Contracts, data protection and site terms

Operator

AI Lawyers is a service operated by Latinomics Mexico AC, a Mexican civil association, in cooperation with The Global School, Vienna.

• Registered office: Calle 10 number 704, San José, 94560 Córdoba, Veracruz, Mexico
• European presence: Lindengasse 56, 1070 Vienna, Austria
• General enquiries: hello@ai-lawyers.org
• Legal and data protection: legal@ai-lawyers.org

Responsible for content

Roberto A. Arrucha, on behalf of Latinomics Mexico AC. Any notice regarding the content of this website should be sent to legal@ai-lawyers.org.

Purpose of the website

Presentation of the AI Lawyers services for the legal industry and booking of meetings. This website does not provide legal advice or legal representation.

1. Subject matter and contract documents

These terms govern the design, development, deployment and maintenance of artificial intelligence systems by Latinomics Mexico AC, trading as AI Lawyers, for a professional or business client.

The contract consists of the signed proposal or order, these general terms and the data processing agreement. In case of conflict the signed proposal prevails, then the data processing agreement, then these terms.

These terms are addressed to professionals and businesses only. They do not apply to consumers.

2. Services

The specific scope, deliverables, schedule and price are set out in the proposal. Unless stated otherwise, services are delivered remotely, on business days, in Spanish or English.

Any work not described in the proposal is out of scope and requires prior written agreement on its price and its effect on the schedule.

3. Your cooperation

Delivery on time depends on your cooperation. You agree to appoint a contact with decision-making authority and to provide, within a reasonable time:

• The sources, templates, models and review criteria required.
• Technical access to the channels and systems where the solution is deployed.
• Validations and approvals within the agreed deadlines.

Delays caused by the absence of that cooperation shift the schedule accordingly and do not give rise to liability for AI Lawyers.

4. Delivery and acceptance

You have ten business days from each delivery to review it and report in writing any deviation from what was agreed. We will correct well-founded deviations at no cost. If that period passes without objection, or if you put the deliverable into production, it is deemed accepted.

5. Fees and payment

Fees are those set out in the proposal and exclude taxes, which are charged as applicable law requires. Unless agreed otherwise, we invoice by milestone and payment falls due thirty days from the invoice date.

Recurring services, such as corpus maintenance or the monthly model review, are invoiced in advance. Non-payment of a due invoice entitles AI Lawyers to suspend the service on fifteen days' written notice.

6. Intellectual property

You retain full ownership of your content: templates, document models, criteria, databases and any material you provide, as well as the data the system processes.

Once the fees are paid, you acquire ownership of the specific deliverables developed for you, meaning the configurations, prompts, flows and integrations built to order within the project.

AI Lawyers retains ownership of its methodology, reusable components, libraries and pre-existing or general purpose tools, and grants you a non-exclusive, perpetual and non-transferable licence over them to use the deliverable for its intended purpose.

Language models belong to their providers. Use of the output they generate is subject to those providers' terms in addition to these.

7. Confidentiality

Each party will keep the other's confidential information secret, use it only to perform the contract, and limit access to those who need it. The obligation survives for three years after termination, and indefinitely for trade secrets protected as such by law.

It does not cover information that is public without breach, already lawfully held, independently developed, or required to be disclosed by law or court order, in which case the other party will be notified where lawful.

8. Data protection

Where AI Lawyers processes personal data on your behalf, it acts as processor and you act as controller. That relationship is governed by the data processing agreement published below, which forms an inseparable part of these terms.

9. Limits of AI and professional supervision

This is the most important clause in this document. The systems we build assist the work of qualified professionals. They do not give legal advice, do not replace professional judgement and do not make decisions for you.

Language models can produce incomplete, outdated or incorrect output, including output that sounds confident. You agree to subject any output to professional review before using it with third parties, filing it before an authority or court, or incorporating it into a document with legal effect.

You retain in full your professional and ethical responsibility towards your own clients and towards the bars and authorities that supervise you. AI Lawyers assumes none of that responsibility and is not a party to the relationship between you and your clients.

It is your responsibility to disclose the use of automated systems to your clients where applicable regulation or your code of conduct requires it.

10. Warranties

AI Lawyers warrants that the services will be performed with the diligence and technical competence expected of a professional in the sector, and that it holds the rights necessary over the components it contributes.

We do not warrant that the systems will run uninterrupted or error free, or that their output will be accurate, complete or fit for a particular purpose. To the extent permitted by law, all other warranties, express or implied, are excluded.

11. Limitation of liability

To the extent permitted by law, AI Lawyers is not liable for loss of profit, loss of opportunity, loss or corruption of data not attributable to it, or for indirect or consequential loss, however caused.

The total aggregate liability of AI Lawyers under the contract is limited to the amount actually invoiced and collected in the twelve months preceding the event giving rise to it.

These limits do not apply to wilful misconduct, gross negligence, breach of confidentiality or data protection obligations, or anything the law declares cannot be limited.

12. Indemnity

You will hold AI Lawyers harmless against third party claims arising from the content, data or instructions you provide, or from your use of the deliverables outside the professional supervision required by clause 9.

AI Lawyers will hold you harmless against third party claims alleging that its own components infringe intellectual property rights, provided you notify it without delay and allow it to conduct the defence.

13. Subcontracting

AI Lawyers may subcontract part of the services and remains responsible for the subcontractor's work as if it were its own. Subcontracting that involves processing personal data is governed by the data processing agreement.

14. Term and termination

The contract runs for the term set out in the proposal. Either party may terminate for material breach not remedied within thirty days of written notice. Recurring services may be terminated by either party on sixty days' written notice.

On termination you will pay for services rendered up to that date, and AI Lawyers will return or delete your data in accordance with the data processing agreement. The clauses on intellectual property, confidentiality, liability and governing law survive termination.

15. Force majeure

Neither party is liable for failure caused by events beyond its reasonable control, including prolonged interruption of essential third party services. The affected party will give notice without delay and both will negotiate a new schedule in good faith.

16. Commercial references

AI Lawyers will name you or your brand as a client only with your prior written authorisation. It may describe the work in anonymised form, with no detail that could identify you.

17. Assignment and amendments

Neither party may assign the contract without the other's written consent, except in the case of corporate reorganisation. Any amendment requires written agreement from both parties.

18. Governing law and jurisdiction

These terms are governed by the law of Mexico. The parties submit to the courts of Córdoba, Veracruz, waiving any other jurisdiction that might apply.

19. Language versions

These terms are published in Spanish and English. Because they are governed by Mexican law, the Spanish version prevails in case of any discrepancy.

1. Parties and roles

This agreement governs the processing of personal data that Latinomics Mexico AC, the processor, carries out on behalf of the client, the controller, in performance of the general terms of service. It applies automatically to any project that involves processing personal data.

Regulation (EU) 2016/679 applies where the processing falls within its scope, and the Mexican Federal Law on the Protection of Personal Data Held by Private Parties applies where Mexican law governs.

2. Subject matter, duration and nature

The subject matter, duration, nature and purpose of the processing, together with the types of data and categories of data subjects, are set out in Annex I. Processing lasts as long as the service is provided.

3. Controller instructions

The processor will process the data only on documented instructions from the controller, including on international transfers, unless required otherwise by law, in which case it will inform the controller before processing unless the law prohibits it.

The processor will inform the controller if, in its opinion, an instruction infringes applicable data protection law.

4. Confidentiality of personnel

The processor ensures that persons authorised to process the data have committed to confidentiality or are under a statutory duty of secrecy, and receive the necessary training.

5. Security measures

The processor applies the technical and organisational measures described in Annex II, appropriate to the risk. It may update them provided the level of protection is not reduced.

6. Subprocessors

The controller gives general authorisation for the subprocessors listed in Annex III. The processor will impose on each subprocessor, by contract, obligations equivalent to those in this agreement, and remains liable to the controller for their performance.

The processor will give thirty days' notice of any addition or replacement of a subprocessor. The controller may object on reasonable data protection grounds within that period; if the objection cannot be resolved, either party may terminate the affected service without penalty.

7. Assistance to the controller

Taking into account the nature of the processing, the processor will assist the controller with appropriate technical and organisational measures in responding to data subject requests. If a request reaches the processor directly, it will forward it to the controller without delay and will not respond on its own account.

The processor will likewise assist the controller with security of processing, breach notification, impact assessments and prior consultation with the supervisory authority, to the extent of the information available to it.

8. Personal data breaches

The processor will notify the controller of any personal data breach without undue delay and in any event within forty-eight hours of becoming aware of it, with the information available on its nature, the categories and approximate number of data subjects and records affected, the likely consequences and the measures taken.

Notification to the supervisory authority and, where required, to data subjects is the controller's responsibility.

9. Deletion or return

At the controller's choice, the processor will return or delete all personal data at the end of the service, and delete existing copies, unless applicable law requires them to be retained. Return will be in a structured, commonly used format within thirty days of the request.

10. Audit

The processor will make available to the controller the information necessary to demonstrate compliance with this agreement and will allow audits, including inspections, by the controller or an auditor it authorises.

Audits will take place on thirty days' notice, during business hours, at most once a year unless there has been a security breach or the supervisory authority requires otherwise, and without compromising the confidentiality of other clients.

11. International transfers

The subprocessors in Annex III may process data outside the European Economic Area, including in the United States. Where a transfer leaves the European Economic Area, it relies on an adequacy decision or on the European Commission's standard contractual clauses, with any supplementary measures required.

12. Model training

The processor does not use personal data processed on the controller's behalf to train its own models, and contracts with model providers under configurations that exclude that content from the training of their models. This obligation survives any change of provider.

Annex I. Details of the processing

• Subject matter: performance of the services described in the signed proposal.
• Duration: the duration of the service, plus any legally required retention periods.
• Nature and purpose: collection, structuring, retrieval, generation of answers and documents, storage and deletion, for the purpose of operating the contracted systems.
• Types of data: those the controller enters into the system or authorises for processing, typically identification and contact data, data contained in documents and case files, and conversation data.
• Categories of data subjects: the controller's clients and contacts, the controller's staff, and counterparties appearing in the documentation processed.
• Special categories: not envisaged. If a case file contains them, the controller will say so and additional measures will be agreed before processing.

Annex II. Technical and organisational measures

• Encryption in transit using TLS 1.2 or above, and at rest using AES-256.
• Role-based access control, least privilege, and mandatory second factor.
• Logical segregation of each client's data.
• Logging of access and of operations on the data.
• Encrypted backups with a tested restore procedure.
• Signed confidentiality undertaking from every member of staff with access.
• Documented incident management and breach notification procedure.
• Security assessment of every subprocessor before onboarding.

Annex III. Authorised subprocessors

• Anthropic PBC, United States. Generation of answers using Claude language models, under a configuration that excludes content from training.
• Google Ireland Limited and Google LLC. Hosting infrastructure, calendar and corporate email.
• Meta Platforms Ireland Limited. Advertising measurement on our own website only, with no access to client project data.
• CookiePal. Consent management and record keeping on our own website.

The current list is published on this page. To be notified of changes, write to legal@ai-lawyers.org.

1. Scope

These terms govern access to and use of ai-lawyers.org. They do not govern the provision of services, which is covered by the general terms of service above.

2. Nature of the content

The content of this site is informational and commercial. It is not legal advice, nor professional advice of any kind, nor a binding offer. Any indicative timelines, scopes and prices mentioned are only ever fixed in a signed proposal.

3. Permitted use

You may read, print and share the content of this site with attribution. You may not extract it in bulk, reproduce it commercially, or use it to train third party systems without written authorisation.

4. Intellectual property

The site, its text, its design and the AI Lawyers brand features belong to Latinomics Mexico AC or its licensors. Use beyond the previous clause requires authorisation.

5. Links and third party services

The site links to and uses third party services, including Google Calendar for scheduling. Their use is subject to those providers' terms and policies in addition to ours.

6. Availability and changes

We may modify, suspend or withdraw the site or any of its content at any time. Any new version of these terms will be published here with a new date.

7. Governing law

These terms are governed by the law of Mexico, with jurisdiction of the courts of Córdoba, Veracruz. If you access the site as a consumer resident in the European Union, you keep the protection of the mandatory rules of your country of residence.

1. Scope of this policy

This policy covers the personal data we process as controller: that of people who visit ai-lawyers.org, book a meeting with us, or hold a commercial relationship with AI Lawyers.

It does not cover data we process on behalf of a client when operating the systems we have built for them. In those cases the client is the controller, we are the processor, and the data processing agreement above applies together with that client's own privacy policy.

2. Controller

Latinomics Mexico AC, Calle 10 number 704, San José, 94560 Córdoba, Veracruz, Mexico, with a European presence at Lindengasse 56, 1070 Vienna, Austria. Contact: legal@ai-lawyers.org.

3. What we collect

• Professional contact data: name, role, organisation, email and phone when you book a meeting or write to us.
• The content of the commercial conversation: what you tell us about your practice and the notes we take.
• Technical browsing data: IP address, device, browser, pages visited and referring source.
• Consent data: the choices you make in the cookie banner and when you made them.
• Contract and billing data, if we end up working together.

4. Why, and on what legal basis

• To handle your enquiry and prepare a proposal. Basis: steps taken at your request before entering a contract.
• To perform and invoice the services engaged. Basis: performance of a contract.
• To keep the site secure and prevent abuse. Basis: legitimate interest.
• To measure how the site is used and improve it. Basis: your consent, through the cookie banner.
• To send you communications about our services. Basis: your consent or the legitimate interest in business to business communication, with a right to object at any time.
• To comply with accounting, tax and legal obligations. Basis: legal obligation.

5. Who we share it with

• Google, for scheduling through Calendar, corporate email and measurement through Analytics and Tag Manager.
• Meta, for advertising measurement, only if you consent.
• CookiePal, to record and prove your consent choices.
• Professional advisers and billing providers, where a contractual relationship exists.
• Authorities and courts, where we are legally required to.

We do not sell personal data, and we do not share it for other companies to advertise to you independently.

6. International transfers

We operate between Mexico, Austria and the providers named above, so your data may be processed outside your country, including in the United States. Where a transfer leaves the European Economic Area we rely on an adequacy decision or on the European Commission's standard contractual clauses.

7. How long we keep it

• Business contacts without a contract: three years from the last contact.
• Contract and billing records: as long as tax and commercial law requires.
• Technical browsing data: twenty-five months.
• Consent records: as long as the consent is valid, plus one year of proof.

8. Your rights

You can ask us for access to your data, its correction, its deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. You can withdraw any consent without affecting what we did before you withdrew it.

In Mexico these are your ARCO rights under the Federal Law on the Protection of Personal Data Held by Private Parties. In the European Union they are your rights under articles 15 to 22 of the GDPR.

Write to legal@ai-lawyers.org and we will answer within thirty days. If you are not satisfied, you can complain to your national data protection authority, to the Austrian Datenschutzbehörde, or to the Mexican INAI.

9. Security

We apply the measures described in Annex II of the data processing agreement. No system is perfectly secure, and if a breach affects your rights we will notify you and the relevant authority within the legal deadline.

10. Automated decisions

We do not take automated decisions with legal effects on you, and we do not profile you for that purpose.

11. Changes

We will publish any new version here with a new date. If a change materially affects how we use your data, we will tell you before it takes effect.

1. What cookies are

Cookies are small files a website stores on your device. They let a site remember your choices, keep a session working and understand how the site is used. We also use comparable technologies such as local storage and tracking pixels, and we call all of them cookies here.

2. The categories we use

• Strictly necessary: they make the site work and record your consent choice. They do not need consent and cannot be switched off.
• Analytics: Google Analytics through Google Tag Manager, to understand which pages are useful. Only with your consent.
• Advertising: Meta Pixel, to measure the performance of our campaigns. Only with your consent.
• Third party embeds: when you choose to load the Google Calendar booking form, Google may set its own cookies.

3. Consent

We manage consent with CookiePal, integrated with Google Consent Mode. Nothing beyond strictly necessary cookies runs until you accept it, and refusing is as easy as accepting. Your choice is recorded so we can prove it, and you can change or withdraw it at any time by reopening the cookie banner.

The booking calendar is deliberately not embedded until you click to load it, so no third party cookie is set by simply reading the page.

4. Controlling cookies in your browser

Every major browser lets you block or delete cookies from its settings. Blocking strictly necessary cookies may stop parts of the site from working. Consult your browser's official support documentation for the exact steps.

5. Questions

Write to legal@ai-lawyers.org and we will answer.