Privacy Policy

1. Information we collect

Information you give us
1.1 Account & identity: full name, display name, email address, phone number, profile photo, your role/profession, and (if applicable) the organisation or firm you belong to.
1.2 Authentication: password (stored only as a salted hash, never in plain text), two-factor authentication settings, and, if you sign in with Google, the account identifier Google shares with us.
1.3 Preferences: preferred jurisdictions, language/locale, timezone, notification settings, and referral code.
1.4 Your Content: documents you upload, cases and matters, parties, notes, diary entries, briefs, saved searches, bookmarks, collections, and messages you send to AI chat features.
1.5 Support & feedback: messages, feedback, and correspondence you send us.

Information we collect automatically
1.6 Usage data: features used, searches run, actions taken, and audit/activity logs.
1.7 Device & technical data: IP address, browser and device type, operating system, and, for the mobile app, a push notification token.
1.8 Cookies & similar technologies: used to keep you signed in and to remember preferences (see section 9).

Billing information
1.9 When you subscribe, our payment processor (PayFast) collects and processes your payment details. SALP receives limited billing data such as your subscription plan, status, billing cycle, and a customer/subscription reference — the company does not store your full card number.

2. How we use your information

2.1 to create and manage your account and provide the Service;
2.2 to store, process, and display Your Content and power research, citation, document, and AI features;
2.3 to authenticate you, enable 2FA, and keep the Service and your account secure;
2.4 to process subscriptions and payments and send billing and transactional messages;
2.5 to send you service emails, SMS/OTP codes, and (if enabled) push notifications;
2.6 to provide support, understand usage, fix problems, and improve the Service;
2.7 to detect, prevent, and address fraud, abuse, and security incidents, and to comply with legal obligations.

3. AI features and your content

When you use AI-assisted features, the relevant input (for example, your prompt or a selected document) is processed by SALP and by third-party AI model providers to generate a response. SALP does not sell Your Content, and does not use the confidential content you upload to train public, third-party foundation models. AI output may be inaccurate and must be independently verified — see the Terms & Conditions.

4. How we share information

SALP does not sell your personal information. Information is shared only as follows:
4.1 Service providers (sub-processors) who process data under contract, including:
(a) PayFast — payment processing;
(b) Amazon Web Services (AWS) — cloud hosting and file/document storage;
(c) Resend — email delivery;
(d) Twilio — SMS / one-time-passcode delivery;
(e) Google — optional sign-in;
(f) Expo — mobile push notifications;
(g) third-party AI model providers — AI features.
4.2 Within your organisation: if you use SALP under a firm or team account, administrators of that organisation may access content and activity associated with the organisation's workspace.
4.3 Legal & safety: where required by law, legal process, or to protect the rights, property, or safety of SALP, its users, or the public.
4.4 Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. International transfers

SALP's providers may process and store data on servers located outside Pakistan. Where personal information is transferred across borders, steps are taken to ensure it is protected consistent with this Policy and applicable law.

6. Data retention

SALP keeps personal information for as long as your account is active and as needed to provide the Service. After account closure personal information is deleted or anonymised within a reasonable period, except where certain records must be retained (for example, billing and tax records, or security/audit logs) to comply with legal obligations or resolve disputes.

7. Security

SALP uses technical and organisational measures to protect your information, including encryption in transit, hashed passwords, optional two-factor authentication, access controls, and audit logging. No system is perfectly secure, so absolute security cannot be guaranteed; users should use a strong, unique password and enable 2FA.

8. Your rights and choices

8.1 Access & correction: view and update most account information in your settings.
8.2 Deletion & export: request a copy of your data or deletion of your account by contacting SALP.
8.3 Communications: manage notification preferences, and opt out of non-essential messages (essential service and billing messages may still be sent).
8.4 Withdraw consent: where SALP relies on consent, you can withdraw it at any time.
8.5 To exercise any of these, email support@salp.co. Identity verification may be required before acting on a request.

9. Cookies

SALP uses strictly necessary cookies and similar local storage to keep you signed in and remember your preferences. Blocking essential cookies may prevent parts of the Service from working. Non-essential analytics are used consistent with applicable law. For more detail, see our Cookie Policy.

10. Children

The Service is intended for legal professionals and is not directed to children under 18. SALP does not knowingly collect personal information from children. If you believe a child has provided information, contact SALP and it will be deleted.

11. Changes to this Policy

SALP may update this Policy from time to time. If material changes are made you will be notified (for example, by email or an in-app notice) and the "Last updated" date above will be updated.

12. Contact us

South Asian Law Portal (SALP)
Pakistan (remote-first)
Email: support@salp.co