What we collect, and what we do not do with it.

Meeting request form: company, role, name, email address, sector, description of the need, and where applicable the budget declared in the estimator.

Application form: name, email address, bar, declared fees, practices and jurisdictions, message.

No advertising trackers, no profiling, no sale of data.

Answering a meeting request or an application: pre-contractual steps taken at the request of the data subject.

Conflict checks and due diligence obligations: legal and regulatory obligation.

Enquiries not taken forward: three years from the last contact. Applications not taken forward: two years. Cases: the limitation period of the firm’s professional liability.

No model training on client data, contractually and technically. A case corpus is partitioned and accessible only to the team in charge of it, in line with the conflict-check ethical walls.

The audit trail — task, model, sources, reviewer, timestamp — is available to the client and exportable.

Access, rectification, erasure, restriction, objection and portability may be exercised with [data protection officer to be completed], at rgpd@amurabi.ai. A complaint may be lodged with the French data protection authority.