of record, under its own privacy policy.
  • Proton AG carries our email, including your sign-in links.
  • Cloudflare, Inc. runs the security check on sign-in.

Algolia is based in the EU, and Proton in Switzerland, which the European Commission recognises as protecting data adequately. The others are based in the United States; transfers to them rely on the EU-US Data Privacy Framework or the Commission's Standard Contractual Clauses. We share your data with no one else unless the law requires it.

How long we keep it

  • Your account, validations and reports: until you delete your account.
  • The hash of your IP address: 30 days.
  • After you delete your account we keep only a one-way hash of your email address, so the free validation can't be claimed twice, and the cost of each past validation with nothing linking it to you.
  • Payment records: Link keeps them as merchant of record, as tax law requires.
  • Sign-in links work once and expire after 15 minutes; your sign-in cookie after 30 days or when you sign out.

Your rights

You can download everything we hold about you, or delete your account and its data, from your account page at any time. You can also ask us to correct your data, limit how we use it, or object to how we use it. Write to privacy@nb-limited.com and we will reply within one month. If you think we have handled your data wrongly, you can complain to the Bulgarian Commission for Personal Data Protection at cpdp.bg, or to the data protection authority where you live.

Cookies

We use no advertising or tracking cookies. Signing in sets one cookie that keeps you signed in for 30 days and is needed for the service to work. The security check on sign-in may store only what it needs to work.

Changes

If this policy changes, we update it here and change the date at the top.