Definitions

"Service" means the DirectCase application available at directcase.ai, enabling search and analysis of legal sources using AI technologies.

"User" means the natural or legal person who has entered into an agreement with DirectCase by accepting these Terms.

"Terms" means this document including Appendix A.

1. Acceptance of Terms

By using the Service, you confirm that you have read, understood, and agree to these Terms (including Appendix A — DPA) and the Privacy Policy.

2. Use of the Service

Age requirement: The Service may only be used by persons over 18 years of age.

Licence: DirectCase grants a limited, non-exclusive, non-transferable, revocable licence to use the Service.

Restrictions: You agree that you will not:

• Use the Service for unlawful purposes
• Circumvent, disassemble, decompile, or attempt to obtain the source code
• Distribute, sell, rent, or transfer rights to third parties
• Share login credentials or allow third parties to access your account
• Use automated tools (bots, scrapers) to access the Service
• Intentionally overload the Service's infrastructure
• Use the Service to create a competing product

3. Subscription (monthly and annual membership)

Membership types: Monthly or annual subscriptions with different features and prices displayed in the service.

Annual discounts: Annual membership may include a reduced price tied to a 12-month commitment.

Provider's right to terminate: DirectCase may unilaterally terminate membership for legal-compliance, security, abuse-prevention reasons or material breach of Terms, with refund of unused portions.

Automatic renewal: The subscription renews automatically until cancelled by the user. Fees for the new period are charged on the renewal date.

User termination: The user may cancel the subscription at any time via account settings or by emailing info@directcase.ai. Cancellation takes effect at the end of the current billing period.

Conflicting terms: Order/payment information prevails over these Terms in case of conflict.

4. Roles in processing personal data

Category 1 — User account data (DirectCase as Controller)

When registering and managing the account, DirectCase processes the user's personal data as a Controller (Art. 4(7) GDPR) — in particular name, email address, billing address, and other contact/identification details. Details in the Privacy Policy.

Category 2 — Content entered into the Service (DirectCase as Processor)

All content entered by the user into the Service — queries, texts, case descriptions, or personal data of third parties (clients) — is processed by DirectCase solely as a Processor (Art. 4(8) GDPR) on the user's instructions. Processing is governed by Appendix A — DPA.

5. Specific terms for lawyers

Confidentiality: DirectCase contractually commits to the confidentiality of all information made available through the Service. Employees and partners are bound by confidentiality obligations.

Client consent: The user represents and warrants that, prior to entering personal data of clients or third parties into the Service, a valid legal basis for such processing under Art. 6 GDPR (and where relevant Art. 9(2) or Art. 10 GDPR) has been secured.

Public sources: The Service works primarily with publicly available legal sources.

Bar-association guidance: Users are encouraged to consider current guidance of the competent bar association regarding the use of AI tools.

Sample clause: A sample client-consent clause is available from info@directcase.ai.

6. AI outputs — notice

Outputs of the Service are for information only and do not constitute legal advice. DirectCase does not perform automated decision-making with legal or similarly significant effects under Art. 22 GDPR. Users bear full responsibility for verifying the accuracy of outputs before use.

7. Third-party services

The Service uses third-party platforms listed in Appendix A.

8. Intellectual property

All content, features, and functionality are the exclusive property of DirectCase or its licensors.

9. Exclusion of liability for circumstances beyond control

DirectCase is not liable for delay or failure caused by circumstances beyond its reasonable control (outages of third-party infrastructure, cyberattacks, natural disasters, governmental actions).

10. Limitation of liability

To the maximum extent permitted by law, DirectCase excludes liability for indirect, incidental, special, consequential, or exemplary damages; lost profits; or loss of data. DirectCase's total liability to the user shall not exceed the fees paid in the 6 months preceding the claim.

11. Indemnification

Users agree to defend, indemnify, and hold harmless DirectCase against claims, liabilities, damages, losses, and costs arising out of use of the Service.

12. Assignment

DirectCase may assign rights/obligations to third parties; users consent to such assignment.

13. Governing law

These Terms are governed by the laws of the Czech Republic. Disputes shall be resolved by the competent courts of the Czech Republic, with territorial jurisdiction at the seat of DirectCase.

14. Changes to the Terms

DirectCase reserves the right to modify these Terms at any time. Material changes require at least 14 days' prior notice.

15. Severability

If any provision is held invalid or unenforceable, the remaining provisions remain in full force and effect.

16. Contact

DirectCase s.r.o.
Zenklova 2530/23, 180 00 Praha
VAT ID: CZ24337269 | Company ID: 24337269
Email: info@directcase.ai

---

APPENDIX A — DATA PROCESSING AGREEMENT (DPA)

Pursuant to Art. 28 of Regulation (EU) 2016/679 (GDPR).

A.1 Parties and subject matter

Controller: User of the Service.
Processor: DirectCase s.r.o.
Subject matter: Processing of personal data on behalf of the Controller to the extent necessary to provide the Service.
Duration: For the duration of the contractual relationship; confidentiality obligations survive termination.

A.2 Nature, purpose, and categories of processing

Automated processing of personal data using AI language models for legal research and document analysis.

Purposes: providing the Service, technical operation and security, technical support.

No AI training: User-query content and submitted data are not used to train DirectCase's AI models or those of sub-processors.

Data categories: identification and contact data of clients, description of facts, procedural data (file numbers, hearing dates), other information included in queries.

A.3 DirectCase's obligations

DirectCase undertakes to: (a) process only on the Controller's instructions; (b) ensure confidentiality of authorised persons; (c) implement security measures under Art. 32 GDPR (encryption, RBAC, audits, backups); (d) comply with sub-processing conditions; (e)–(h) assist the Controller with Art. 32–36 GDPR duties, handle data-subject requests under Art. 15–22 GDPR, delete or return data at the end of the Service, enable audits.

A.4 Sub-processors

Processor	Location	Purpose
OpenAI, Inc.	USA	AI language models (GPT)
Anthropic PBC	USA	AI language models (Claude)
Google LLC	USA	AI language models (Gemini)
Hetzner Online GmbH	Germany (EU)	Server infrastructure
Amazon Web Services, Inc.	USA	Cloud infrastructure
RunPod, Inc.	USA	GPU infrastructure

Changes are announced 14 days in advance; the Controller has the right to a reasoned objection within 14 days and to terminate the contract within 30 days if no agreement is reached.

A.5 Personal data breach notification

In the event of a personal data breach under Art. 4(12) GDPR, DirectCase informs the Controller without undue delay.

A.6 Deletion and return of data

Upon termination or on request, data is deleted or returned. Conversation data is automatically deleted after 90 days.

A.7 Audits and inspection

Audits no more than once every 12 months, with 30 days' prior written notice. Costs are borne by the Controller.

A.8 DPIA assistance

On request we provide cooperation for DPIAs under Art. 35 GDPR. Contact: info@directcase.ai.

A.9 Contact person

Queries and requests regarding the DPA: info@directcase.ai