Privacy at Justee

Full Private Mode: work without second-guessing.

Justee is built for legal review and document comparison you can trust. With Full Private Mode on (paid plans), your reviews, chats and comparisons are sealed with a key only you hold, so Justee stores only encrypted content it cannot read back.

Two levels of protection

Standard protection
All plans

Encrypted in transit and at rest.

Your content is never used to train AI models.

Personal identifiers are automatically redacted before your document is analyzed (see below).

Delete your reviews, chats, and comparisons at any time.

Full Private Mode
Paid plans

Everything in standard protection, plus zero-access encryption.

Encrypted with a key only you hold, so only you can open it.

Justee stores only the encrypted version and cannot read your content.

Even under subpoena, Justee can hand over only encrypted copies of your Vault files and of the chats, reviews and comparisons you make in Full Private Mode.

Private items auto-delete on a schedule you choose, up to a year, or stay until you delete them.

When you delete an item, it is removed from our active systems right away. Encrypted backup copies are automatically overwritten shortly after, and stay unreadable for private items.

Justee is not a law firm. No attorney-client relationship is created here, and your documents and messages are not protected by attorney-client privilege. That is exactly why we protect them technologically instead: in Full Private Mode they are encrypted and sealed with a key only you hold, so confidentiality is enforced by encryption rather than by trust. A technical safeguard, not legal privilege.

How Full Private Mode works

Full Private Mode uses zero-access encryption: the key that unlocks your content stays with you, so we can hold your data without being able to read it back.

1
Your key is created on your device

When you turn on Full Private Mode, your key is generated in your browser and protected by your passphrase. It never reaches us in a form we can read.

2
We encrypt your results with your key

To produce your review, chat, or comparison, our system processes your content, then encrypts the result with your key. We store only the encrypted version, which we cannot open.

3
Only you can open it

Because we never hold your key, we cannot read your content, and neither can anyone we might be compelled to share it with.

What we send the AI, and what we do not

Minimized before it ever leaves

Before your document is analyzed, Justee automatically detects and replaces personal identifiers (names, government IDs, emails, phone numbers, addresses, and more) and business identifiers (company names, EINs, bank accounts, and routing numbers) with codes. The AI analyzes the redacted version, and your chats about that document reuse the same redaction. This automated detection is a best-effort safeguard and cannot guarantee identification of all sensitive data in every document format, so you remain responsible for reviewing what you upload. See what types of data are redacted.

Requests are sent to our AI providers from Justee's servers, not from your device, and without your name, email, or account attached.

So the content these providers process is redacted and is not tied to your identity.

Justee is approved for zero data retention with its AI model provider: request content is not retained, not logged for human review, and not used to train models. Internet search requests are the exception: search providers may log them.

Statute matching sends only PII-redacted text to an embeddings service and only a numeric vector to the law index; neither is used to train models.

Voice: dictation and Voice Mode

You can dictate a message, or talk with the assistant and hear its replies. Voice is optional. Here is what happens to your audio.

Standard protection
All plans

Your audio is encrypted in transit (TLS 1.2 or higher) from your device to our servers and on to our speech provider, Amazon Web Services.

Speech is converted to text in real time. Justee does not store recordings of your voice.

Under the AI services opt-out on our AWS account, AWS does not store your audio for, or use it to, develop or improve its services.

Requests to the speech service carry no name, email, or account id.

What you say becomes an ordinary message, kept and deleted like the messages you type. For plan limits we record only how many seconds you spoke.

We do not use voice to identify you and we do not create voiceprints.

Full Private Mode
Paid plans

Voice works in Full Private Mode too. In a private chat, what you dictate is sealed to your key like anything you type.

To transcribe your speech and read replies aloud, AWS processes the audio and the reply text in real time, with the same protections as in Standard. Justee does not store the audio.

You decide when the microphone is on and whether replies are read aloud.

If other people may be heard while your microphone is on, you are responsible for any notice or consent the law requires. See Section 6.13 of our Terms of Use and Section 4.3 of our Privacy Policy.

Compared with using a consumer AI chat app directly

General AI assistants are useful, and how they handle your material depends on the provider, the plan, and your settings. Here is how Full Private Mode compares with a typical consumer plan; check your provider's current terms.

Justee Full Private ModeA typical consumer AI chat plan
Who can read your stored contentOnly you. It is encrypted with a key we never hold.Usually stored on the provider's systems in a form it can read.
What the AI receivesA PII-redacted version, sent from our servers with no name, email, or account attached.Usually your text as typed, linked to your account.
Used to train AI modelsNo.On some consumer plans, yes by default, unless you turn it off in settings.
After you delete itYou set a retention window and items auto-delete. Backup copies expire on a fixed schedule and stay unreadable for private items.May be retained under the provider's own retention policies.
If a subpoena reaches the companyBecause we never hold your key, we cannot read your content, and neither can anyone we might be compelled to share it with.Stored conversations the provider can read, handled under its own policies.

What we do not claim

We would rather be precise than impressive. A few honest limits:

To generate a result, our AI providers process your content briefly. We send it without your identity and in a PII-redacted form, but the providers do momentarily handle the content. They may also retain limited operational data under their own terms.

Deletion removes items from our live systems right away, but copies can persist for a limited period in encrypted backups until those backups expire. For Full Private Mode items, backups hold only ciphertext no one can read.

Voice audio reaches our speech provider as you speak it, so it is not redacted before it is transcribed, and replies you choose to hear aloud are sent to the provider as text, with any personal details they contain, since a spoken placeholder would be meaningless. Both are encrypted in transit and not stored by Justee.

Automated PII detection is a strong, best-effort safeguard. It may not catch every identifier in every document format, so you remain responsible for reviewing what you upload.

Full Private Mode protects the content of your work. Like any online service, we keep some operational and security records, such as delivery and error logs, that are timestamped. It is not a claim that no record of your activity exists.

Because only you hold your key, if you lose both your passphrase and your recovery code, your private items cannot be recovered by anyone, including Justee.

What works differently in Full Private Mode

Sealing your content to a key only you hold means some features work differently or arrive later. This is the current list; we shorten it as we close each gap.

Sharing. Share links and email shares are not available, because a shared copy would need to be resealed to each recipient’s key, which we have not built yet; choose Standard for items you plan to share.

Chat search. You cannot search across private chat threads by their message text, because we hold that text only in sealed form and cannot read it to match a query; open a thread to read it, and its memory of your edits carries across sessions as normal.

In-document search in chat. When you chat about a private review, the assistant searches your document by keyword rather than by meaning, so on very long documents it may miss a relevant passage a meaning-based search would find. This is because the semantic index would have to be built on our servers from your content, which stays sealed to your key.

Account data export. Your account export includes private items as sealed ciphertext, because producing readable copies on our servers would require reading content sealed to your key; open a private item in the app and download it there to keep a readable copy.

Timestamps. Private items record the day, not the exact time, because we deliberately coarsen their timestamps to reduce what activity records reveal; this is by design and needs no workaround.

Support recovery. Justee support cannot open, repair, or restore private content, because it is sealed to your key; keep your passphrase and recovery code safe, since losing both means no one, including Justee, can recover those items.

Frequently asked questions

Full Private Mode, available on paid plans, encrypts your reviews, chats, and comparisons with a key only you hold. The key is created in your browser and never leaves it in a form we can read, so Justee stores only the encrypted version and cannot read your content back. If we were ever compelled by subpoena, we could hand over the reviews, chats and comparisons you made in Full Private Mode only as unreadable ciphertext. Items made with it off, account details such as your email and plan, and timestamped activity records are not encrypted this way.

When you paste material into a consumer AI chat app, the provider typically stores your conversation on its systems in a form it can read, and on some consumer plans may use it to train models unless you turn that off. With Justee, personal identifiers are redacted (best-effort) before any AI sees your text, requests reach our AI providers from our servers with no name, email, or account attached, and in Full Private Mode your stored content is encrypted with a key only you hold, so Justee cannot read it back.

Justee automatically detects and redacts a broad range of identifiers before your document and chats reach the AI, in two groups. Each value is replaced with a typed, numbered placeholder, such as [PERSON_1] or [SSN_1], so the document stays readable while the sensitive value is hidden.

Personal: names, emails, and phone numbers; Social Security numbers and tax identifiers; addresses and dates of birth; bank and credit card numbers; driver's license and passport numbers; medical provider identifiers and case numbers.

Business: company and organization names; business addresses; SWIFT and BIC codes, IBANs, and routing numbers; business license numbers and attorney bar IDs; corporate tax identifiers (EIN).

Medical record numbers, policy numbers and amounts are not detected; remove them yourself.

It is automatic. Personal and business identifiers are detected and replaced before a document review (best-effort), and chats about that document reuse the same redaction. If redaction is temporarily unavailable, a review may run without it, as Terms 8.5 explain. A separate PII Redaction tool is also available if you want to download a redacted copy of a document to share.

No automated system can. Justee detects a broad range of common identifiers, but detection accuracy can vary with document format, language, and structure, and rare identifiers may be missed. It is a best-effort supplementary safeguard and does not replace your responsibility to review and redact sensitive information before uploading. See our Privacy Policy and Terms of Use for full details on limitations, your responsibilities, and liability disclaimers.

Your audio is encrypted in transit (TLS 1.2 or higher) and converted to text in real time by our speech provider, Amazon Web Services. Justee does not store recordings of your voice, and under the AI services opt-out on our AWS account, AWS does not store your audio for, or use it to, develop or improve its services. The transcript becomes an ordinary message in your conversation, and in a private chat it is sealed to your key like anything you type. More about voice.

Yes. Redaction is on by default, and for a document chat you can turn it off for a single conversation when precise drafting requires the AI to see real names. Your choice applies only to that thread.
Full Private Mode is included on every paid plan

Turn it on whenever you need it, per review or across everything.

See plans

Privacy

Full Private Mode

Legal

Terms of servicePrivacy policy

Follow us

LinkedIn

logo

© 2026 Justee. All rights reserved.

Justee is not a law firm. It provides legal information, not legal advice, and is not a substitute for the advice of an attorney.