Privacy Policy

Last updated: 18 July 2026

This Privacy Policy explains how South Asian Law Portal ("SALP", "we", "us") collects, uses, shares, and protects personal information when you use the SALP — South Asian Law Portal platform, mobile apps, and related services (the "Service"). We are the data controller for that information. By using the Service you agree to this Policy.

1. Information we collect

Information you give us

• Account & identity: full name, display name, email address, phone number, profile photo, your role/profession, and (if applicable) the organisation or firm you belong to.
• Authentication: password (stored only as a salted hash, never in plain text), two-factor authentication settings, and, if you sign in with Google, the account identifier Google shares with us.
• Preferences: preferred jurisdictions, language/locale, timezone, notification settings, and referral code.
• Your Content: documents you upload, cases and matters, parties, notes, diary entries, briefs, saved searches, bookmarks, collections, and messages you send to AI chat features.
• Support & feedback: messages, feedback, and correspondence you send us.

Information we collect automatically

• Usage data: features used, searches run, actions taken, and audit/activity logs.
• Device & technical data: IP address, browser and device type, operating system, and, for the mobile app, a push notification token.
• Cookies & similar technologies: used to keep you signed in and to remember preferences (see section 9).

Billing information

When you subscribe, our payment processor (Stripe) collects and processes your payment details. We receive limited billing data such as your subscription plan, status, billing cycle, and a customer/subscription reference — we do not store your full card number.

2. How we use your information

• to create and manage your account and provide the Service;
• to store, process, and display Your Content and power research, citation, document, and AI features;
• to authenticate you, enable 2FA, and keep the Service and your account secure;
• to process subscriptions and payments and send billing and transactional messages;
• to send you service emails, SMS/OTP codes, and (if enabled) push notifications;
• to provide support, understand usage, fix problems, and improve the Service;
• to detect, prevent, and address fraud, abuse, and security incidents, and to comply with legal obligations.

3. AI features and your content

When you use AI-assisted features, the relevant input (for example, your prompt or a selected document) is processed by us and by third-party AI model providers to generate a response. We do not sell Your Content, and we do not use the confidential content you upload to train public, third-party foundation models. AI output may be inaccurate and must be independently verified — see our Terms & Conditions.

4. How we share information

We do not sell your personal information. We share it only as follows:

• Service providers (sub-processors) who process data on our behalf under contract, including:
  • Stripe — payment processing;
  • Amazon Web Services (AWS) — cloud hosting, file/document storage, and email delivery (Amazon SES);
  • Twilio — SMS / one-time-passcode delivery;
  • Google — optional sign-in;
  • Expo — mobile push notifications;
  • third-party AI model providers — AI features.
• Within your organisation: if you use SALP under a firm or team account, administrators of that organisation may access content and activity associated with the organisation's workspace.
• Legal & safety: where required by law, legal process, or to protect the rights, property, or safety of SALP, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. International transfers

Our providers may process and store data on servers located outside Pakistan. Where we transfer personal information across borders, we take steps to ensure it is protected consistent with this Policy and applicable law.

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service. After account closure we delete or anonymise personal information within a reasonable period, except where we must retain certain records (for example, billing and tax records, or security/audit logs) to comply with legal obligations or resolve disputes.

7. Security

We use technical and organisational measures to protect your information, including encryption in transit, hashed passwords, optional two-factor authentication, access controls, and audit logging. No system is perfectly secure, so we cannot guarantee absolute security; please use a strong, unique password and enable 2FA.

8. Your rights and choices

• Access & correction: view and update most account information in your settings.
• Deletion & export: request a copy of your data or deletion of your account by contacting us.
• Communications: manage notification preferences, and opt out of non-essential messages (we may still send essential service and billing messages).
• Withdraw consent: where we rely on consent, you can withdraw it at any time.

To exercise any of these, email support@salp.co. We may need to verify your identity before acting on a request.

9. Cookies

We use strictly necessary cookies and similar local storage to keep you signed in and remember your preferences. Blocking essential cookies may prevent parts of the Service from working. Where we use any non-essential analytics, we do so consistent with applicable law.

10. Children

The Service is intended for legal professionals and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes we will notify you (for example, by email or an in-app notice) and update the "Last updated" date above.

12. Contact us

South Asian Law Portal (SALP) Pakistan (remote-first) Email: support@salp.co