1. Who we are
JuriBooks (“JuriBooks”, “we”, “us”) is a cloud accounting service for legal practices, available at juribooks.com. This policy explains how we handle personal data when you use the service. We process personal data in line with the Nigeria Data Protection Act 2023 and other applicable law.
2. Two kinds of data
- Account data: the details of the people who use JuriBooks (name, email address, sign-in records, role in a firm). We are responsible for this data.
- Firm data: the books a firm keeps in JuriBooks (clients, matters, fee notes, ledger entries, payroll, trust records and similar). The firm owns and controls this data; we process it only on the firm’s instructions to provide the service.
3. What we collect
- Your email address, password (stored only as a secure hash by our authentication provider) and, if you choose “Continue with Google”, your name and email address from your Google account. We do not receive your Google password.
- The firm you belong to and your role in it.
- Security records: sign-in times, failed sign-in attempts (stored as one-way hashes of email and IP address), and an audit trail of changes made in the firm’s books.
- Firm data that you and your colleagues enter or import.
4. How we use it
- To create and secure your account, sign you in and keep each firm’s data separate from every other firm’s.
- To provide the accounting features you use, and to send service emails such as sign-up confirmations, password resets and team invitations.
- To detect and prevent misuse, such as repeated failed sign-ins.
We do not sell personal data, and we do not use firm data for advertising.
5. Who processes it for us
We use carefully chosen service providers to run JuriBooks:
- Supabase: database, authentication and server functions (data hosted in London, United Kingdom, region eu-west-2).
- Netlify: hosting of the website and application files.
- Resend: delivery of service emails.
- Google: only if you choose “Continue with Google” to sign in.
These providers process data only to provide their service to us. Some processing takes place outside Nigeria; where it does, we rely on the safeguards recognised under the Nigeria Data Protection Act 2023.
6. How we protect it
- Every firm’s data is isolated in the database: a user can only read the records of firms they are an active member of.
- Data is encrypted in transit (HTTPS). Offline copies kept on a device are encrypted and expire.
- Access within a firm follows roles (for example owner, CFO, officer, reviewer, read-only).
7. How long we keep it
Account data is kept while your account is active. Firm data is kept for as long as the firm uses JuriBooks and as required for accounting and legal record-keeping. A firm can ask us to delete its data when it stops using the service, subject to any legal duty to retain records.
8. Your rights
You may ask to access, correct or delete your personal data, to object to or restrict its processing, or to receive a copy of it. Requests about firm data should go first to the firm that holds your data. You may also complain to the Nigeria Data Protection Commission.
9. Contact
For privacy questions or requests, contact your firm’s JuriBooks administrator, or reach us through the Support option inside the application.
10. Changes
We may update this policy. The date at the top shows when it last changed; significant changes will be announced in the application.
See also our Terms of Service.