Privacy Policy

Gungnir Labs, Inc. (“Gungnir,” “we,” “us”) operates the Gungnir platform at gungnir.cloud and app.gungnir.cloud — an AI-assisted operating system for law firms. We act as a personal information controller and, for firm-supplied data, as a personal information processor under the Philippine Data Privacy Act of 2012 (R.A. 10173). For any privacy matter, contact us at privacy@gungnir.cloud.

• Account data: your name, email address, and IBP roll number (for Philippine attorneys).
• Firm data: firm name, matter data, billing records, and documents uploaded by your firm.
• Usage data: log data, session information, and feature usage patterns.
• Communications: messages sent via Dispatch and emails processed through The Mailroom, with your firm's consent.
• Payment data: payment method details are handled by PayMongo. Gungnir does not store raw card numbers.
• Company data (Gungnir for Business): company name, registration details, contact name, email address, and matter descriptions submitted by companies using Gungnir for Business.

• To provide and operate the Gungnir platform.
• To process payments via PayMongo.
• To send transactional emails (invoices, payment confirmations, system notifications).
• To improve platform performance and AI model quality, using aggregated and anonymized data only.

We do not sell personal data to third parties. Ever.

We process personal data under R.A. 10173 (Data Privacy Act of 2012) on the basis of (a) performance of our contract with subscribed tenants, (b) our legitimate interest in platform security and fraud prevention, and (c) your consent for optional features.

Firm data is retained for five (5) years from matter close, or until account deletion is requested, whichever comes first. Log data is retained for 90 days.

• Right to be informed.
• Right to access your data.
• Right to correct inaccurate data.
• Right to erasure or blocking.
• Right to object to processing.
• Right to data portability.
• Right to lodge a complaint with the National Privacy Commission (NPC).

To exercise any of these rights, email privacy@gungnir.cloud. We will respond within 15 business days.

We use strictly necessary cookies for authentication and session management, and functional cookies for user preferences (for example, light or dark mode). We do not use advertising or tracking cookies. See the Cookie Policy below for details.

The cookies we use:

• Session authentication cookie — necessary; expires on logout.
• Preference cookie — functional; stored for 30 days.

We do not use Google Analytics, Meta Pixel, or any third-party advertising trackers.

• Supabase — database and authentication (AWS ap-northeast-2, Seoul, South Korea).
• Anthropic — AI inference. AI requests are processed under Anthropic's zero-data-retention API policy — inputs and outputs are not stored or used to train models.
• PayMongo — payment processing (Philippine-regulated).
• Vercel — hosting and edge delivery.
• Resend — transactional email.

Data is encrypted in transit (TLS 1.2+) and at rest. Tenant data is logically separated by row-level security. We conduct regular security reviews.

Gungnir is not directed at persons under 18. We do not knowingly collect data from minors.

We will notify active tenants by email if this policy changes materially. The “Last updated” date at the top reflects the most recent revision.

privacy@gungnir.cloud · Gungnir Labs · Manila, Philippines

See also our Terms of Service.