Who is responsible
The service provider is Ansh Khandelwal, trading as JurisLab, a sole proprietor. JurisLab is responsible for information supplied directly for enquiries and engagement administration. For client data processed on a firm’s instructions, the firm is the data fiduciary/controller and JurisLab is its processor.
Website visits and enquiries
Website requests are processed by the hosting infrastructure to deliver pages and operate security controls. If an enquiry is delivered, JurisLab uses the information you choose to provide, such as your name, work email, organisation, practice and workflow description, to assess the request and respond. The contact form opens your email app; it does not itself confirm delivery or create an account.
Information used for paid services
Engagement contact details, agreed scopes, instructions, approvals, billing and support records are used to assess, deliver, administer and support paid automation services. The engagement agreement sets out the work and the information needed to perform it.
Client documents and the firm’s instructions
Do not send client documents in the first conversation. Use sanitised samples only. Work is set up in the firm’s own ChatGPT or Claude account and agreed tools. JurisLab does not keep client documents by default. Any access or separately held copy must be agreed for the task before live client material is used.
We use one standard engagement agreement for every firm. For each engagement, a written data-processing agreement records the firm’s instructions. JurisLab acts as the firm’s processor for client data handled under those instructions. The agreement covers the processing purpose, access, providers, retention, deletion and handling of data requests or incidents.
AI providers, connected tools and processing locations
The providers of the firm’s chosen AI, email, document and storage tools process the content sent through the agreed workflow. For ChatGPT this includes OpenAI; for Claude it includes Anthropic. Their applicable terms, plan and account settings govern their processing, retention and model-training use. Providers and relevant processing locations are recorded before live client data is used. The approved AI sub-processor is the provider the firm chooses on its own paid account. No other sub-processor is authorised by default.
Retention and deletion
Client files held by JurisLab are deleted within 30 days after the engagement ends, including working copies and backups under our control. The firm controls its original records and accounts; information retained by its providers follows their terms and account settings. Enquiry and business records are kept for the purposes described here and applicable legal obligations, and removed when no longer needed for those purposes. Retaining business records does not authorise retention of client files beyond the 30-day deadline.
Grievance officer and data requests
The firm directs requests about its client data under the data-processing agreement. JurisLab’s grievance officer is Ansh Khandelwal. For privacy questions, requests or grievances about information supplied directly to JurisLab, contact anshkhandelwal0323@gmail.com or +91 77098 81321. Include no confidential matter content in an initial message.
Read the Security & confidentiality FAQ for the service’s data-handling approach.