admin/elegalsoftware
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Storage→Spaces, security hardening, production-blocker fixes, tests + CI

Browse Source 
Storage
- Migrate document/media storage from local disk to DigitalOcean Spaces (S3);
  lib/storage.ts now streams via the S3 SDK; SPACES_* env vars required.
- Add scripts/migrate-storage-to-spaces.ts (idempotent, one-time).

Security hardening (all report findings)
- DB pool fails closed in production when the CA cert is missing (no more
  silent unverified TLS); warns in dev.
- trustProxy: 1 (was true) so X-Forwarded-For can't be spoofed to evade rate limits.
- Login lockout keyed by (email, ip) so an attacker can't lock out a victim.
- Superadmin auto-grant now requires a verified email.
- CSRF tokens HMAC-signed; exact-path exemptions; logout no longer exempt.
- Upload content-sniffing (magic bytes) rejects spoofed MIME types.
- create-admin.ts reads creds from env/argv; seed-demo.ts guarded behind ALLOW_SEED.

Production-blocker fixes
- SPA deep-link/refresh no longer 500s (decorateReply fix); index.html served no-cache.
- Invoice numbering is transaction-safe (per-firm advisory lock + max sequence),
  eliminating concurrent collisions and delete-reuse — no schema change.
- Checkout guards against double-billing a firm already on a paid plan.
- Fix render-loop in CreateInvoiceDrawer / ManualEntryDrawer (unstable effect deps).

Honesty / trust
- Remove fabricated testimonials, stats, strikethrough "was" prices, contact SLA,
  and the login-panel stats; replace with non-fabricated copy.
- Fix cookie-policy consent-key mismatch. (Legal pages still need lawyer review.)

Quality
- Add Vitest unit tests (file-signature, password hashing) and GitHub Actions CI.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Leon Serfaty
2026-07-16 13:18:10 -04:00
co-authored by Claude Fable 5
parent 310568690b
commit 97e1d4c60b
51 changed files with 3640 additions and 660 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/web/src/App.tsx
+12
View File
@@ -34,6 +34,12 @@ import BlogPostPage from './pages/blog/BlogPostPage';
import PrivacyPage from './pages/legal/PrivacyPage';
import TermsPage from './pages/legal/TermsPage';
import CookiesPage from './pages/legal/CookiesPage';
import LegalIndexPage from './pages/legal/LegalIndexPage';
import AcceptableUsePage from './pages/legal/AcceptableUsePage';
import RefundsPage from './pages/legal/RefundsPage';
import DisclaimerPage from './pages/legal/DisclaimerPage';
import DmcaPage from './pages/legal/DmcaPage';
import DpaPage from './pages/legal/DpaPage';
export default function App() {
return (
@@ -57,9 +63,15 @@ export default function App() {
<Route path="/blog" element={<BlogIndexPage />} />
<Route path="/blog/:slug" element={<BlogPostPage />} />
<Route path="/legal" element={<LegalIndexPage />} />
<Route path="/legal/privacy" element={<PrivacyPage />} />
<Route path="/legal/terms" element={<TermsPage />} />
<Route path="/legal/cookies" element={<CookiesPage />} />
<Route path="/legal/acceptable-use" element={<AcceptableUsePage />} />
<Route path="/legal/refunds" element={<RefundsPage />} />
<Route path="/legal/disclaimer" element={<DisclaimerPage />} />
<Route path="/legal/dmca" element={<DmcaPage />} />
<Route path="/legal/dpa" element={<DpaPage />} />
<Route path="/app" element={<AppLayout />}>
<Route index element={<DashboardPage />} />
apps/web/src/components/app/CreateInvoiceDrawer.tsx
+5 -1
View File
@@ -58,7 +58,11 @@ export function CreateInvoiceDrawer({ open, onClose, initialClientId, initialCas
setItems([{ description: '', quantity: '1', rate: '' }]);
setSelectedTimeIds(new Set());
create.reset();
}, [open, initialClientId, initialCaseId, create]);
// Only re-run on the open transition (and when the initial ids change).
// `create` is a fresh object each render; depending on it would re-fire the
// effect every render and wipe user input ("Maximum update depth exceeded").
// eslint-disable-next-line react-hooks/exhaustive-deps
}, [open, initialClientId, initialCaseId]);
// When client changes, clear case selection if the case doesn't belong to that client
useEffect(() => {
apps/web/src/components/app/ManualEntryDrawer.tsx
+6 -1
View File
@@ -59,7 +59,12 @@ export function ManualEntryDrawer({ open, onClose, initialCaseId }: Props) {
});
create.reset();
}
}, [open, initialCaseId, reset, create]);
// Only re-run on the open transition (and when the initial case id changes).
// `create` is a fresh object each render; depending on it would re-fire the
// effect every render, clearing the mutation error so failed saves show no
// feedback. `reset` is stable across renders.
// eslint-disable-next-line react-hooks/exhaustive-deps
}, [open, initialCaseId]);
async function onSubmit(values: FormValues) {
const minutes = Number(values.minutes);
apps/web/src/components/auth/AuthLayout.tsx
+6 -6
View File
@@ -41,13 +41,13 @@ export function AuthLayout({ title, subtitle, children, footer }: Props) {
</p>
<ul className="mt-8 space-y-3 text-sm">
{[
'60% less time on admin tasks',
'3× faster client invoicing',
'98% billing accuracy rate',
].map((stat) => (
<li key={stat} className="flex items-center gap-3">
'Track billable hours against every case',
'Turn tracked time into invoices in a few clicks',
'Keep cases, clients, and documents in one place',
].map((item) => (
<li key={item} className="flex items-center gap-3">
<span className="grid h-6 w-6 place-items-center rounded-full bg-white/15 text-xs">✓</span>
{stat}
{item}
</li>
))}
</ul>
apps/web/src/components/marketing/Contact.tsx
+2 -6
View File
@@ -111,15 +111,11 @@ export function Contact() {
<div className="rounded-2xl border border-ink-100 bg-white p-6">
<div className="flex items-center gap-2 text-ink-700">
<Clock className="h-4 w-4 text-brand-500" />
<span className="text-sm font-semibold">We respond quickly</span>
<span className="text-sm font-semibold">We reply by email</span>
</div>
<p className="mt-2 text-xs text-ink-500 leading-relaxed">
Average response time: 4 hours during weekdays, 12 hours on weekends.
Send us a message and we'll get back to you at the email address you provide.
</p>
<div className="mt-4 inline-flex items-center gap-2 rounded-full bg-emerald-50 px-3 py-1 text-xs font-medium text-emerald-700">
<span className="h-2 w-2 rounded-full bg-emerald-500" />
Online and ready to help
</div>
</div>
</aside>
</div>
apps/web/src/components/marketing/Features.tsx
+2 -2
View File
@@ -29,8 +29,8 @@ const FEATURES = [
},
{
icon: ShieldCheck,
title: 'Bank-Level Security',
body: 'Enterprise-grade encryption and compliance features to protect sensitive client data.',
title: 'Secure & Private',
body: 'Client data is encrypted in transit and at rest, stored in isolated per-firm storage, with passwords protected by modern hashing.',
},
];
apps/web/src/components/marketing/Footer.tsx
+20 -3
View File
@@ -23,7 +23,19 @@ const COLUMNS = [
links: [
{ href: '/resources', label: 'Resource Hub' },
{ href: '/blog', label: 'Blog' },
{ href: '/legal', label: 'Legal' },
],
},
{
title: 'Legal',
links: [
{ href: '/legal/terms', label: 'Terms of Service' },
{ href: '/legal/privacy', label: 'Privacy Policy' },
{ href: '/legal/cookies', label: 'Cookie Policy' },
{ href: '/legal/acceptable-use', label: 'Acceptable Use' },
{ href: '/legal/refunds', label: 'Billing & Refunds' },
{ href: '/legal/disclaimer', label: 'Disclaimer' },
{ href: '/legal/dmca', label: 'DMCA' },
{ href: '/legal/dpa', label: 'Data Processing' },
],
},
];
@@ -31,7 +43,7 @@ const COLUMNS = [
export function Footer() {
return (
<footer className="border-t border-ink-100 bg-white">
<div className="container py-16 grid gap-10 md:grid-cols-4">
<div className="container py-16 grid gap-10 sm:grid-cols-2 md:grid-cols-5">
<div className="md:col-span-1">
<a href="/" className="inline-flex" aria-label="Home">
<img src="/logo-dark.png" alt="eLegal Software" className="h-7 w-auto" width={450} height={45} />
@@ -60,7 +72,12 @@ export function Footer() {
<div className="border-t border-ink-100">
<div className="container py-6 flex flex-col md:flex-row items-center justify-between gap-3 text-xs text-ink-500">
<p>© {new Date().getFullYear()} eLegal Software. All rights reserved.</p>
<p>Built for legal professionals.</p>
<p>
eLegal Software is not a law firm and does not provide legal advice.{' '}
<a href="/legal" className="hover:text-ink-700 underline underline-offset-2">
Legal center
</a>
</p>
</div>
</div>
</footer>
apps/web/src/components/marketing/Pricing.tsx
-3
View File
@@ -18,7 +18,6 @@ const TIERS = [
tag: 'Most Popular',
description: 'For growing firms managing multiple cases.',
price: '$25',
strike: '$49',
cadence: '/month',
cta: 'Get Started',
href: '/signup?plan=pro',
@@ -37,7 +36,6 @@ const TIERS = [
tag: 'Best Value',
description: 'For established practices seeking long-term value.',
price: '$129',
strike: '$299',
cadence: 'one-time',
cta: 'Get Lifetime Access',
href: '/signup?plan=lifetime',
@@ -91,7 +89,6 @@ export function Pricing() {
<p className="mt-1 text-sm text-ink-600">{t.description}</p>
<div className="mt-6 flex items-baseline gap-2">
{t.strike && <span className="text-lg text-ink-400 line-through">{t.strike}</span>}
<span className="text-5xl font-bold text-ink-950 font-display">{t.price}</span>
<span className="text-sm text-ink-500">{t.cadence}</span>
</div>
apps/web/src/components/marketing/Stats.tsx
+20 -11
View File
@@ -1,7 +1,16 @@
const STATS = [
{ value: '60%', label: 'Less time on admin tasks' },
{ value: '3×', label: 'Faster client invoicing' },
{ value: '98%', label: 'Billing accuracy rate' },
const BENEFITS = [
{
title: 'Less time on admin',
label: 'Automate the repetitive parts of case and client management so more of your day goes to billable work.',
},
{
title: 'Faster invoicing',
label: 'Turn tracked hours into ready-to-send invoices in a few clicks instead of rebuilding them by hand.',
},
{
title: 'Accurate billing',
label: 'Log time against the right matter as you work, so invoices reflect what you actually did.',
},
];
export function Stats() {
@@ -9,23 +18,23 @@ export function Stats() {
<section className="section bg-gradient-to-b from-white to-brand-50/40">
<div className="container">
<div className="mx-auto max-w-2xl text-center">
<span className="eyebrow">Real Results</span>
<span className="eyebrow">Why eLegal Software</span>
<h2 className="mt-4 text-3xl md:text-5xl font-bold text-ink-950">
Measurable impact on your practice
Built to save you time
</h2>
<p className="mt-4 text-lg text-ink-600">
Don't rely on guesswork. The data speaks for itself about the efficiency gains our platform delivers.
A workflow designed to cut down on admin, speed up billing, and keep your numbers accurate.
</p>
</div>
<div className="mt-14 grid gap-6 md:grid-cols-3">
{STATS.map((s) => (
{BENEFITS.map((b) => (
<div
key={s.label}
key={b.title}
className="rounded-2xl border border-ink-100 bg-white p-8 text-center shadow-sm"
>
<div className="text-5xl md:text-6xl font-bold text-brand-500 font-display">{s.value}</div>
<p className="mt-3 text-sm text-ink-600">{s.label}</p>
<div className="text-2xl md:text-3xl font-bold text-brand-500 font-display">{b.title}</div>
<p className="mt-3 text-sm text-ink-600">{b.label}</p>
</div>
))}
</div>
apps/web/src/components/marketing/Testimonials.tsx
+41 -65
View File
@@ -1,97 +1,73 @@
import { motion } from 'framer-motion';
import { Star } from 'lucide-react';
import { Scale, Clock, FileText, Users, Shield, CreditCard } from 'lucide-react';
const TESTIMONIALS = [
const VALUE_PROPS = [
{
name: 'Sarah Mitchell',
role: 'Partner, Mitchell & Associates',
quote:
'eLegal Software transformed how our firm manages cases. We cut administrative time by 60% and our billing accuracy improved dramatically.',
icon: Scale,
title: 'Built for legal work',
body: 'Cases, clients, deadlines, and documents organized the way a practice actually runs — not a generic CRM bent to fit.',
},
{
name: 'David Chen',
role: 'Solo Attorney, Immigration Law',
quote:
'Managing 40+ immigration cases used to be overwhelming. Now everything is organized in one place — documents, deadlines, and client communications.',
icon: Clock,
title: 'Capture every billable minute',
body: 'Track time against cases as you work, so nothing slips through the cracks between the work and the invoice.',
},
{
name: 'Jennifer Rodriguez',
role: 'Managing Partner, Rodriguez Legal Group',
quote:
'The billable hours tracking is a game-changer. Our team captures every minute accurately, and invoicing takes seconds instead of hours.',
icon: FileText,
title: 'Documents in one place',
body: 'Keep matter files, templates, and client paperwork together and easy to find when you need them.',
},
{
name: 'Michael Thompson',
role: 'Criminal Defense Attorney',
quote:
'As a solo practitioner, time is everything. eLegal Software helps me stay organized and bill clients accurately. Best investment for my practice.',
icon: CreditCard,
title: 'Invoicing without the busywork',
body: 'Turn tracked hours into clean, professional invoices in a few clicks instead of rebuilding them by hand.',
},
{
name: 'Lisa Anderson',
role: 'Partner, Family Law Firm',
quote:
'We grew from 3 to 15 cases per month without adding staff. The efficiency gains are incredible — we save 20+ hours weekly.',
icon: Users,
title: 'Clear client communication',
body: 'Give clients transparency into their matters and billing, so expectations stay aligned from day one.',
},
{
name: 'Robert Kim',
role: 'Corporate Law Partner',
quote:
'Our clients love the transparency. They can see exactly what we are working on and billing for. Trust has never been higher.',
icon: Shield,
title: 'Secure by design',
body: 'Your matter data stays private and protected, with sensible controls built in from the start.',
},
];
function initials(name: string) {
return name
.split(' ')
.map((n) => n[0])
.join('')
.slice(0, 2)
.toUpperCase();
}
export function Testimonials() {
return (
<section id="testimonials" className="section bg-ink-50/50">
<div className="container">
<div className="mx-auto max-w-2xl text-center">
<span className="eyebrow">Success Stories</span>
<span className="eyebrow">Built for legal professionals</span>
<h2 className="mt-4 text-3xl md:text-5xl font-bold text-ink-950">
Loved by attorneys worldwide
Everything your practice needs, in one place
</h2>
<p className="mt-4 text-lg text-ink-600">
Join thousands of legal professionals who transformed their practice with eLegal Software.
eLegal Software brings cases, billable hours, documents, and invoicing together — designed around the way legal work really happens.
</p>
</div>
<div className="mt-14 grid gap-5 md:grid-cols-2 lg:grid-cols-3">
{TESTIMONIALS.map((t, i) => (
<motion.figure
key={t.name}
initial={{ opacity: 0, y: 16 }}
whileInView={{ opacity: 1, y: 0 }}
viewport={{ once: true, margin: '-50px' }}
transition={{ duration: 0.4, delay: (i % 3) * 0.05 }}
className="rounded-2xl border border-ink-100 bg-white p-6 shadow-sm hover:shadow-md transition"
>
<div className="flex items-center gap-1 text-amber-400">
{Array.from({ length: 5 }).map((_, k) => (
<Star key={k} className="h-3.5 w-3.5 fill-current" />
))}
</div>
<blockquote className="mt-4 text-sm text-ink-700 leading-relaxed">
&ldquo;{t.quote}&rdquo;
</blockquote>
<figcaption className="mt-5 flex items-center gap-3">
<div className="grid h-10 w-10 place-items-center rounded-full bg-brand-100 text-brand-700 text-sm font-semibold">
{initials(t.name)}
{VALUE_PROPS.map((v, i) => {
const Icon = v.icon;
return (
<motion.div
key={v.title}
initial={{ opacity: 0, y: 16 }}
whileInView={{ opacity: 1, y: 0 }}
viewport={{ once: true, margin: '-50px' }}
transition={{ duration: 0.4, delay: (i % 3) * 0.05 }}
className="rounded-2xl border border-ink-100 bg-white p-6 shadow-sm hover:shadow-md transition"
>
<div className="grid h-10 w-10 place-items-center rounded-full bg-brand-100 text-brand-700">
<Icon className="h-5 w-5" />
</div>
<div>
<p className="text-sm font-semibold text-ink-900">{t.name}</p>
<p className="text-xs text-ink-500">{t.role}</p>
</div>
</figcaption>
</motion.figure>
))}
<h3 className="mt-5 text-sm font-semibold text-ink-900">{v.title}</h3>
<p className="mt-2 text-sm text-ink-700 leading-relaxed">{v.body}</p>
</motion.div>
);
})}
</div>
</div>
</section>
apps/web/src/pages/legal/AcceptableUsePage.tsx
+84
View File
@@ -0,0 +1,84 @@
import { Link } from 'react-router-dom';
import { LegalLayout, H2, P, UL } from './LegalLayout';
export default function AcceptableUsePage() {
return (
<LegalLayout title="Acceptable Use Policy" effectiveDate="July 16, 2026">
<P>
This Acceptable Use Policy (&ldquo;AUP&rdquo;) describes what you may not do on or with
eLegal Software. It is part of the{' '}
<Link to="/legal/terms" className="text-brand-600 hover:underline">Terms of Service</Link>.
We wrote it to keep the Service safe and reliable for every firm that depends on it.
Violating this AUP may result in suspension or termination of your account.
</P>
<H2>1. Illegal or harmful use</H2>
<P>You may not use the Service to:</P>
<UL
items={[
'Violate any applicable law or regulation, or advocate or facilitate illegal activity.',
'Violate the rights of any person, including privacy, publicity, and intellectual-property rights.',
'Store or distribute content that is defamatory, fraudulent, or deceptively misleading.',
'Store or distribute child sexual abuse material — we report such material to NCMEC and law enforcement.',
'Threaten, harass, or incite violence against any person or group.',
'Practice law without a license, or assist another person in the unauthorized practice of law.',
]}
/>
<H2>2. Security violations</H2>
<P>You may not:</P>
<UL
items={[
'Access or attempt to access accounts, data, or systems you are not authorized to access.',
'Probe, scan, or test the vulnerability of the Service without our prior written consent.',
'Circumvent or attempt to circumvent authentication, rate limits, plan limits, or other security or usage controls.',
'Upload malware, or use the Service to distribute malware, phishing pages, or command-and-control infrastructure.',
'Interfere with the Service or any user’s access to it, including denial-of-service attacks or resource abuse.',
]}
/>
<H2>3. Abuse of the platform</H2>
<P>You may not:</P>
<UL
items={[
'Send spam or unsolicited bulk messages through the Service, including through invoice or contact features.',
'Misrepresent your identity or affiliation, or impersonate any person or firm.',
'Scrape, harvest, or bulk-extract data from the Service other than your own data through the export feature.',
'Reverse engineer, decompile, or copy the Service or use it to build a competing product.',
'Resell, sublicense, rent, or provide the Service to third parties as a service bureau without our written consent.',
'Share one account among multiple people, or create accounts by automated means.',
'Use the Service to store or transmit material quantities of data unrelated to legal-practice management (for example, as a general-purpose file host).',
]}
/>
<H2>4. Fair use of resources</H2>
<P>
Plans include storage and usage limits. We may apply technical safeguards (throttling,
upload limits) to protect the platform, and will contact you if your usage is far outside
normal patterns before taking action, where practicable.
</P>
<H2>5. Reporting violations</H2>
<P>
To report a violation of this policy, email{' '}
<a href="mailto:abuse@elegalsoftware.com" className="text-brand-600 hover:underline">
abuse@elegalsoftware.com
</a>
. For copyright complaints, use the process in our{' '}
<Link to="/legal/dmca" className="text-brand-600 hover:underline">DMCA Policy</Link>. For
security vulnerabilities, email{' '}
<a href="mailto:security@elegalsoftware.com" className="text-brand-600 hover:underline">
security@elegalsoftware.com
</a>{' '}
— we appreciate responsible disclosure and will not pursue good-faith researchers.
</P>
<H2>6. Enforcement</H2>
<P>
We may investigate suspected violations and may remove content, suspend, or terminate
accounts that violate this AUP. For serious violations we may act without prior notice.
We will preserve and disclose information as required by law or valid legal process.
</P>
</LegalLayout>
);
}
apps/web/src/pages/legal/CookiesPage.tsx
+2 -2
View File
@@ -3,7 +3,7 @@ import { LegalLayout, H2, P, UL } from './LegalLayout';
export default function CookiesPage() {
return (
<LegalLayout title="Cookie Policy" effectiveDate="April 2026">
<LegalLayout title="Cookie Policy" effectiveDate="July 16, 2026">
<P>
This page explains the cookies eLegal Software sets, what they are for, and how to control
them.
@@ -40,7 +40,7 @@ export default function CookiesPage() {
<td className="px-4 py-3">Essential</td>
</tr>
<tr>
<td className="px-4 py-3 font-mono text-xs">elegal:cookie-consent</td>
<td className="px-4 py-3 font-mono text-xs">lawdesk:cookie-consent</td>
<td className="px-4 py-3">
Stored in <span className="font-mono">localStorage</span>, not as a cookie. Records your cookie banner choice
so we don&apos;t ask again.
apps/web/src/pages/legal/DisclaimerPage.tsx
+70
View File
@@ -0,0 +1,70 @@
import { Link } from 'react-router-dom';
import { LegalLayout, H2, P, UL } from './LegalLayout';
export default function DisclaimerPage() {
return (
<LegalLayout title="Legal Disclaimer" effectiveDate="July 16, 2026">
<P>
This disclaimer applies to everything published or provided by eLegal Software — the
application, this website, our blog, free tools, document templates, and support
communications. It is part of the{' '}
<Link to="/legal/terms" className="text-brand-600 hover:underline">Terms of Service</Link>.
</P>
<H2>1. eLegal Software is not a law firm</H2>
<P>
eLegal Software is a software company. We are not a law firm, we are not licensed to
practice law in any jurisdiction, and we do not provide legal advice, legal opinions, or
legal representation. Nothing in the Service — including features, templates, tools, blog
posts, or support answers — constitutes legal advice, and nothing here is a substitute for
the advice of a licensed attorney familiar with your specific situation.
</P>
<H2>2. No attorney–client relationship</H2>
<P>
Using the Service does not create an attorney&ndash;client relationship between you and
eLegal Software, or between your clients and eLegal Software. Communications with our
support team are not privileged. The attorney&ndash;client relationship, if any, exists
solely between attorneys using the platform and their own clients.
</P>
<H2>3. Templates and free tools</H2>
<UL
items={[
'Document templates are general-purpose starting points. They are not tailored to your jurisdiction, facts, or clients, and must be reviewed and adapted by a licensed attorney before use.',
'Calculators and free tools (hourly-rate, profitability, hours tracking) produce estimates from the numbers you enter. They are informational only and are not financial, tax, or legal advice.',
'Blog content is general commentary, current only as of its publication date.',
]}
/>
<H2>4. Professional responsibility remains yours</H2>
<P>
Attorneys and firms using the Service remain solely responsible for their professional
obligations, including competence, confidentiality, conflicts, supervision,
client-communication, record-retention, and trust-accounting duties under the rules of
professional conduct of their jurisdictions. It is your responsibility to satisfy yourself
that using cloud software (including this one) is consistent with those obligations —
many bars publish guidance on reasonable-care standards for cloud services.
</P>
<H2>5. No guarantee of outcomes</H2>
<P>
We make no representation or warranty about the outcome of any legal matter, the accuracy
of any calculation for your purposes, or the fitness of any template or tool for a
particular use. See the{' '}
<Link to="/legal/terms" className="text-brand-600 hover:underline">Terms of Service</Link>{' '}
for warranty disclaimers and liability limits that apply to the Service as a whole.
</P>
<H2>6. Questions</H2>
<P>
If anything here is unclear, contact{' '}
<a href="mailto:legal@elegalsoftware.com" className="text-brand-600 hover:underline">
legal@elegalsoftware.com
</a>
. For advice about your legal rights or obligations, consult a licensed attorney in your
jurisdiction.
</P>
</LegalLayout>
);
}
apps/web/src/pages/legal/DmcaPage.tsx
+89
View File
@@ -0,0 +1,89 @@
import { Link } from 'react-router-dom';
import { LegalLayout, H2, P, UL } from './LegalLayout';
export default function DmcaPage() {
return (
<LegalLayout title="DMCA & Copyright Policy" effectiveDate="July 16, 2026">
<P>
eLegal Software respects intellectual-property rights and expects users to do the same.
This policy describes how copyright owners can report infringing material stored on the
Service, and how users can respond, under the U.S. Digital Millennium Copyright Act
(17 U.S.C. § 512). It is part of the{' '}
<Link to="/legal/terms" className="text-brand-600 hover:underline">Terms of Service</Link>.
</P>
<H2>1. Reporting infringement (takedown notice)</H2>
<P>
If you believe material on the Service infringes your copyright, send a written notice to
our designated agent (Section 4) including all of the following:
</P>
<UL
items={[
'Identification of the copyrighted work you claim is infringed (or a representative list, for multiple works).',
'Identification of the material you claim is infringing and information reasonably sufficient for us to locate it (for example, a URL or document identifier).',
'Your name, mailing address, telephone number, and email address.',
'A statement that you have a good-faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law.',
'A statement that the information in the notice is accurate and, under penalty of perjury, that you are the owner of the copyright or authorized to act on the owner’s behalf.',
'Your physical or electronic signature.',
]}
/>
<P>
Under 17 U.S.C. § 512(f), you may be liable for damages (including costs and
attorneys&rsquo; fees) if you knowingly materially misrepresent that material is
infringing.
</P>
<H2>2. Our response</H2>
<UL
items={[
'On receipt of a valid notice, we will remove or disable access to the identified material promptly and notify the user who stored it.',
'Most content on the Service is private practice data visible only to the firm that uploaded it; we evaluate notices with that context in mind.',
'We will terminate, in appropriate circumstances, users who are repeat infringers.',
]}
/>
<H2>3. Counter-notice</H2>
<P>
If you believe material you stored was removed by mistake or misidentification, you may
send our designated agent a written counter-notice including:
</P>
<UL
items={[
'Identification of the material removed and its location before removal.',
'A statement under penalty of perjury that you have a good-faith belief the material was removed as a result of mistake or misidentification.',
'Your name, address, and telephone number, and a statement that you consent to the jurisdiction of the federal district court for your district (or, if outside the United States, the District of Delaware), and that you will accept service of process from the person who filed the original notice.',
'Your physical or electronic signature.',
]}
/>
<P>
If we receive a valid counter-notice, we will forward it to the original complainant and,
unless they notify us within 10&ndash;14 business days that they have filed a court action,
we may restore the material.
</P>
<H2>4. Designated agent</H2>
<P>
DMCA Agent, eLegal Software —{' '}
<a href="mailto:dmca@elegalsoftware.com" className="text-brand-600 hover:underline">
dmca@elegalsoftware.com
</a>
. Email is the fastest way to reach us and is sufficient for both notices and
counter-notices.
</P>
<H2>5. Non-copyright complaints</H2>
<P>
For trademark, defamation, privacy, or other complaints about content on the Service,
email{' '}
<a href="mailto:abuse@elegalsoftware.com" className="text-brand-600 hover:underline">
abuse@elegalsoftware.com
</a>{' '}
with enough detail for us to locate the material and evaluate the claim under our{' '}
<Link to="/legal/acceptable-use" className="text-brand-600 hover:underline">
Acceptable Use Policy
</Link>
.
</P>
</LegalLayout>
);
}
apps/web/src/pages/legal/DpaPage.tsx
+118
View File
@@ -0,0 +1,118 @@
import { Link } from 'react-router-dom';
import { LegalLayout, H2, P, UL } from './LegalLayout';
export default function DpaPage() {
return (
<LegalLayout title="Data Processing Addendum" effectiveDate="July 16, 2026">
<P>
This Data Processing Addendum (&ldquo;DPA&rdquo;) forms part of the{' '}
<Link to="/legal/terms" className="text-brand-600 hover:underline">Terms of Service</Link>{' '}
between eLegal Software (&ldquo;Processor,&rdquo; &ldquo;we&rdquo;) and the firm using the
Service (&ldquo;Controller,&rdquo; &ldquo;you&rdquo;). It applies whenever we process
personal data contained in your practice data — information about your clients, opposing
parties, witnesses, and other individuals — on your behalf. No separate signature is
required: this DPA is accepted together with the Terms.
</P>
<H2>1. Roles and scope</H2>
<UL
items={[
'You are the controller (or "business" under U.S. state privacy laws) of personal data in your practice data; we are your processor / service provider.',
'Subject matter: hosting and processing of practice data to provide the Service. Duration: the term of your account plus the deletion window below.',
'Nature and purpose: storage, retrieval, display, document generation, invoicing, and transactional email, as directed by you through the Service.',
'Categories of data subjects: your firm’s personnel, clients, and individuals appearing in matter records. Categories of data: identification and contact details, matter records, billing records, and documents you upload (which may include sensitive or privileged material).',
]}
/>
<H2>2. Our commitments as processor</H2>
<UL
items={[
'Instructions — we process practice data only on your documented instructions (using the Service is an instruction), unless required by law, in which case we will inform you unless legally prohibited.',
'No sale — we do not sell personal data, do not share it for cross-context behavioral advertising, and do not retain, use, or disclose it for any purpose other than providing the Service (including the CCPA "service provider" restrictions).',
'No training — we do not use practice data to train machine-learning models.',
'Confidentiality — personnel with access are bound by confidentiality obligations and access data only as strictly needed.',
'Security — we implement the technical and organizational measures in Section 4.',
'Assistance — we provide reasonable assistance with data-subject requests, security incidents, and impact assessments, taking into account the nature of the processing.',
]}
/>
<H2>3. Subprocessors</H2>
<P>
You authorize the following subprocessors. We remain responsible for their performance and
will notify account holders by email at least 14 days before adding or replacing a
subprocessor, giving you the opportunity to object.
</P>
<UL
items={[
'DigitalOcean, LLC (USA) — cloud hosting, managed PostgreSQL database, and object storage for documents.',
'SMTP2GO — transactional email delivery.',
'Stripe, Inc. (USA) — payment processing (your billing data; client practice data is not shared with Stripe).',
'Sentry (Functional Software, Inc., USA) — application error monitoring (practice data is not sent to Sentry).',
]}
/>
<H2>4. Security measures</H2>
<UL
items={[
'Encryption of data in transit (TLS 1.2+) and at rest.',
'Passwords stored only as argon2id hashes; session and reset tokens stored only as SHA-256 hashes.',
'Tenant isolation: every query is scoped to your firm by the access-control layer.',
'Role-based access, rate limiting, login-attempt throttling, and CSRF protection.',
'Audit logging of privileged and destructive actions, retained 24 months.',
'Encrypted backups retained 30 days; infrastructure hosted in SOC 2-audited data centers.',
]}
/>
<H2>5. Security incidents</H2>
<P>
We will notify you without undue delay, and in any event within 72 hours, after becoming
aware of a personal-data breach affecting your practice data, and will provide information
reasonably required for you to meet your own notification obligations, including to
clients under professional-conduct rules.
</P>
<H2>6. Data subject requests</H2>
<P>
If an individual contacts us directly about data controlled by your firm, we will direct
them to you and will not respond substantively except as legally required. The Service
gives you self-serve tools to access, correct, export, and delete practice data.
</P>
<H2>7. Deletion and return</H2>
<P>
You can export all practice data (JSON and documents) at any time. On account deletion,
practice data is permanently removed from active systems immediately and from encrypted
backups within 30 days, after which it is unrecoverable. Billing records are retained as
required by tax law.
</P>
<H2>8. International transfers</H2>
<P>
Processing takes place in the United States. Where personal data protected by EEA/UK law
is transferred, the parties incorporate the European Commission&rsquo;s Standard
Contractual Clauses (Module 2: controller-to-processor) and the UK Addendum by reference,
with you as data exporter and us as data importer.
</P>
<H2>9. Audits</H2>
<P>
Upon written request no more than once per year, we will provide documentation reasonably
necessary to demonstrate compliance with this DPA (security summaries, subprocessor list,
and available third-party attestations of our infrastructure providers). Where law
requires more, we will cooperate with audits conducted with reasonable notice, during
business hours, without disrupting the Service.
</P>
<H2>10. Liability and order of precedence</H2>
<P>
Liability under this DPA is subject to the limitations in the Terms of Service. If this
DPA conflicts with the Terms, this DPA controls with respect to processing of practice
data. Questions:{' '}
<a href="mailto:privacy@elegalsoftware.com" className="text-brand-600 hover:underline">
privacy@elegalsoftware.com
</a>
.
</P>
</LegalLayout>
);
}
apps/web/src/pages/legal/LegalIndexPage.tsx
+83
View File
@@ -0,0 +1,83 @@
import { Link } from 'react-router-dom';
import { PublicLayout } from '@/components/public/PublicLayout';
const DOCS = [
{
to: '/legal/terms',
title: 'Terms of Service',
blurb: 'The agreement that governs your use of eLegal Software — accounts, plans, content ownership, disputes.',
},
{
to: '/legal/privacy',
title: 'Privacy Policy',
blurb: 'What we collect, why, where it lives, who we share it with, and the rights you have over it.',
},
{
to: '/legal/cookies',
title: 'Cookie Policy',
blurb: 'The (few, essential-only) cookies we set and how to control them.',
},
{
to: '/legal/acceptable-use',
title: 'Acceptable Use Policy',
blurb: 'What you may not do on the platform — security, abuse, and fair-use rules.',
},
{
to: '/legal/refunds',
title: 'Billing & Refund Policy',
blurb: 'How subscriptions, renewals, cancellations, refunds, and failed payments work.',
},
{
to: '/legal/disclaimer',
title: 'Legal Disclaimer',
blurb: 'eLegal Software is software, not a law firm — no legal advice, no attorney–client relationship.',
},
{
to: '/legal/dmca',
title: 'DMCA & Copyright Policy',
blurb: 'How to report copyright infringement and how takedowns and counter-notices work.',
},
{
to: '/legal/dpa',
title: 'Data Processing Addendum',
blurb: 'How we process your clients’ data on your behalf — security measures, subprocessors, breach notice.',
},
];
export default function LegalIndexPage() {
return (
<PublicLayout>
<section className="container py-12 max-w-4xl">
<header className="mb-10">
<p className="text-xs uppercase tracking-wider text-brand-600 font-semibold">Legal</p>
<h1 className="mt-2 text-3xl md:text-4xl font-bold text-ink-950 font-display">
Legal center
</h1>
<p className="mt-3 text-ink-600 max-w-2xl">
Everything that governs your relationship with eLegal Software, written in plain
English. Questions about any of it:{' '}
<a href="mailto:legal@elegalsoftware.com" className="text-brand-600 hover:underline">
legal@elegalsoftware.com
</a>
.
</p>
</header>
<div className="grid gap-4 sm:grid-cols-2">
{DOCS.map((d) => (
<Link
key={d.to}
to={d.to}
className="rounded-2xl border border-ink-200 p-5 hover:border-brand-200 hover:bg-brand-50/30 transition group"
>
<h2 className="font-semibold text-ink-950 group-hover:text-brand-700 font-display">
{d.title}
</h2>
<p className="mt-2 text-sm text-ink-600 leading-relaxed">{d.blurb}</p>
</Link>
))}
</div>
</section>
</PublicLayout>
);
}
apps/web/src/pages/legal/LegalLayout.tsx
+8 -14
View File
@@ -1,12 +1,16 @@
import type { ReactNode } from 'react';
import { Link } from 'react-router-dom';
import { AlertTriangle } from 'lucide-react';
import { PublicLayout } from '@/components/public/PublicLayout';
const LINKS = [
{ to: '/legal/privacy', label: 'Privacy Policy' },
export const LEGAL_PAGES = [
{ to: '/legal/terms', label: 'Terms of Service' },
{ to: '/legal/privacy', label: 'Privacy Policy' },
{ to: '/legal/cookies', label: 'Cookie Policy' },
{ to: '/legal/acceptable-use', label: 'Acceptable Use' },
{ to: '/legal/refunds', label: 'Billing & Refunds' },
{ to: '/legal/disclaimer', label: 'Disclaimer' },
{ to: '/legal/dmca', label: 'DMCA' },
{ to: '/legal/dpa', label: 'Data Processing' },
];
export function LegalLayout({
@@ -27,18 +31,8 @@ export function LegalLayout({
<p className="mt-2 text-sm text-ink-500">Effective {effectiveDate}</p>
</header>
<div className="rounded-2xl border border-amber-200 bg-amber-50/40 p-4 mb-8 flex items-start gap-3 text-sm text-amber-900">
<AlertTriangle className="h-4 w-4 flex-none mt-0.5 text-amber-600" />
<p>
<strong className="font-semibold">Template notice:</strong> these documents are
starting points that the eLegal Software team has drafted in plain English. Before you put
them on a production site, have a licensed attorney in your jurisdiction review and
adapt them to your business and applicable law.
</p>
</div>
<nav className="mb-10 flex flex-wrap gap-2">
{LINKS.map((l) => (
{LEGAL_PAGES.map((l) => (
<Link
key={l.to}
to={l.to}
apps/web/src/pages/legal/PrivacyPage.tsx
+122 -61
View File
@@ -3,19 +3,23 @@ import { LegalLayout, H2, H3, P, UL } from './LegalLayout';
export default function PrivacyPage() {
return (
<LegalLayout title="Privacy Policy" effectiveDate="April 2026">
<LegalLayout title="Privacy Policy" effectiveDate="July 16, 2026">
<P>
This policy explains what information eLegal Software collects, why we collect it, and the
choices you have. We aim for plain language. Where a term has a specific legal meaning,
we say so.
This policy explains what information eLegal Software (&ldquo;eLegal Software,&rdquo;
&ldquo;we,&rdquo; &ldquo;us&rdquo;), a software company operating from the United States,
collects, why we collect it, and the choices you have. We aim for plain language. Where a
term has a specific legal meaning, we say so.
</P>
<H2>1. Who we are</H2>
<H2>1. Who we are and our roles</H2>
<P>
eLegal Software (&ldquo;we,&rdquo; &ldquo;us&rdquo;) provides practice-management software for
law firms. When you use the service we are the data controller for the information you
provide about yourself and your firm. For information your firm uploads about its
clients, your firm is the controller and we act as a processor.
eLegal Software provides practice-management software for law firms. For the information
you provide about yourself and your firm (your account), we act as the data controller
(or &ldquo;business&rdquo; under U.S. state privacy laws). For the information your firm
uploads about its clients and matters, <strong>your firm is the controller and we act
strictly as a processor/service provider</strong> on the firm&rsquo;s documented
instructions — see the{' '}
<Link to="/legal/dpa" className="text-brand-600 hover:underline">Data Processing Addendum</Link>.
</P>
<H2>2. Information we collect</H2>
@@ -25,114 +29,171 @@ export default function PrivacyPage() {
'Account information — your name, email address, password (stored only as an argon2id hash), and firm name.',
'Practice data — clients, cases, documents, time entries, invoices, and notes you create or upload.',
'Communications — messages you send through the contact form, support requests, and email replies.',
'Payment information — handled by our payments processor; we never see or store your full card number.',
'Payment information — handled by our payments processor (Stripe); we never see or store your full card number.',
]}
/>
<H3>2.2 Information we collect automatically</H3>
<UL
items={[
'Log data — IP address, user agent, requested URL, response status, and timestamp. Used for security and debugging.',
'Cookies — see the Cookie Policy.',
'Cookies — essential cookies only; see the Cookie Policy.',
'Aggregate usage — anonymous counts of feature use to help us prioritize improvements.',
]}
/>
<P>We do not collect biometric data, precise geolocation, or advertising identifiers.</P>
<H2>3. How we use information</H2>
<UL
items={[
'To operate the service — let you sign in, store your data, generate documents, send invoices.',
'To keep accounts secure — rate limiting, anomaly detection, audit logging of privileged actions.',
'To operate the Service — sign-in, storing your data, generating documents, sending invoices and transactional email.',
'To keep accounts secure — rate limiting, login-attempt throttling, audit logging of privileged actions.',
'To support you — respond to questions and resolve issues you report.',
'To improve — understand what is working and what is not, in aggregate.',
'To comply with law — respond to legal requests, prevent fraud, and enforce our Terms.',
'To improve the Service — understand what is working and what is not, in aggregate.',
'To comply with law — respond to valid legal requests, prevent fraud, and enforce our Terms.',
]}
/>
<P>
We do not sell your information. We do not use your firm&apos;s practice data to train
machine-learning models.
<strong>We do not sell personal information, we do not share it for cross-context
behavioral advertising, and we do not use your firm&rsquo;s practice data to train
machine-learning models.</strong>
</P>
<H2>4. Where data is stored</H2>
<H2>4. Legal bases (EEA/UK users)</H2>
<P>
Your data is stored on infrastructure operated by DigitalOcean in the region you
select. Database backups are encrypted at rest and retained for 30 days. We use TLS for
all data in transit.
Where the GDPR or UK GDPR applies, we process personal data on these bases: performance of
a contract (operating your account), legitimate interests (security, service improvement,
fraud prevention), legal obligation (tax and accounting records), and consent where we ask
for it. Where we act as your firm&rsquo;s processor, the firm determines the legal basis.
</P>
<H2>5. Sharing</H2>
<P>We share information only with the parties listed below, and only as needed to operate the service:</P>
<H2>5. Where data is stored and security</H2>
<UL
items={[
'Hosting and database — DigitalOcean (managed Postgres, app hosting, Spaces object storage).',
'Email — our transactional email provider, used to deliver verification, password resets, and invoices.',
'Payments — our payments processor, for subscription billing.',
'Error monitoring — Sentry, used to capture crashes; we do not send personal practice data to Sentry.',
'Your data is stored on infrastructure operated by DigitalOcean in the United States.',
'All data is encrypted in transit (TLS) and at rest.',
'Passwords are hashed with argon2id; session tokens are stored only as hashes.',
'Access to production systems is restricted to authorized personnel with a need to know, and privileged actions are audit-logged.',
'Database backups are encrypted and retained for 30 days.',
'If we learn of a breach of security affecting your personal information, we will notify you and applicable regulators as required by law, without undue delay.',
]}
/>
<H2>6. Sharing</H2>
<P>
We share information only with the subprocessors listed below, and only as needed to
operate the Service:
</P>
<UL
items={[
'DigitalOcean, LLC (USA) — application hosting, managed database, and object storage.',
'SMTP2GO — transactional email delivery (verification, password resets, invoices, notifications).',
'Stripe, Inc. (USA) — subscription payments.',
'Sentry (Functional Software, Inc., USA) — error monitoring; we do not send practice data to Sentry.',
]}
/>
<P>
We may share information when required by law, valid legal process, or to protect the
rights, safety, or property of eLegal Software, our users, or others.
We may also disclose information when required by law or valid legal process, to protect
the rights, safety, or property of eLegal Software, our users, or others, or in connection
with a merger, acquisition, or sale of assets (in which case this policy continues to
apply to the transferred data). We require legal process appropriate to the data sought,
and where allowed we will notify you of demands for your data so you may seek protective
measures — particularly important where data may be privileged.
</P>
<H2>6. Your rights</H2>
<H2>7. Your rights and choices</H2>
<P>
Depending on where you live, you may have the right to access, correct, port, or delete
your personal information, and to object to or restrict certain processing. You can
exercise most of these rights directly inside the app:
You can exercise most rights directly inside the app, regardless of where you live:
</P>
<UL
items={[
'Access and portability — go to Settings → Export your data to download a JSON file with everything tied to your account.',
'Deletion — go to Settings → Delete account. We will permanently remove your account, your firm, and the firm’s practice data.',
'Access and portability — Settings → Export your data downloads a JSON file with everything tied to your account.',
'Deletion — Settings → Delete account permanently removes your account, your firm, and the firm’s practice data.',
'Correction — edit your profile, clients, cases, time entries, invoices, and documents directly.',
]}
/>
<P>
For requests we cannot satisfy in-app, email <a href="mailto:privacy@elegalsoftware.com" className="text-brand-600 hover:underline">privacy@elegalsoftware.com</a>.
For anything you cannot do in-app, email{' '}
<a href="mailto:privacy@elegalsoftware.com" className="text-brand-600 hover:underline">
privacy@elegalsoftware.com
</a>
. We verify requests using your account email and respond within the time required by
applicable law. We will not discriminate against you for exercising any privacy right.
</P>
<H2>7. Retention</H2>
<H3>7.1 U.S. state privacy rights (California and others)</H3>
<P>
If you live in California or another U.S. state with a comprehensive privacy law (for
example Colorado, Connecticut, Texas, or Virginia), you have the rights to know/access,
correct, delete, and obtain a portable copy of your personal information, and the right to
opt out of sales, sharing for targeted advertising, and certain profiling.{' '}
<strong>We do not sell or share personal information for targeted advertising</strong>, so
there is nothing to opt out of. In the preceding 12 months we collected the categories of
personal information described in Section 2 (identifiers, commercial information,
internet activity, and professional information) for the purposes in Section 3, and
disclosed them only to the service providers in Section 6. You may use an authorized agent
to submit requests; we will verify the agent&rsquo;s authority. California users: we honor
the Global Privacy Control signal, and because we set no advertising or analytics cookies,
no additional browser opt-out is needed.
</P>
<H3>7.2 EEA/UK rights</H3>
<P>
Where the GDPR or UK GDPR applies, you additionally have the rights to object to or
restrict processing and to lodge a complaint with your supervisory authority. If your
personal data is in practice data controlled by a law firm, direct your request to that
firm; we will assist the firm in fulfilling it.
</P>
<H2>8. Retention</H2>
<UL
items={[
'Account and practice data: kept until you delete it, or up to 30 days after account deletion (in encrypted backups), then purged.',
'Audit log: kept for 24 months.',
'Payment records: kept as required by tax and accounting laws (typically 7 years).',
'Server logs: kept for 30 days.',
'Account and practice data — kept until you delete it, or up to 30 days after account deletion (in encrypted backups), then purged.',
'Audit log — kept for 24 months.',
'Payment records — kept as required by tax and accounting laws (typically 7 years).',
'Server logs — kept for 30 days.',
'Contact-form messages — kept for 24 months, then deleted.',
]}
/>
<H2>8. International transfers</H2>
<H2>9. International transfers</H2>
<P>
If you access the service from a country other than where the data is hosted, your
information may be transferred to and stored in that hosting region. We use standard
contractual clauses with our processors where required.
The Service is hosted in the United States. If you access it from elsewhere, your
information is transferred to and stored in the United States. Where required (for
example, for EEA/UK personal data), we rely on Standard Contractual Clauses with our
subprocessors and equivalent safeguards.
</P>
<H2>9. Children</H2>
<H2>10. Do Not Track and Global Privacy Control</H2>
<P>
The service is not directed to children under 16, and we do not knowingly collect
personal information from them.
We set only essential cookies and do no cross-site tracking, so there is no tracking to
disable. We treat enabled Global Privacy Control signals as an opt-out of sale/sharing —
which is our default posture for everyone.
</P>
<H2>10. Changes to this policy</H2>
<H2>11. Children</H2>
<P>
The Service is not directed to children under 18, and we do not knowingly collect personal
information from children. If you believe a child has provided us personal information,
contact privacy@elegalsoftware.com and we will delete it.
</P>
<H2>12. Changes to this policy</H2>
<P>
We will post material changes here and update the effective date. If a change is
significant we will notify account holders by email at least 14 days before it takes
significant, we will notify account holders by email at least 14 days before it takes
effect.
</P>
<H2>11. Contact</H2>
<H2>13. Contact</H2>
<P>
Questions or requests: <a href="mailto:privacy@elegalsoftware.com" className="text-brand-600 hover:underline">privacy@elegalsoftware.com</a>.
For details on the cookies we set, see the{' '}
<Link to="/legal/cookies" className="text-brand-600 hover:underline">
Cookie Policy
</Link>
. For the contract that governs your use of the service, see the{' '}
<Link to="/legal/terms" className="text-brand-600 hover:underline">
Terms of Service
</Link>
.
Questions or requests:{' '}
<a href="mailto:privacy@elegalsoftware.com" className="text-brand-600 hover:underline">
privacy@elegalsoftware.com
</a>
. For the cookies we set, see the{' '}
<Link to="/legal/cookies" className="text-brand-600 hover:underline">Cookie Policy</Link>.
For the contract that governs your use of the Service, see the{' '}
<Link to="/legal/terms" className="text-brand-600 hover:underline">Terms of Service</Link>.
</P>
</LegalLayout>
);
apps/web/src/pages/legal/RefundsPage.tsx
+85
View File
@@ -0,0 +1,85 @@
import { Link } from 'react-router-dom';
import { LegalLayout, H2, P, UL } from './LegalLayout';
export default function RefundsPage() {
return (
<LegalLayout title="Billing & Refund Policy" effectiveDate="July 16, 2026">
<P>
This policy explains how billing works on eLegal Software and when refunds are available.
It is part of the{' '}
<Link to="/legal/terms" className="text-brand-600 hover:underline">Terms of Service</Link>.
All amounts are in U.S. dollars unless stated otherwise. Payments are processed by Stripe;
we never see or store your full card number.
</P>
<H2>1. Plans</H2>
<UL
items={[
'Starter (free) — no charge, with feature and usage limits, including a watermark on generated invoices.',
'Professional (subscription) — billed in advance each billing period, renewing automatically until canceled.',
'Lifetime (one-time) — a single payment for access to the Professional feature set for the operating life of the product, for the purchasing firm only. "Lifetime" refers to the life of the product, not the purchaser; it is not transferable or resellable.',
]}
/>
<H2>2. Renewals and cancellation</H2>
<UL
items={[
'Subscriptions renew automatically at the end of each billing period using your payment method on file.',
'You can cancel anytime from Settings → Billing. Cancellation stops future renewals; your plan remains active until the end of the period already paid.',
'We do not provide partial-period refunds for cancellation, except where required by law.',
]}
/>
<H2>3. Refunds</H2>
<UL
items={[
'First subscription payment — if eLegal Software is not right for you, email us within 14 days of your first charge and we will refund it in full.',
'Renewal payments — non-refundable, except where required by law. Cancel before renewal to avoid a charge; if you forget and contact us within 7 days of an unused renewal (no logins in the new period), we will refund it as a courtesy.',
'Lifetime purchases — refundable in full within 14 days of purchase; non-refundable afterwards.',
'Duplicate or erroneous charges — refunded in full; contact us with the charge details.',
'Refunds are issued to the original payment method and typically appear within 5–10 business days.',
]}
/>
<H2>4. Failed payments and downgrades</H2>
<UL
items={[
'If a renewal payment fails, we notify you by email and Stripe retries the charge automatically over the following days.',
'If payment continues to fail, your firm is moved to the free Starter plan. Nothing is deleted — your data remains intact, and upgrading again restores full access.',
]}
/>
<H2>5. Price changes</H2>
<P>
We may change prices with at least 30 days&rsquo; notice by email. Changes apply from your
next renewal — periods you have already paid for are honored at the price you paid.
</P>
<H2>6. Taxes</H2>
<P>
Prices exclude sales and similar taxes. Where we are required to collect tax, it is added
at checkout based on your billing address. You are responsible for any taxes we are not
required to collect.
</P>
<H2>7. Chargebacks</H2>
<P>
If you believe a charge is wrong, please contact us first at{' '}
<a href="mailto:billing@elegalsoftware.com" className="text-brand-600 hover:underline">
billing@elegalsoftware.com
</a>{' '}
— we resolve billing issues quickly. Initiating a chargeback on a valid charge may result
in account suspension while the dispute is resolved.
</P>
<H2>8. Contact</H2>
<P>
Billing questions and refund requests:{' '}
<a href="mailto:billing@elegalsoftware.com" className="text-brand-600 hover:underline">
billing@elegalsoftware.com
</a>
. Include the email on the account and the approximate charge date.
</P>
</LegalLayout>
);
}
apps/web/src/pages/legal/TermsPage.tsx
+244 -113
View File
@@ -1,134 +1,265 @@
import { Link } from 'react-router-dom';
import { LegalLayout, H2, P, UL } from './LegalLayout';
import { LegalLayout, H2, H3, P, UL } from './LegalLayout';
export default function TermsPage() {
return (
<LegalLayout title="Terms of Service" effectiveDate="April 2026">
<LegalLayout title="Terms of Service" effectiveDate="July 16, 2026">
<P>
These Terms govern your access to and use of eLegal Software. By creating an account or using
the service, you agree to them. If you are using eLegal Software on behalf of a firm, you
represent that you have authority to bind that firm to these Terms.
These Terms of Service (the &ldquo;Terms&rdquo;) are a binding agreement between you and
eLegal Software (&ldquo;eLegal Software,&rdquo; &ldquo;we,&rdquo; &ldquo;us,&rdquo; or
&ldquo;our&rdquo;), a software company operating from the United States. They govern your
access to and use of the eLegal Software websites, applications, and services (together,
the &ldquo;Service&rdquo;). By creating an account, clicking to accept, or using the
Service, you agree to these Terms and to our{' '}
<Link to="/legal/privacy" className="text-brand-600 hover:underline">Privacy Policy</Link>,{' '}
<Link to="/legal/acceptable-use" className="text-brand-600 hover:underline">Acceptable Use Policy</Link>, and{' '}
<Link to="/legal/refunds" className="text-brand-600 hover:underline">Billing &amp; Refund Policy</Link>,
each of which is incorporated by reference. If you do not agree, do not use the Service.
</P>
<P>
<strong>
PLEASE READ SECTION 16 CAREFULLY. IT REQUIRES THAT DISPUTES BE RESOLVED THROUGH BINDING
INDIVIDUAL ARBITRATION AND INCLUDES A CLASS ACTION WAIVER AND A JURY TRIAL WAIVER.
</strong>
</P>
<H2>1. The service</H2>
<H2>1. Eligibility and authority</H2>
<UL
items={[
'You must be at least 18 years old and able to form a binding contract to use the Service.',
'If you use the Service on behalf of a law firm or other organization, you represent and warrant that you have authority to bind that organization, and "you" includes that organization.',
'You may not use the Service if you are barred from doing so under applicable law, or if we have previously suspended or terminated your access.',
]}
/>
<H2>2. The Service; not legal advice</H2>
<P>
eLegal Software is software that helps law firms manage cases, track billable hours, store
documents, and produce invoices. We provide the software; you remain responsible for
the legal work and the relationships with your own clients.
eLegal Software is practice-management software: it helps law firms manage clients, cases,
time tracking, documents, and invoices. eLegal Software is <strong>not a law firm</strong>,
does not provide legal advice, legal opinions, or legal representation, and is not a
substitute for the advice of a licensed attorney. No attorney&ndash;client relationship is
created between you (or your clients) and eLegal Software by use of the Service. You remain
solely responsible for your professional work product, your compliance with the rules of
professional conduct applicable to you, and your relationships with your own clients. See
the{' '}
<Link to="/legal/disclaimer" className="text-brand-600 hover:underline">Legal Disclaimer</Link>{' '}
for details.
</P>
<H2>2. Your account</H2>
<H2>3. Accounts and security</H2>
<UL
items={[
'You are responsible for safeguarding your password and for any activity under your account.',
'Notify us promptly if you suspect unauthorized access.',
'You must provide accurate registration information and keep it current.',
'One person, one account. Sharing accounts is not permitted.',
'You must provide accurate, complete registration information and keep it current.',
'You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account.',
'Notify us immediately at security@elegalsoftware.com if you suspect unauthorized access to your account.',
'One person, one account. Credentials may not be shared, and an account may not be transferred without our written consent.',
'We may require email verification, and may suspend accounts that fail verification or present a security risk.',
]}
/>
<H2>3. Acceptable use</H2>
<P>You agree not to:</P>
<UL
items={[
'Use the service to violate any law or the rights of another person.',
'Attempt to access accounts, data, or systems you are not authorized to access.',
'Reverse engineer, scrape, or interfere with the service or its security features.',
'Upload malware or content that is illegal, infringing, or harmful.',
'Resell or sublicense the service without our written consent.',
]}
/>
<H2>4. Plans, fees, and trials</H2>
<UL
items={[
'Paid plans renew automatically until canceled. You can cancel anytime from billing settings.',
'Fees are charged in advance for each subscription period and are non-refundable except where required by law.',
'We may change pricing with at least 30 days’ notice. Existing paid periods are honored at the prior price.',
'Trial accounts and the free Starter plan have feature and usage limits. Limits may change as the product evolves.',
]}
/>
<H2>5. Your content</H2>
<H2>4. Electronic communications and signatures</H2>
<P>
You retain ownership of everything you upload (clients, cases, documents, time
entries, invoices). You grant us a limited license to host, process, and display that
content solely to operate the service for you. We do not use your content to train
machine-learning models, and we will not disclose it except as described in our{' '}
<Link to="/legal/privacy" className="text-brand-600 hover:underline">
Privacy Policy
</Link>
You consent to receive communications from us electronically (email and in-app notices),
and you agree that all agreements, notices, disclosures, and other communications we
provide electronically satisfy any legal requirement that such communications be in
writing. You agree that clicking &ldquo;Sign up,&rdquo; &ldquo;I agree,&rdquo; or similar
constitutes your electronic signature under the U.S. ESIGN Act and equivalent laws.
</P>
<H2>5. Plans, fees, and taxes</H2>
<UL
items={[
'Paid subscriptions renew automatically until canceled. You can cancel anytime from Settings → Billing; cancellation takes effect at the end of the current billing period.',
'Fees are charged in advance and are non-refundable except as stated in the Billing & Refund Policy or as required by law.',
'We may change pricing with at least 30 days’ notice. Price changes apply from your next renewal; paid periods already invoiced are honored at the prior price.',
'Fees are exclusive of taxes. You are responsible for applicable sales, use, and similar taxes, other than taxes on our income.',
'The free Starter plan and any trials have feature and usage limits that may change as the product evolves.',
]}
/>
<H2>6. Your Content</H2>
<P>
&ldquo;Your Content&rdquo; means everything you or your users submit to the Service —
clients, cases, documents, time entries, invoices, notes, and other materials. You retain
all ownership rights in Your Content. You grant us a limited, non-exclusive, worldwide,
royalty-free license to host, store, reproduce, process, transmit, and display Your Content
solely (a) to provide and secure the Service for you, (b) to comply with law, and (c) as
you otherwise direct (for example, emailing an invoice to your client). This license ends
when Your Content is deleted from the Service, subject to limited backup retention
described in our Privacy Policy.
</P>
<UL
items={[
'We do not sell Your Content and we do not use it to train machine-learning models.',
'You represent and warrant that you have all rights necessary to submit Your Content and that it does not violate law or the rights of any person.',
'You are responsible for maintaining independent copies of any content you are professionally obligated to retain. The Service is not an archival or records-retention system of record.',
]}
/>
<H2>7. Confidentiality and privileged material</H2>
<P>
We understand that Your Content may include information that is confidential, privileged,
or subject to professional ethics rules. We protect it with encryption in transit and at
rest, firm-scoped access controls, and audit logging, and our personnel access it only as
strictly necessary to operate the Service or respond to a support request you initiate. Our
handling of personal data on your behalf is further governed by the{' '}
<Link to="/legal/dpa" className="text-brand-600 hover:underline">Data Processing Addendum</Link>.
</P>
<H2>8. Our intellectual property</H2>
<P>
The Service — including its software, design, text, graphics, logos, and trademarks — is
owned by eLegal Software or its licensors and is protected by intellectual-property laws.
Except for the limited right to use the Service in accordance with these Terms, no rights
are granted to you. If you send us feedback or suggestions, you grant us a perpetual,
irrevocable, royalty-free license to use them without restriction or compensation.
</P>
<H2>9. Acceptable use</H2>
<P>
Your use of the Service must comply with our{' '}
<Link to="/legal/acceptable-use" className="text-brand-600 hover:underline">Acceptable Use Policy</Link>.
Violations may result in suspension or termination. Copyright complaints are handled under
our{' '}
<Link to="/legal/dmca" className="text-brand-600 hover:underline">DMCA Policy</Link>.
</P>
<H2>10. Third-party services</H2>
<P>
The Service interoperates with third-party services we use to operate it (for example,
payment processing and email delivery). Your use of a third-party service is governed by
that party&rsquo;s own terms, and we are not responsible for third-party services we do not
control.
</P>
<H2>11. Suspension and termination</H2>
<UL
items={[
'You may stop using the Service and delete your account at any time from Settings → Delete account.',
'We may suspend or terminate your access immediately if you materially breach these Terms, create legal exposure for us or other users, fail to pay fees when due, or if we reasonably believe your account presents a security risk. Where practicable, we will notify you and give you an opportunity to cure.',
'We may discontinue the Service (or any feature) with at least 60 days’ notice; in that case we will refund any prepaid fees covering the period after discontinuation.',
'Upon termination, you may export your data for 30 days; afterwards it is permanently deleted from active systems, and from backups within the following 30 days.',
'Sections that by their nature should survive termination (including 6, 8, and 12–17) survive.',
]}
/>
<H2>12. Disclaimers of warranties</H2>
<P>
THE SERVICE IS PROVIDED &ldquo;AS IS&rdquo; AND &ldquo;AS AVAILABLE.&rdquo; TO THE MAXIMUM
EXTENT PERMITTED BY LAW, ELEGAL SOFTWARE AND ITS SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESS
OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE,
NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. WE
DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT DATA
WILL NEVER BE LOST. YOU ARE RESPONSIBLE FOR APPROPRIATE BACKUP OF DATA YOU ARE OBLIGATED TO
RETAIN. SOME JURISDICTIONS DO NOT ALLOW CERTAIN WARRANTY DISCLAIMERS, SO SOME OF THE ABOVE
MAY NOT APPLY TO YOU.
</P>
<H2>13. Limitation of liability</H2>
<P>
TO THE MAXIMUM EXTENT PERMITTED BY LAW: (A) IN NO EVENT WILL ELEGAL SOFTWARE BE LIABLE FOR
ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR
LOST PROFITS, REVENUES, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES; AND (B) OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO
THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (i) THE AMOUNTS YOU PAID US IN
THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM AND (ii) ONE HUNDRED U.S. DOLLARS
(US $100). THESE LIMITS APPLY REGARDLESS OF THE THEORY OF LIABILITY AND EVEN IF A REMEDY
FAILS OF ITS ESSENTIAL PURPOSE. THEY DO NOT LIMIT LIABILITY THAT CANNOT BE LIMITED BY LAW.
</P>
<H2>14. Indemnification</H2>
<P>
You will defend, indemnify, and hold harmless eLegal Software and its officers, directors,
employees, and agents from and against any claims, damages, liabilities, costs, and
expenses (including reasonable attorneys&rsquo; fees) arising out of or related to (a) Your
Content, (b) your use of the Service in violation of these Terms or applicable law, (c)
your provision of legal or other professional services to your clients, or (d) your
violation of any third party&rsquo;s rights.
</P>
<H2>15. Governing law</H2>
<P>
These Terms and any dispute arising out of or relating to them or the Service are governed
by the Federal Arbitration Act, applicable U.S. federal law, and the laws of the State of
Delaware, United States, without regard to conflict-of-laws rules. Subject to Section 16,
the state and federal courts located in Delaware will have exclusive jurisdiction, and you
consent to personal jurisdiction and venue there.
</P>
<H2>16. Dispute resolution: arbitration agreement and class action waiver</H2>
<H3>16.1 Informal resolution first</H3>
<P>
Before filing a claim, you and we agree to try to resolve the dispute informally: send a
written notice describing the dispute to legal@elegalsoftware.com (or, if from us, to your
account email). If the dispute is not resolved within 60 days of the notice, either party
may proceed under this Section.
</P>
<H3>16.2 Binding arbitration</H3>
<P>
Except as provided in 16.4, any dispute, claim, or controversy arising out of or relating
to these Terms or the Service will be resolved by <strong>binding individual arbitration</strong>{' '}
administered by the American Arbitration Association (AAA) under its Consumer Arbitration
Rules (or Commercial Arbitration Rules for business accounts). The arbitration will be
conducted in English, by a single arbitrator, and may proceed remotely by videoconference
or, if an in-person hearing is required, in Wilmington, Delaware, or another mutually
agreed location. The arbitrator&rsquo;s award is final and may be entered in any court of
competent jurisdiction. The Federal Arbitration Act governs this Section.
</P>
<H3>16.3 Class action and jury trial waiver</H3>
<P>
<strong>
YOU AND ELEGAL SOFTWARE EACH WAIVE THE RIGHT TO A JURY TRIAL AND THE RIGHT TO PARTICIPATE
IN A CLASS ACTION, CLASS ARBITRATION, OR ANY OTHER REPRESENTATIVE PROCEEDING.
</strong>{' '}
Disputes will be arbitrated only on an individual basis. If this class waiver is found
unenforceable as to a particular claim, that claim (and only that claim) will proceed in
court, and the remainder will be arbitrated.
</P>
<H3>16.4 Exceptions</H3>
<UL
items={[
'Either party may bring an individual claim in small-claims court.',
'Either party may seek injunctive or other equitable relief in court to protect intellectual property or confidential information.',
]}
/>
<H3>16.5 Opt-out</H3>
<P>
You may opt out of this arbitration agreement (but not the rest of these Terms) by
emailing legal@elegalsoftware.com with the subject &ldquo;Arbitration Opt-Out&rdquo; from
your account email within 30 days of first accepting these Terms. Opting out has no effect
on any other provision.
</P>
<H2>17. General terms</H2>
<UL
items={[
'Export and sanctions — you may not use the Service in violation of U.S. export-control or sanctions laws, and you represent that you are not located in an embargoed country or on any U.S. restricted-party list.',
'Force majeure — neither party is liable for delay or failure caused by events beyond its reasonable control.',
'Assignment — you may not assign these Terms without our written consent; we may assign them in connection with a merger, acquisition, or sale of assets.',
'Severability — if any provision is held unenforceable, it will be modified to the minimum extent necessary, and the remainder stays in effect.',
'No waiver — a failure to enforce a provision is not a waiver of the right to enforce it later.',
'Entire agreement — these Terms, together with the policies they incorporate, are the entire agreement between you and us regarding the Service and supersede prior agreements on that subject.',
'Notices — we may provide notices by email to your account address or in-app; legal notices to us go to legal@elegalsoftware.com.',
]}
/>
<H2>18. Changes to these Terms</H2>
<P>
We may update these Terms from time to time. Material changes take effect no sooner than
30 days after we post them and notify account holders by email, except changes required by
law or addressing new features, which may take effect immediately. Continued use of the
Service after the effective date constitutes acceptance. If you do not agree to a change,
stop using the Service and delete your account before the change takes effect.
</P>
<H2>19. Contact</H2>
<P>
Questions about these Terms:{' '}
<a href="mailto:legal@elegalsoftware.com" className="text-brand-600 hover:underline">
legal@elegalsoftware.com
</a>
.
</P>
<H2>6. Confidentiality of your clients’ data</H2>
<P>
We understand that information about your clients is confidential, often privileged,
and subject to professional ethics rules. We treat it accordingly: encrypted in transit
and at rest, scoped to your firm by our access-control system, and accessible to our
staff only as strictly needed to operate the service or respond to a support request
you initiate.
</P>
<H2>7. Suspension and termination</H2>
<UL
items={[
'You may terminate your account anytime from Settings → Delete account.',
'We may suspend or terminate accounts that violate these Terms, present a security risk, or are inactive for an extended period (we will notify you first where reasonably possible).',
'On termination, you can export your data for up to 30 days; after that, your data is permanently deleted from our active systems and from backups within the following 30 days.',
]}
/>
<H2>8. Service availability</H2>
<P>
We aim for high availability but do not guarantee uninterrupted service. We schedule
maintenance during low-traffic windows and post notices for significant changes.
</P>
<H2>9. Disclaimer</H2>
<P>
The service is provided &ldquo;as is.&rdquo; To the maximum extent permitted by law, we
disclaim all warranties, express or implied, including merchantability, fitness for a
particular purpose, and non-infringement. eLegal Software is software, not a substitute for
professional legal judgment. Use of the service does not create an attorney–client
relationship between you and eLegal Software.
</P>
<H2>10. Limitation of liability</H2>
<P>
To the maximum extent permitted by law, our total liability for any claim arising out
of or related to the service is limited to the amount you paid us in the 12 months
preceding the event giving rise to the claim. We are not liable for indirect,
incidental, special, consequential, or punitive damages, or for lost profits or
revenues.
</P>
<H2>11. Indemnification</H2>
<P>
You agree to indemnify and hold us harmless from any claims, losses, or expenses
arising out of (a) your use of the service in violation of these Terms or applicable
law, or (b) your content.
</P>
<H2>12. Changes to the Terms</H2>
<P>
We may update these Terms from time to time. Material changes take effect 30 days after
we post them, or sooner if required by law. Continued use after the effective date
means you accept the updated Terms.
</P>
<H2>13. Governing law and disputes</H2>
<P>
These Terms are governed by the laws of the jurisdiction stated in your account region
without regard to conflict-of-laws rules. The parties will attempt to resolve any
dispute in good faith. Where that fails, disputes will be resolved by the courts
located in that jurisdiction unless applicable law requires otherwise.
</P>
<H2>14. Contact</H2>
<P>
Questions about these Terms: <a href="mailto:legal@elegalsoftware.com" className="text-brand-600 hover:underline">legal@elegalsoftware.com</a>.
</P>
</LegalLayout>
);
}