Privacy Policy & POPIA Notice
This notice explains how Themis AI ("we") processes personal information on themisai.co.za, the admin and client portals, and related services, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
Responsible party and Information Officer
[Registered company name and registration number], [physical address], South Africa. Information Officer: [name], law@themisai.co.za.
What we collect
- Website visitors: details you submit in the trial/contact form (name, firm, email, phone, message); basic technical logs from our hosting provider.
- Portal users: account details (name, email, role, firm), matters and documents uploaded by you or your attorney — which may include special personal information and information about children — AI conversation content, and security logs (IP address, sign-in times).
- Chat widget: messages you type and a random session identifier stored in your browser.
Why we process it
To respond to enquiries, provide the legal case-management and AI research services you or your attorney signed up for, secure the platform, and meet legal obligations. The lawful bases are your consent (enquiries), the performance of a contract with you or your firm, and our legitimate interest in keeping the service secure.
Operators and cross-border transfers
We use operators to run the service: Netlify (hosting and serverless functions), Supabase (database and private file storage), Anthropic (AI processing of queries you submit) and, for the Verify tool, Sightengine (AI-image analysis, only when you choose to run it). Some processing takes place outside South Africa. We transfer information only under written agreements that provide an adequate level of protection, as required by section 72 of POPIA.
Retention
Enquiries are kept for up to [24 months]. Matter data is kept for as long as the responsible attorney requires it for the matter and applicable legal retention periods, then deleted. [Confirm periods.]
Security
Data is encrypted in transit, access is limited by role and firm, evidence files are stored privately and shared only through short-lived signed links, and administrator access requires a second verification step.
Your rights
You may request access to, correction or deletion of your personal information, and object to or withdraw consent for processing, by emailing law@themisai.co.za. You may also lodge a complaint with the Information Regulator (inforegulator.org.za).
Cookies and local storage
We do not use advertising cookies. The portals store your sign-in session in your browser, and the chat widget stores a random session identifier.
AI output from Themis AI assists legal professionals and is not legal advice.