# Privacy — FAI Legal Research Assistant

**Operator:** FAI Productions, Satellite Town, near Commercial Area, Bahawalpur, Punjab,
Pakistan. **Contact:** support@failegal.site

This page describes what the service actually does with data, in the terms the system is
actually built in.

## What is stored on the server

- **Your account.** Email address, and the name, firm and username you supply at sign-up.
  Authentication is handled by Supabase. **Passwords are stored only as salted hashes** — they
  are never held in readable form and cannot be shown to you or to us. A forgotten password is
  replaced, never recovered.
- **Your plan and query count.** The plan you are on and a running count of queries used, so the
  monthly allowance can be metered. What is recorded is *that* a query happened, not what it said.
- **A device identifier.** Derived by hashing a random value your browser generates, so that
  reusing the same browser counts as the same device against your plan's device limit. It is a
  hash, and it identifies a browser rather than a person.

## What is NOT stored on the server

- **Your conversations.** Question and answer history is held in your own browser's local
  storage. It is not uploaded, not stored in our database, and not readable by us. Clearing your
  browser storage deletes it permanently, which also means it does not follow you to another
  device.
- **The text of your queries.** The usage meter records a count, not content.
- **Payment card details.** These are never handled by this site.

## Processing your questions

Answering a question requires sending it to the AI model provider that generates the response,
together with the statutory sections and judgments retrieved for it. This transmission is what
produces the answer; it is not used to advertise to you, and your questions are not sold.

Judgment and statute retrieval runs against our own mirrored index and against the courts'
published sources. Those requests carry the search terms, not your identity.

## Email

Transactional email — sign-up confirmation and password reset — is sent through Resend. Delivery
and bounce events are recorded so that undeliverable addresses can be detected. No marketing
email is sent to members who have not asked for it.

## Cookies and local storage

The site sets no advertising or third-party tracking cookies. Browser storage is used for the
session token that keeps you signed in, your device seed, your saved conversations and your
interface preferences. All of it is readable and clearable from your own browser.

## Your control

- **See or correct your details** — from Settings in the app, or by writing to support@failegal.site.
- **Delete your conversations** — clear them in the app, or clear your browser storage.
- **Delete your account** — write to support@failegal.site and the account and its profile row are
  removed. Conversations need no deletion request; they were never ours to delete.

## Security

The site is served over HTTPS with HSTS, and carries a Content-Security-Policy restricting where
scripts, styles and connections may originate. Access to member data is governed by Supabase
row-level security, so one member's record cannot be read with another member's session.

## Changes

Material changes to this page will be reflected here with an updated date. This page was last
revised on 2026-08-24.

- [About](https://failegal.site/about)
- [Contact](https://failegal.site/contact)
- [Plans and pricing](https://failegal.site/plans.html)