Privacy Notice
Last updated: June 29, 2026
This Privacy Notice explains how Courtroom Co-Pilot ("we", "us", "our") collects, uses, and protects personal data when you use our website and services (the "Service"). Courtroom Co-Pilot is the data controller of personal data processed in connection with the Service.
1. Who we are
Courtroom Co-Pilot operates the Service available at courtroomco-pilot.com. You can contact us at patricia@royceip.com.
2. Personal data we collect
- Account data — email address, password (hashed), authentication identifiers.
- Case-organizer content — information you enter into the Service: timeline entries, witness lists, evidence descriptions, notes, uploaded documents.
- Support communications — messages you send us by email.
- Usage and device data — IP address, browser type, pages visited, timestamps, error logs.
- Cookies — strictly necessary cookies for sign-in and session management.
Payment information (card numbers, billing address, tax data) is collected directly by our payment processor Paddle and is not stored on our servers.
3. How we use personal data
- To create and maintain your account (contract performance).
- To provide and operate the case-organizer Service (contract performance).
- To prevent fraud and abuse, and to keep the Service secure (legitimate interests).
- To respond to support requests (contract performance).
- To improve the Service through aggregated, non-identifying usage analysis (legitimate interests).
- To comply with legal obligations (legal obligation).
4. Who we share data with
- Paddle.com Market Limited — our payment processor and Merchant of Record. Paddle handles payments, billing, tax compliance, invoicing, refunds, and chargebacks.
- Hosting and infrastructure providers — for application hosting, database storage, and authentication.
- Professional advisers — legal, accounting, and compliance advisers where necessary.
- Authorities — where required by law, court order, or to protect our rights.
We do not sell personal data.
5. Data retention
We retain account data and case-organizer content for as long as your account is active. If you delete your account, we delete or anonymize associated personal data within 90 days, except where we must keep records to comply with legal, tax, or accounting obligations.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port the personal data we hold about you, to object to certain processing, and to withdraw consent. To exercise any of these rights, email us at patricia@royceip.com. You may also have the right to complain to your local data protection authority.
7. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and authentication. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. International transfers
Our hosting providers and Paddle may process data in the United States and other jurisdictions. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Cookies
We use strictly necessary cookies for authentication and session management. We do not use marketing or advertising cookies.
10. Changes
We may update this Notice from time to time. The "Last updated" date at the top reflects the most recent change.
11. Contact
Questions or requests: patricia@royceip.com.