Privacy Notice | CourtPrep
CourtPrep

Privacy Notice

Version 1.0 · Effective date 22 September 2026
Controller: Obiter Studio Limited, company number 16525058

The short version

CourtPrep is run by Obiter Studio Limited. To provide your session we collect your name, email address and hearing details, and we process the case material you upload and your voice during the session. We do not store your session audio, video or transcript, and your case papers are never saved on the servers CourtPrep controls. AI providers, mainly OpenAI, process your material to run the session, and we ask them to delete it when the session ends. Your hearing details and feedback scores are deleted at 6pm UK time on your hearing date. Your account and purchase records stay until you close your account.

1. Who we are and how to contact us

Obiter Studio Limited, company number 16525058, is the controller of your personal data. For any question or request about your data, email support@courtprep.uk. We have not appointed a Data Protection Officer because one is not required for a business of our size and activities; data protection queries are handled by our founder, a qualified solicitor, through that address. We have applied to be registered with the Information Commissioner's Office.

2. The data we collect

Your account. Your email address, your display name, and how you sign in. If you sign in with Google, Google confirms your identity to us; we never receive your Google password. If you use an email address and password, the password is held in hashed form by our authentication provider, Supabase, and is never visible to us.

Your hearing details. Your name, the court, your hearing date and the type of case. Together these show that you are involved in court proceedings, so we treat them carefully and delete them on a fixed schedule (section 8).

Your session content. The material you upload or paste (a witness statement, a case description, supporting papers such as a claim form or a statement from the other side) and your voice while you answer questions. If you turn the camera on, the images are analysed on your device only and never leave your browser. Session content routinely contains sensitive things: allegations, evidence, details about the other party and witnesses, and sometimes health or offence related information. Section 3 explains how we keep the footprint of this material as small as possible.

Your feedback scores. After a session we keep numbers only: how many questions you answered, answer length, filler word rate, and scores for clarity, directness, relevance and, if the camera was on, approximate eye contact. We do not keep the text of the questions, your answers or the written feedback.

Payments. Stripe handles payment. We keep a record of what you bought, the amount, and Stripe reference numbers. We never see or store your card number.

Technical records. Content free activity events (for example that a session started or a purchase completed) and standard server logs, which our hosting providers keep for short periods and which we use only for security and troubleshooting. We use no advertising trackers and no third party analytics tools on the site.

Most of this data comes from you directly. Identity details also come from Google when you use Google sign in, and payment outcomes come from Stripe.

3. Sensitive information and how we limit it

Case material about a real dispute may include special category data (for example health information in a benefits case) and information about alleged offences. Our design keeps this material transient. It is held in your browser's memory while you prepare, sent to our AI providers only to run your session, and never written to the database or servers CourtPrep controls. When the session ends we send deletion requests to the providers that held it (section 6).

Where we process special category data, we rely on the condition for legal claims, because the material is processed so you can take part in legal proceedings, with your explicit consent as a fallback. Please upload only what your session needs.

Other people. Your papers will usually mention other people, such as the other party or witnesses. We process that information only to run your session, we do not use it to build any profile of those people, and it is deleted on the same short schedule as the rest of your session content.

4. Why we use your data, and our lawful basis

To provide your sessions, account and purchases: performance of our contract with you. If you do not give us your email address and hearing details we cannot provide the service.

To keep records of payments, refunds and disputes, and to meet tax and accounting duties: legal obligation, and our legitimate interest in preventing fraud and keeping credit balances accurate.

To secure the service, prevent misuse and rate limit abuse: our legitimate interest in running a safe service.

To understand how the service performs and to produce aggregated statistics, for example average scores across many sessions: our legitimate interest in improving the service and showing how it works. These use numeric aggregates only, computed across large groups; session content is never included and the results cannot identify you. We hold short assessments of these legitimate interests and you can request them.

To contact you once after your hearing date for feedback: our legitimate interest in improving the service. You can opt out at sign up and in any message we send. We do not send other marketing.

We do not sell personal data, and we do not use your session content to train AI models.

5. Automated processing

Your feedback scores are generated automatically by an AI model from the live transcript of your session. They affect only the feedback you see. No decision with legal or similar significant effect on you is made automatically. If a score seems wrong or unfair, email support@courtprep.uk and a person will look at it.

Two account processes are also automatic: a card dispute suspends the related credits, and a negative credit balance blocks new bookings until it is resolved. A person reviews any of these on request through the same address.

No biometric identification. The optional eye contact feature estimates where you are looking, on your device only. CourtPrep creates no face template, voiceprint or any other biometric identifier, and never uses your face or voice to recognise or verify you. Nothing in CourtPrep is designed to infer your emotions, honesty, personality or health, or to assess your credibility or the merits of your case.

6. Who receives your data

We use these providers as processors. Each receives only what its job needs.

Provider What it does What it receives
OpenAIGenerates the questions, transcribes your voice live, reads your papers, produces your feedbackYour uploaded material, your case description, your voice during the session, the session transcript
AnamRenders the optional video avatarsOnly the lines the judge and opposing lawyer speak. Never your voice, camera, papers or transcript
ElevenLabsRenders the optional voicesOnly the individual spoken lines, never more
SupabaseSign in and our databaseAccount, hearing details, scores, purchase records
RailwayHosts the CourtPrep applicationTraffic passing through the service
StripePayments, refunds, disputesYour email address, name and payment details
GoogleSign in with Google, if you choose itConfirms your identity to us; we never receive your Google password
ResendSends account emails such as sign up confirmation and password resetYour email address

Most requests to OpenAI are sent with storage turned off, so OpenAI does not retain them beyond processing. Two question threads in a standard session are stored by OpenAI during the session so the conversation flows; we queue their deletion when your session ends. OpenAI keeps API content for up to 30 days for abuse monitoring and does not use it to train its models unless a customer opts in, which we have not. Anam does not use session content to train its models, keeps session recordings for up to 30 days at most, and deletes each CourtPrep session when we send the deletion request at the end of it. ElevenLabs receives only the individual spoken lines, and we have turned off the setting that would let it use them to improve its models. Each provider uses vetted subprocessors of its choosing, mainly large cloud hosts, and publishes its current list on its site.

We are honest about the limit of this: a deletion request tells a provider to erase your content, but we cannot see inside their systems and cannot promise that every copy is erased instantly. This is another reason to upload only what your session needs.

7. International transfers

Some of our providers process data outside the UK, mainly in the United States and the EU. Where a transfer leaves the UK we rely on a lawful safeguard. Several providers are certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US Data Bridge). For the rest we rely on the EU standard contractual clauses as amended by the UK Addendum, which form part of our contract with each provider.

Provider Where processed UK transfer safeguard
OpenAIUnited StatesStandard contractual clauses with the UK Addendum
AnamA UK company, hosting sessions on EU and US infrastructureUK International Data Transfer Agreement or Addendum for its onward transfers
ElevenLabsUnited StatesUK Extension to the Data Privacy Framework, plus standard contractual clauses with the UK Addendum
SupabaseAmazon Web Services, Frankfurt, GermanyUK adequacy regulations cover the EU; standard contractual clauses with the UK Addendum cover any access from elsewhere
RailwayAmsterdam, NetherlandsUK adequacy regulations cover the EU; Railway is also certified under the UK Extension to the Data Privacy Framework
StripeGlobal, including the United StatesUK Extension to the Data Privacy Framework (Stripe, LLC), plus standard contractual clauses with the UK Addendum
GoogleGlobal, including the United StatesUK Extension to the Data Privacy Framework (Google LLC)
ResendUnited StatesUK Extension to the Data Privacy Framework, plus standard contractual clauses with the UK Addendum

We will not transfer your data in a way that undermines the protection it has in the UK.

8. How long we keep your data

Data How long
Session audio, video, camera images, transcript textNot stored by CourtPrep at all. Camera images never leave your browser
Uploaded papers and case descriptionHeld in your browser's memory only; cleared when you remove them, finish the session or close the page. Provider copies are deleted as described in section 6
Hearing details and feedback scoresDeleted at 6pm UK time on your hearing date
Unused session creditsExpire 30 days after purchase
Account (email address, display name)Kept while your account is active. If you have not signed in for 12 months we delete or anonymise your account data. You can close your account sooner by emailing support@courtprep.uk
Purchase, refund and dispute recordsKept for 6 years to meet tax and accounting duties
Content free activity eventsKept while your account is active, then deleted or anonymised with the account

9. Cookies, storage and device permissions

CourtPrep sets no advertising or analytics cookies. Your browser stores a small amount of data so you stay signed in and so the tutorial does not repeat; this storage is necessary for the service to work. Google and Stripe may set cookies on their pages when you sign in or pay, under their notices. Our microphone permission is required for a session, because your voice is transcribed live by OpenAI. Camera permission is optional and camera images are processed on your device only. See the Cookie Notice for detail.

10. Your rights

You have the right to access your data, to correct it, to have it erased, to restrict or object to our use of it, to receive a copy in a portable form, and to withdraw any consent you have given. To use any of these rights, email support@courtprep.uk. We will respond within one month, and we may need to verify your identity first. Exercising your rights is free.

11. Complaints

If you are unhappy about how we handle your data, email support@courtprep.uk. We will acknowledge your complaint within 30 days and aim to resolve it without undue delay. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, at any time.

12. Children

CourtPrep is for adults. You must be 18 or over to use it, and we do not knowingly collect data about anyone under 18.

13. Changes to this notice

If we change this notice we will publish the new version here with a new effective date and a plain note of what changed, and tell you by email or in the app if the change is significant.

Contact: Obiter Studio Limited, support@courtprep.uk