JUDLEX

CONTENTS

PRIVACY

Privacy policy

CONTENTS

First, because it is what matters to you

Your clients' case files never leave your computer. JUDLEX is a desktop application: splitting, foliation, reading and reporting all happen on your machine, on a copy the application keeps in the vault you choose. We receive no copy of your case files, and we have no way of reading them.

There are three exceptions, and this policy sets out every one of them: the licence (section 5), AI-assisted reading (section 6) and your account and billing (section 4).

1. Data controller

  • Controller: CONSULTING EVEREST LLC
  • Incorporated in: the State of New Mexico, United States — Business ID 7479255, incorporated on 27 December 2023
  • Address: 8206 Louisiana Blvd NE, Ste A #2970, Albuquerque, NM 87113, United States
  • Contact: soporte@judlex.com

2. Who this policy is for

Anyone who visits judlex.com, opens an account, or contracts and uses a JUDLEX licence. It is not addressed to your firm's clients: as regards the data you process in your case files, you are the controller. Section 7 explains what our role is there.

3. When you only visit the website

We process the browsing data strictly necessary to serve the page and keep it secure, plus whatever you give us if you write through the contact form: your name, your email, the subject you pick and what you tell us.

There is no chat on this website, no analytics and no third-party cookies. Nor is there an assistant that answers before you buy: the one that existed until 25 August 2026 has been withdrawn, and with it the installation fingerprint and the IP address that were stored to cap free messages. They are no longer collected.

  • Legal basis: your consent when you write to us; legitimate interest in keeping the site secure and available.
  • Retention: correspondence, for as long as the enquiry is live and thereafter for the limitation period of any actions that may arise.

4. When you open an account and subscribe

What we process: email address, password —stored encrypted, never in the clear—, the billing details you give us and the organisation you belong to.

What for: giving you access to your account, issuing the licence, invoicing and providing support.

Legal basis: performance of the contract, and compliance with tax and accounting obligations as regards invoicing.

Payment is processed by Stripe. Your card details are entered directly into a Stripe component and never pass through our servers: we neither see nor store them.

Retention: for as long as the relationship is live and, thereafter, for the applicable legal and tax limitation periods.

5. When you use the application: the licence

For the licence to work, the application communicates with our server:

  • On activating a seat: the licence key and an identifier of the machine.
  • While you work: a periodic heartbeat that renews permission to use it. The application keeps working offline for up to 72 hours, and up to 14 days in travel mode.
  • When checking for a new version.

No data from your case files, clients or parties leaves your computer in any of those communications.

6. When you use AI-assisted reading

You configure the key of your own AI provider —Anthropic, OpenAI, Google, xAI, DeepSeek or MiniMax— and the request goes straight from your computer to that provider. We do not step in, we do not see it and we do not log it. The processing relationship is between your firm and that provider, under whatever contract you have with them.

There is no other way of using artificial intelligence in JUDLEX. Until 25 August 2026 there was a mode in which the request went out through a server of ours on its way to the provider; it has been withdrawn entirely. If you used it, note that the data it relied on went with it: the responses kept so that a retry would not be charged twice no longer exist.

What you spend with your key is recorded on your own computer, so that you can see it: provider, model, tokens and cost of each call, in the application's spending log. That table never leaves your machine and you can empty it whenever you like.

7. Our role regarding your clients' data

We process no data from your case files. JUDLEX is a program that runs on your machine: the files stay on your computer and AI requests go straight to the provider you hired. You are the controller of that data, and your AI provider is your processor —under the contract you have with them, not with us.

As regards your own data —your account, billing and support— we are the controller, and sections 4 and 5 cover that.

8. Recipients and processors

We disclose data only to those needed to provide the service:

  • Stripe, for payment.
  • The hosting provider of our servers, which are in Germany.

There is no email provider on this list because the site does not send email today: what you write in the contact form is recorded in our system and we read it there.

The AI provider is NOT on this list, and that is not an oversight: it is not our processor. You hire it directly, the request goes from your computer to theirs without passing through here, and the processing contract for that data is the one you have with them.

An up-to-date list of processors and sub-processors is provided on request at soporte@judlex.com, and notice is given before a new one is brought in.

9. International transfers

We say this first because it is what you want to know before deciding anything: CONSULTING EVEREST LLC is a United States company, and its servers are in Germany, inside the European Union. What sits in the United States is the owning company, not your data.

Your AI requests do not pass through us (section 6): they go from your machine to the provider you chose, and that relationship is between the two of you — including where that provider's servers are, which is set out in your own contract with them.

What does reach our servers in Germany is your account, your licence and your billing.

10. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to soporte@judlex.com, proving your identity. You may also withdraw consent where you gave it, without affecting the lawfulness of prior processing.

If you believe we have not handled your request as we should, you may complain to the Spanish Data Protection Agency (www.aepd.es).

11. Security

We apply appropriate technical and organisational measures: encryption in transit, access control, logging of the communications that leave your machine, and deliberate minimisation of what is stored —the design of the application keeps the content of your case files from ever reaching our systems.

12. Changes to this policy

This policy is revised whenever the way the product works changes, not merely once a year: it is anchored to a technical fact sheet that is updated at the same moment the application changes. Substantial changes are communicated to users holding a licence in force.

Last updated: 25 August 2026