Privacy Policy

Effective: 17th February 2026

Jude (referred to in this Privacy Policy as “Jude”, “we”, “our” or “us”) is an artificial intelligence (AI) driven multi-purpose workspace platform for legal professionals (Platform). Jude is owned and operated by Jude Platform Limited.

This Privacy Policy forms part of our Terms of Service. In this Privacy Policy, “you” or “your” refers to the Law Firm that you represent. “Personal information” means information about an identifiable individual, as defined in the Privacy Act 2020 (Privacy Act). Terms not otherwise defined in this Privacy Policy have the meaning set out in our Terms of Service.

When you access or use our Platform, we may receive your clients’ personal information (Personal Information) if you include it in your Inputs and prompts to the Platform, or otherwise provide us this information.

This policy explains how we collect, hold, use, disclose and protect Personal Information in line with our obligations under the Privacy Act. If you have any questions about this policy, please contact us on support@jude.law.

In accordance with our Terms of Service, we require and rely on you to notify your clients about the matters in this Privacy Policy in accordance with our Terms of Service.

What Personal Information we collect

We may collect and hold any Personal Information you provide us, including through your inputs and prompts to the Platform.

How we use Personal Information

We may use Personal Information to:

• provide, administer, maintain and operate the Platform and our Services to you, and to verify or maintain the quality, security, and integrity of our Services;
• comply with legal obligations and processes, and to protect our rights, and/or that of our affiliates, you, or other third parties; and
• develop new programs and services.

Who we disclose your information to

To provide the Platform and our Services to you, we may disclose the information you input to the Platform, including Personal Information, to the following third parties:

• Our service providers (Service Providers), who are listed on our website, www.jude.law. These providers perform tasks on our behalf, including AI services, data hosting, cloud-storage, email communications, web analytics services, and other information technology services.
• Governmental or regulatory bodies (or any relevant third parties) if required by applicable law, to protect and defend our rights, or to enforce our terms and policies. Unless prevented by law, we will notify you of any such disclosure.
• Any affiliate of ours, meaning any entity that controls, is controlled by, or is under common ownership with us. Our affiliates will only collect, use, disclose or retain Personal Information in a manner consistent with this Privacy Policy.
• A purchaser of our business or company, or any company or entity that we merge some or all of our business or assets with.

How third party providers use your information

We engage third party Service Providers to provide services to us and perform tasks on our behalf in connection with the Platform.

Our Service Providers’ use of Personal Information is governed by their own terms of service, privacy policies, and data processing agreements with us. Links to our Service Providers’ terms and privacy policies are available on our website.

Each Service Provider may disclose Personal Information and other data to their authorised subprocessors to carry out processing services (including, for example, storage, indexing, search, and retrieval). Our Service Providers require their subprocessors to be bound by the same or similar data protection obligations as their own obligations to us. Links to the current subprocessors engaged by each Service Provider are available on our website.

Where possible, we use reasonable attempts to:

• aggregate or de-identify Personal Information before we use or share this information; and/or
• move your Content, including Personal Information, into our Virtual Private Cloud. This means that, while some Service Providers may carry out their services on your data (including Personal Information), they are unable to access this data or store it on their systems. When we move your data into our Virtual Private Cloud, the data is stored, processed and saved within our cloud environment only.

You acknowledge and agree that, while we make reasonable attempts to carry out the above activities, we are unable to do so in respect of all Service Providers.

How we store and secure your information

Security of information is very important to us. We take all reasonable precautions to protect your information from misuse, loss, unauthorised access, disclosure or modification. Some of the ways we protect your information include:

• premises security
• storing information in access-controlled systems
• encrypting data in transit and at-rest; and
• providing Privacy Act training to our staff.

We primarily use Amazon Web Services to host and store electronic data, including Personal Information.

Disclosure of your information overseas

Our Service Providers (and their subprocessors) may be located outside New Zealand, and may process and store your data (including Personal Information) in various countries outside New Zealand.

There may be differences between New Zealand’s privacy laws and those of the overseas locations in which your personal information, your clients’ Personal Information, and other data we collect is located. Where a Service Provider is located outside of New Zealand, we take reasonable steps to confirm that the Service Provider implements and maintains technical and organisational measures to protect your data.

By agreeing to our Terms of Service (which include this Privacy Policy), you confirm that you have your client’s consent for their Personal Information to be disclosed to our Service Providers (and their subprocessors) located outside New Zealand.

Despite all of our security measures, we cannot prevent, and are not responsible for, interception or “hacking” of information by unauthorised third parties, or any data breach by our Service Providers. We will comply with our obligations under the Privacy Act if we become aware of any data breach, including notifying you and the Privacy Commissioner as required. If you believe a privacy breach may have occurred, please contact us as soon as possible using the contact details below.

Retention of information

If your client requests the deletion of their Personal Information from our Platform (including by our Service Providers), we will use best endeavours to ensure this takes place (unless prevented by our contractual obligations or by law).

Access to and correction of information

As between you and us, it is your responsibility to ensure that any Personal Information you input to the Platform or provide to us is accurate, complete and up to date.

Subject to the Privacy Act, you and your client have the right to request access to and the correction of any Personal Information we hold.

Updates to this policy

We may update this Privacy Policy from time to time. Any changes will apply from the date we post the updated policy on our website. We will notify you of any key changes. We require you to notify your clients of any updated privacy terms in accordance with our Terms of Service.

If you do not agree to any updated privacy terms, you must immediately stop using our Platform and Services and notify us. Your continued use of or access to the Platform after any changes to our Privacy Policy indicates your consent (and that of your clients) to the updated terms.

Contact information and Privacy Commissioner

We take your concerns seriously. If you need assistance accessing or updating your personal information, or your clients’ Personal Information, or if you have any concerns about privacy, or the way we use or collect your personal information or your clients’ Personal Information, please email support@jude.law.

If you are not satisfied with our response to any privacy related concern you may have, you can contact the Office of the Privacy Commissioner online at www.privacy.org.nz.

Service Providers

The following table lists our current Service Providers, what we use them for, and links to their relevant terms and policies.