6.1.The Service is intended for researching legal questions. The User may provide the third-party AI assistant and the Service with client, trade, and professional secrets, other confidential information, and personal data necessary for the research task, including special categories of personal data under Article 9 of the GDPR and personal data relating to criminal convictions and offences under Article 10 of the GDPR. Such information may also be included in a tool call independently generated by the AI model. This is subject to there being an appropriate legal basis for processing the personal data, an additional condition under Article 9 or Article 10 of the GDPR for special categories of personal data and personal data relating to criminal convictions and offences, legally adequate consent, and the Customer or User having the right to provide the information for processing by their chosen third-party AI assistant, the Service Provider, and the subprocessors involved in the processing. The Customer and User are responsible for minimising the information to what is necessary for the research task, selecting the AI assistant version and settings, and the suitability of the entire processing chain for the information in question. Other regulated sensitive information may be processed only where strictly necessary for the legal task and where the processing is lawfully managed. The Customer and User are responsible for ensuring that neither material provided to the AI assistant nor a model tool call based on that material includes PCI-regulated payment-card data, protected health information (PHI), government-issued personal identifiers, authentication credentials, or other secrets, or information that the Customer or User has no right to provide for processing by the processing chain, namely their chosen third-party AI assistant, the Service Provider, and the subprocessors involved in the processing. Special categories of personal data and personal data relating to criminal convictions and offences may be provided only to the extent that they do not fall within the categories prohibited above; the Customer and User must remove personal identity codes, health information, and other prohibited data from the material before providing it. For information included in a model tool call on the basis of other context in the third-party AI assistant, the Customer and User are responsible within the scope of their obligations concerning the selection, version, settings, and access rights of the AI assistant. These limitations do not apply to administrative information required in the designated account, team, invitation, billing, agreement, and contact fields of the Service, such as names, work email addresses, organisation information, roles, and billing contact details. The Service Provider uses appropriate technical and organisational measures to protect the Service and the information processed in it. The Service Provider is not responsible for security risks or damage relating to information transmitted to the Service contrary to the Agreement and/or these Terms, or for the loss of information transmitted to the Service.
6.4.As stated above in section 2 (Description of the Service), the Service is used through a third-party AI assistant. Material intentionally provided by the User to the AI assistant or the Service is User material. Based on that material and other available context, the AI model may independently generate a tool call to be transmitted to the Service. The model tool call is not material intentionally provided by the User to the Service. The third party providing the AI assistant independently processes User material, context, model tool calls, and content returned by the Service under its own terms of use and privacy practices, both before and after information is transmitted to the Service. The other provisions of this section 6, including the commitments above concerning the Service Provider not using information transmitted to the Service to develop the AI system and having no right to inspect it, apply to information only to the extent that it is processed in the Service and do not apply to processing in the third-party AI assistant. The Service Provider has no obligation to detect, classify, filter, or remove the content of a model tool call or to prevent its transmission and, subject to the limitations set out in section 9, is not responsible for the third-party AI assistant’s content choices or processing. The Customer and User must review the third-party AI assistant’s terms of use, privacy practices, service version, and settings and ensure their right to transmit information to the entire processing chain. The conditions and limitations in section 6.1 apply to both User material and the model tool call.