1. Who is responsible for your data
Radar Just is a Protocore service. The controller of your data, within the meaning of the General Data Protection Regulation (GDPR), is ATLAS BRIDGE TRADING LTD, a private limited company registered in Cyprus, registration number HE 495085, tax identification code (TIC) 60394076L, registered office at Zenonos Sozou 11, Floor 3, Flat/Office 303, 1075 Nicosia, Cyprus.
For any question about your data, write to us at contact@radarjust.ro.
2. What data we keep
Your account in the app
- The account's email address. You prove it once, when you make your account, with a 6-digit code sent to it, good once and only for a short time. A code is also how you reset a forgotten password; we never ask for one when you sign in.
- The password you choose, if you sign in with your email: we keep only a fingerprint of it (scrypt, with a salt of its own), from which the password cannot be read, and when you set it. We never see it either.
- If you turn on two-step verification (Settings › Security): your authenticator app's key, encrypted, since when it is on, and the fingerprints of the ten recovery codes (we do not keep the codes), with when you used each. We delete them when you turn it off or delete your account.
- If you choose to sign in with Google or with Apple: the identifier that account gives for Radar Just, the email address it gives us (with Apple it may be a private address, if you hid yours), when you connected it and when you last used it. We do not get your password, your contacts or anything else from that account. With Apple we also keep a token from it, encrypted, only to ask it to end the connection when you disconnect it or delete your account. Google and Apple may tell us when you stop using that account for Radar Just, when it is deleted or disabled, when your sessions should end, or when Apple's private address stops forwarding emails; we then disconnect it, sign you out on your devices or stop writing to that address, and keep since when signing in with it, or the address, is on hold. An account that nothing reaches without Apple (no password, no Google, Apple's private address) is deleted when Apple tells us that Apple account was deleted.
- The email address is required for an account: without it you cannot sign in. You change it in Settings › Sign-in methods: once you confirm it is you, we send a code to the new address; while the code is valid (10 minutes), we keep the new address beside the account, and after the change we write to the old address that it changed (with the new address partly hidden) and keep it no longer.
- Your language, your settings (reminders and when they come, the daily summary, the weekly summary, quiet nights, the email notifications: how they come, at what time and which changes they hold, the evening question after a hearing) and your appearance (colours, text size, high contrast).
- The profile you chose (for example lawyer, magistrate or a party to a case): it decides the sources we suggest, how rulings are explained and the fifth tab. You change it in Settings › Profile.
- Your invitation link and how many accounts were made with it. If you made your account with someone's link, we keep whose account invited you. The Protocore team that runs the service sees who invited whom, with the addresses and the days they signed up; whoever invited you sees only how many accounts were made with their link, never which. The link goes when either of the two accounts is deleted. When the team rewards invitations with extra days on a Cabinet plan, we keep, for each account made with a link that follows a case, what was decided: how many days, on whose plan; the team sees it, and the plan's holder sees only the new end date. The row goes with the invited account. If you install the app from the invitation's page, it keeps the code through the install: on Android, the code (only the code) goes through Google Play as a parameter of the install, and the app reads it once; on iPhone, the invitation's link is copied on your phone, and the app reads it only if you tap “Continue” the first time you open it.
- When you tapped “I understand” under this notice, the version of the notice and of the terms you accepted and when (if either changes, the app asks you again), and when we first showed you that the explanations are not legal advice.
- The account's plan: its kind (free, Individual or Cabinet), from and until when it is valid, and the trial; for a Cabinet plan, its seats and the group it covers; extra case packs; where it came from (the online payment or our invoice). For a plan paid online, what the payment tells us: whether it is in its trial, active or cancelled, whether it is paid monthly or yearly, when it renews, whether a card is saved (we never see the card), the next payment's amount and the subscription's number in the payment system, which we keep after the plan ends, as long as the account exists (so a cancellation ends only its own plan and the trial is a single one). For a plan we give on an invoice, a short note of ours (for example the invoice number), which nobody outside the team sees. During the launch period everything is free.
- A plan request sent from the web app (Settings › Plan): the account's address, the plan, how many seats and what you write go to the Protocore team, so it can answer you by email; we do not keep them in the app.
- Your open sessions: for each, when you signed in, when it was last used and where from (the app on an iPhone or on Android, or the browser), without the device's name, its address or its location. You see them in Settings › Signed-in devices, where you can end any other session, or all the others. A session also ends after 30 days without using the app, or when you sign out.
About you: your name, details and phone
- Your name (“Full name”), as you write it. A new account gives it at the “About you” step, after making the account, and goes no further without it. An account made before, with no name, is asked for it once, at its next visit; if you choose “Later”, we keep that choice and do not ask for it again when you come in, on any device. Without a name you see your cases as before, but to make a shared group, invite anyone, make a join link, join or ask to join a group, or give a client access, you give it first. You change your name any time in Settings; it goes with the account.
- Your name is seen by: every member of the shared groups you belong to, viewers included (also beside what you added and wrote there); those you invite to a group, in the invitation email; whoever asks to join through a join link you made; those who decide when you ask to join through a link; the clients you give access to a case, on the case's page and in the emails about it (the invitation, and the note telling them you wrote).
- If you wish, a few details about what you do, by the profile you chose: for a lawyer, the bar, the office or firm, the town and the areas of law; for in-house counsel, the organisation and the town; for a judge or prosecutor, the role and the court (for a prosecutor, the court whose prosecutor's office they serve); for a court clerk, the court and whether you work at the prosecutor's office beside it; for a bailiff, notary, insolvency practitioner or expert, the office and the county (for an expert, also the specialty); for a party to a case, the town; for a journalist, the publication; for a student, the faculty or university. You write them: we do not check them, and we never show them as checked. You add them after your name (the step can be skipped) or any time in Settings › Profile › About you. When you change your profile, only the details the new profile also has remain; the others are deleted then.
- Only you see the details, with one exception: the clients you give access to a case see, beside your name, your office (or organisation) and your bar, if you gave them. The members of your groups do not see them.
- A phone number (Romanian or from another EU country; we keep it in international form). The phone is required, like the email address: a new account confirms one when it is made, and an account made before at its next sign-in to the app; we send a code by SMS that you type in the app, and the account goes no further without it. The code is sent and checked for us by Twilio (section 7), which gets the number and your language for that. A number can be confirmed by one account only; you change the phone in Settings › Profile › About you by confirming the new number the same way, but you cannot delete it: it goes with the account. The SMS code is not a way in. By default nobody sees it. We show it only where you choose: to the members of your groups, all of them, beside your name; to the clients you give access to a case, on the case's page; or both. Once you choose neither, we show it nowhere.
- Your name, details and phone never reach the server's logs, an app or browser notification, a notification email or the admin database, and the details and the phone appear in no email. We use them only as described here. To limit abuse, we also keep on the account when we last sent you a code by SMS and a fingerprint of the number it went to, and for each number, also as a fingerprint, how many codes it got that day.
The access code, while we are testing
While Radar Just is in testing, a new account waits until it enters an access code from us; we keep which code let it in and when. The codes are our records, each with how many accounts it may let in, until when, and a label that may name whom we gave it to; only the Protocore team that runs the service sees them, with the address of the account that used each code. The label never appears in logs or in your export. If you have no code, you can ask for one with the “Ask for access” form (in the web app and on the access code screen): we keep your email address, the profile you chose (“Who are you?”), your message, if you wrote one, the language and when you asked. The Protocore team receives the same data in its admin chats (section 7) and answers from the app: it emails you a single-use access code, or closes the request without one. Only the team sees the request, with the code sent and whether the address already has an account.
What the team does in your account
When the Protocore team that runs the service works on your account — raises its limits, gives it a plan or ends one, blocks or unblocks it, puts it on the list of test accounts or takes it off, or sees your address for a support request — we keep a record: what was done, when, who in the team and why. The record names the account by its number only, never by an address or a name, and only the team that runs the service sees it. Those in the team who only do support see your account without its address (only its first letter and its domain): its state, plan, limits and how much of them you use, how many groups and devices you have and the record above — never your cases, parties or labels — and they cannot change anything. It also notes when someone in the team downloads the list of invitations or of access codes, and when they answer a request for access or decide on a report.
The phones and browsers you get notifications on
- For each phone: an installation identifier, the system (iOS or Android), the notification token issued by Google or Apple, the phone's language, and when we last saw it.
- For each browser you turned notifications on in: the address its push service gave, the two keys we encrypt them with, its language, and when we registered it and last saw it.
- With “Hearing day” on on the phone, on the day of a hearing: the case and the day the phone shows on its Lock Screen and, on an iPhone, the identifier Apple gives that display (a Live Activity), so we can update it when the hearing list moves or the decision comes; on Android we use the notification token above. We delete them the next day. The display shows the time, the court, the panel, the room and your place on the list, never the parties' names.
What you follow and what you saved
- The cases you follow (number and court), with their label, note and star, the reminders chosen for it, and your choice not to get notifications for a case; for a criminal case, what you confirmed about how you're connected to it (section 4) and when.
- The names and subjects you watch, with the court and, for a name, your confirmation of purpose (section 4) and when you gave it; for a company, whether you want to know when it goes into insolvency, and the insolvency cases where we found it as the debtor.
- The searches you run on the portal through Radar Just (the last 100).
- The sources and matters you chose (for example the High Court, civil), the ones you muted and your “Less of this” and “More of this” answers.
- What you saved (decisions and news, updates, cases, searches, lines of a court's day list), your personal groups and their notes, and when you read what was in “To read”.
- The personal reminders you set on a case: the day and time you chose, your note and, if you set it beside an update, which one. We keep them until you delete them, stop following the case, or 30 days after their day.
- The tasks you set yourself on a case you follow: what you have to do, in your words, the day and time you chose, whether it is done, and a comment. We keep them until you delete them or stop following the case.
- Your hearing notes: on a hearing of a case, what happened, what to prepare and who attended, as you write them. Only you see them, and we keep them until you delete them or your account. We also remember for which hearings we sent you the evening question “Note what happened?”, so that we never send it twice.
- Your contracts and powers of attorney register, if you keep it in the app: for each entry its number, date, client (as you write it and, if you pick it, its record in your clients registry), type, linked cases and a note, with the history of its changes, and the numbering by year. Your clients' names are your office's data: we keep them only to show you your register; they never reach notifications or emails, and they go with the entry or with your account.
- Your in/out register, if you keep it in the app: for each document received or sent its number, date, who it comes from or goes to (as you write it), subject, case, who handles it and a note, with the history of its changes. Like the contracts register, it is your office's data: we keep it only to show it to you.
- Your links on a case or a hearing (“Documents and links”): the address and the title you write, and when. We keep only the address, never files, and we never open it: we do not know what is there. What is at the address stays with whoever hosts it.
- Your clients registry, if you use it: for each client, the name (a person or a company), the company's tax code, the email address, the phone and a note, if you enter them, and the cases you linked to it. We never keep a personal numeric code (CNP): a field that holds one is refused. You enter your clients' data and answer for it to them; we keep it for you alone, until you delete it or your account.
- The time you log on a case you follow: the day, how many minutes (or from what time to what time), a short description and whether it is billable, and the timer you started, if you did. We keep them until you delete them or delete your account.
- Fees, expenses and fee statements, if you use them (in the web app only): for a client in your registry, how they pay — the hourly rate, the fixed fee (once or by stages), the monthly retainer or the success fee, as you agreed it (an amount or a percentage, which we never compute), and whether VAT is added —; the expenses you log on a case (the day, the amount, the category, a note, whether it is billable and, if you want, a link to the receipt: only the address, never a file); and the fee statements made for a client over a period (the time, fees and expenses in it, the totals and whether you marked it sent or paid). A fee statement is an informative document, not an invoice: we issue no invoices and send nothing to ANAF. We keep them until you delete them, delete the client (its fees and statements go with it) or delete your account.
- Your calendar link, if you made one.
Shared groups
- A shared group is a list of cases several people follow together, for example the lawyers of one office. We keep its name (the words of whoever made it), its members with each one's role (owner, member or viewer), when they joined, who invited them, and what each chose to get from the group.
- Members see the group's cases with their data, who added each case and who is responsible for it, the group's label and note, the group's hearing notes (what happened, what to prepare, who attended) with who wrote them last, the group's contracts register and in/out register (read by every member, filled in by owners and members, with who last changed an entry, who handles a document and their history), the group's links on cases and hearings (the address and the title, with who added them), its activity (who added or removed a case, joined, left, wrote a note) and the other members: owners and members see names and emails, viewers only names, and all of them see the phone of those who choose to show it to their groups (above, “About you”). A criminal case of the group is seen only by a member who confirmed, themselves, how they are connected to it (section 4). Your own labels and notes, your searches, what you saved and the cases only you follow stay yours.
- A colleague is invited by email address: we send them the inviter's name (never their address) and the group's name, with a link good for 14 days that only the account at that address can use. Until it is accepted we keep the address only masked, with a fingerprint of it. We never tell anyone whether an address has an account.
- A group can also make a join link (24 hours, 7 or 30 days). Whoever opens it asks to join: until let in they see only the group's name and that of who made the link, and whoever decides sees their name and email. A request is kept while the link lasts.
- A group can also follow a party, a subject or a panel; a party is added by a member who confirms why, for the group (section 4). Members see the new cases found, never a criminal one.
- You can leave at any time, and an owner can remove you (we tell you by email); from then on you see and get nothing from the group. When you leave, you can keep the cases you were responsible for, as far as your account allows. The last owner of a group with other members hands it over or deletes it before leaving.
- A group's members can set tasks on its cases: what is to be done (the words of whoever writes it), the day and time a person chose, who does it, whether and when it was done and by whom, and a comment. Every member who sees the case sees them, and the group's activity says who set, gave or ticked off a task, without its words. Whoever has it to do gets a reminder the evening before and on the morning of the day, in the app, on the phone and by email, without the task's words. They stay the group's for as long as the group follows the case; whoever leaves the group no longer has its tasks to do.
- A group can keep the office's clients registry (the name, the company's tax code, the email, the phone, a note and the linked cases): every member sees it, owners and members fill it in, and it stays the group's for as long as the group exists.
- A group's members can comment on the history of one of the group's cases (a ruling, a moved hearing) and mention a colleague, who gets a notification without the comment's words. We keep who wrote, what, when, whether they changed it and whom they mentioned; the comments are seen by the members who see the case, for as long as the group follows the case. The author changes a comment in its first 15 minutes and deletes it at any time; an owner can delete it.
- A group's members can log the time they work on its cases: who worked, the day, how many minutes, a short description and whether it is billable. Each member sees only their own time; the group's owners see everyone's, with totals by case, client, member and month, and can download it, to bill. Each changes and deletes only their own. Logged time stays the group's for as long as the group exists, even when the group no longer follows the case or whoever logged it leaves; if you delete your account, it says “former member” instead of your name.
- A group can keep its clients' fees too: the rates (and each member's own hourly rate), the agreed fees and the fee statements are seen and filled in by the group's owners alone. Members can log expenses on the group's cases, like time: each member sees only their own, the owners see them all. Expenses stay the group's for as long as the group exists (if you delete your account, it says “former member” instead of your name); your own hourly rate is deleted with your account, and it is in your data file.
- What you added and wrote stays the group's, with your name, for as long as the group exists; if you delete your account, it says “former member” instead.
Access for a client
- A lawyer who follows a case, alone or in a shared group, can give a client read-only access to it, by email or with a code shown on screen in the office. We keep which case, who gave it, the title the lawyer chose, whether the client sees the parties' names, until when it lasts, when it was accepted and ended, and the lawyer's messages to the client (one way, at most 1,000 characters each).
- The client sees only that case: its number, court, subject and stage, its hearings, rulings and changes in plain words, the parties' names (unless the lawyer turned them off; then not the court's text either), the lawyer's messages, and what the lawyer chose to show: their name, office and bar (if given) and phone (if shown to clients). The client never sees the lawyer's or the office's notes, labels, groups, colleagues or other clients, nor the lawyer's email address; the lawyer sees only the client's address, masked, and when they accepted, never the client's own cases.
- We email the client the lawyer's name, the case number and the court, never a party's name, the title or a message, with a link good for 7 days that only the account at that address can use (a code shown in the office: 15 minutes, for the first account that uses it, and the lawyer approves it). Until it is accepted we keep the address only masked, with a fingerprint of it. When the lawyer writes, we tell the client by email, with the lawyer's name and without the text; of the case's own changes, as sections 5 and 6 say.
- Access ends when the lawyer ends it, when the client gives it up, on the day the lawyer chose, or once the lawyer (or their group) no longer follows the case. A criminal case is shown to the client only after they confirm, themselves, how they are connected to it (section 4).
Reports
- You can report someone else's words that you see: in a shared group, the group's name, the group's note or label on a case, a comment on a case's history, or a person in the group (their name); as a client, a lawyer's message or what the access says (the title, the lawyer's name and office). We keep who reported, what and where, the reason chosen, what you wrote (if anything), the words reported as they were then and who wrote them, and what the team decided.
- Only the Protocore team that runs Radar Just sees a report; whoever wrote the words is not told who reported them. The team may remove the words reported or block the account that wrote them. The team's admin chats get only the report's number, the kind of words and the reason, never the words, a name or an address.
What we sent you
- Every update and news item sent to your account: what it was, when, whether you read it and whether you removed it from News (we remember it so as not to send it again).
- The reminders, summaries and hearings at the same time that we pointed out.
- The notification emails sent: when, which kind (each change, the daily summary, the weekly summary, a hearing reminder or a personal reminder), how many changes they held and whether they went out; never the address or their text. And the changes waiting for the next email.
- Whether your address rejected our emails for good or you marked one as spam, and when: from then on we stop writing to it (section 6).
The relevance profile
To choose which decisions and news to show you, Radar Just gathers from the cases you follow the area of law (for example civil or criminal), the subject, the articles cited, the court's section, the courts, the procedural stage and which side your party is on (for example claimant or defendant). The profile is computed by fixed rules, recomputed when what you follow changes, stays in your account only (it never reaches the admin database) and goes with the account. We use it for nothing else: not for ads, not for decisions about you.
Every item chosen this way carries a “because…” line that says why we show it. “Less of this” and “More of this” change the weight for your account only; nothing is learned from one account for another.
The private pilot
Radar Just also runs a private pilot, by invitation only, on a channel other than the app. Participants get the details of the data processed in that channel directly, when they are invited.
Contact requests
When you tap “Contact me” on a Protocore service in the Services tab, the Protocore team receives your email address, the service and your message, if you wrote one, so it can answer you. It receives them in its admin chats, through a messaging service (section 7).
Case data
For every followed case, Radar Just reads what the court publishes, from portal.just.ro or, for a case at the High Court of Cassation and Justice, from its own website, www.scj.ro: the number, the court, the subject, the stage, the area of law, the parties (their names and standing), the hearings, the rulings and the court's text, the documents and the appeals. We keep them as published, without changing them, for as long as someone follows them (section 8). A case followed by several accounts is kept once, and an account cannot see who else follows it, with two exceptions: the members of a group see who added the case to the group and who is responsible for it, and a client a lawyer gave access to sees the lawyer's name.
The index of the hearing lists
- To read portal.just.ro as rarely as we can, and to know when something changed in a case, Radar Just keeps an index of the hearing lists the courts publish through the portal's public data service: for each court and day, each line of the list, that is the case number, the sitting (its section and time), the case's time, the category and the stage. The lists carry neither the parties' names nor the case's subject, so neither does the index.
- Once a day we read the day's list and those of the next 7 days, and, going back day by day, the lists of the last 2 years. A past day we read only once. The lists hold every case set for hearing, criminal ones too: of each we keep only what the list says.
- Nobody sees the index: it does not appear in the app, in the export or in the admin database, and it cannot be searched by a name. We use it only to decide when to read a case again and whether a reading we kept is still current.
- A case read or a search made for one account can also answer another account that follows or searches for the same case, or makes the same search, while it is recent enough for that; we then do not read the portal again. What each account sees stays as in section 4.
The courts' hearing lists
For the panels you follow, and for your case's place on the day's list when it has a hearing, we read the court's hearing list. Some courts publish their lists themselves, on their own websites, with the app “Lista ședințe”: sedinte.tribunalularad.ro, sedinte.curteadeapelalbaiulia.ro, sedinte.curteadeapelbrasov.ro, listasedinte.curteapelconstanta.eu, liste.curteadeapelcraiova.eu, sedinte.curteadeapeloradea.ro, sedinte.caploiesti.ro, www.sedinte.tribunalulbotosani.ro and sedinte.curteadeapelsuceava.ro. For those courts we read the list from their website; for the others, and when those websites do not answer, from portal.just.ro. The lists on those websites also show the parties' names and the case's subject: we receive them with the list, but we do not keep them, show them to anyone or send them anywhere. Of each line we keep only what the portal's list also has (the case number, the sitting with its section and time, the case's time, the category and the stage) and the panel's name, for 31 days after the list's day.
Sources
The decisions of the High Court of Cassation and Justice and of the Constitutional Court, and the High Court's notices of new referrals, we read from the Monitorul Oficial as legislatie.just.ro lists them; the other news, from the sources' websites. From them we keep the title, the link, the date and sometimes the source's one-line summary. Never the full text.
Professionals from the Ministry of Justice's lists
- In “Find a professional” we show notaries public, court bailiffs, court experts and authorised translators and interpreters from the lists the Ministry of Justice publishes on data.gov.ro as open data, under the CC BY 4.0 licence (“Notari publici”, “Executori judecătorești”, “Experți judiciari”, “Traducători și interpreți”). The data does not come from the professionals but from these lists.
- We keep only what the Ministry publishes: the name, the professional contact details (the office's address, locality, county, chamber or court of appeal, phone, email), the specialty (for experts) or the languages (for translators) and the authorisation or legitimation number where the list has one; beside them, the list's date and the link to the official dataset.
- The purpose is to help people find an authorised professional. The app shows each list's date, says the details may have changed since, and links to the official list. We build no profiles, link none of this to cases and send none of it to the admin database.
- The app's and the web app's accounts that search there see it. We keep no searches: we only count them, in memory, for the hourly limits.
- If you are on one of the lists, you have the same rights toward us as anyone (section 9), including the right to object: write to us at contact@radarjust.ro and we hide your entry in Radar Just. It stays hidden at every update of the list, and of it we keep only a fingerprint (hash), without your name. We cannot change what the Ministry publishes; for a correction, contact the Ministry.
This website
radarjust.ro uses no cookies, no traffic analytics and no ads.
Security and errors
- The server's technical logs contain only identifiers and counts, never a party's name or the text of a message.
- We use the IP address requests come from to limit abuse (a maximum number of requests); we do not keep it in your account.
3. Why we use it, and on what legal basis
| What we do | Legal basis (GDPR Art. 6(1), unless stated otherwise) |
|---|---|
| Your account and signing in (with a password, Google or Apple, as you choose), followed cases, notifications (on the phone, in the browser and by email), reminders, sources, saved items and calendar in the app: the service you asked for | (b): performance of the contract (the Terms of use) |
| The same, in the private pilot (section 2) | (f): legitimate interest in telling you what happens in the cases you follow |
| Which account invited you, and who invited whom, as the team that runs the service sees it | (f): legitimate interest in knowing how the service spreads and in recognising who recommends it |
| The access code, while we are testing | (f): legitimate interest in testing the service only with those we gave a code to |
| An access request (the “Ask for access” form) | (b): steps taken at your request before you make an account |
| The record of what the team does in your account | (f): legitimate interest in knowing who changed something in an account and why, so that we can answer for it |
| Shared groups | (b): the service you asked for when you made, joined or asked to join a group; for an invited colleague's address and for what stays in a group after someone leaves, (f): the members' legitimate interest in working together |
| Access for a client | (b): the service the lawyer asked for when giving it and the client when accepting it; for the client's address before they accept, (f): the lawyer's and the client's legitimate interest in keeping the client informed |
| Reports of someone else's words, and what we decide about them | (f): the legitimate interest of those who use the groups and clients' access, and ours, in stopping abuse and someone's data exposed without right |
| Your name, your profile's details and your phone (“About you”), shown as section 2 says | (b): the service you asked for: your name introduces you to those you work with (groups, invitations, clients); the details you add yourself, if you wish, and the phone, which is required, you confirm by SMS (the row below), and we show them only as section 2 says |
| The phone confirmed by an SMS code, and the record of the codes sent | (f): legitimate interest in keeping fake accounts and abuse away (a number confirmed by one account only; a limited number of codes per account, per number and per day) |
| Case data, with the parties' names, as the portal publishes it | (f): the legitimate interest of whoever follows the case, and ours in showing them what the court published; for watching a name, also the confirmation of purpose (section 4) |
| The index of the hearing lists, and a reading or a search used for another account | (f): the legitimate interest in reading the courts' public data service as rarely as we can, without loading it, and in knowing when something changed in a case. The index holds no names, and a reading used for another account is seen only by an account that would have seen it reading the portal (section 4) |
| The hearing lists read from the courts' own websites, with the parties' names and the subject received with the list and not kept | (f): the legitimate interest of those who follow a panel or a case in learning the day's list and its changes even when portal.just.ro does not answer, and ours in not loading the portal. The parties' names and the subject are never kept, shown or sent (section 2) |
| Especially sensitive data (for example from family cases) and data about criminal offences that can appear in a case's data, as the court publishes it | For especially sensitive data, also Art. 9(2)(f): the establishment, exercise or defence of legal claims, by whoever follows the case as a party or for one. For data about criminal offences, also Art. 10: we process it only as the court made it public under the law, only while it is on the portal, and only for someone who follows the case by its number (alone or in a group), or was given access to it by a lawyer, and has confirmed, themselves, that they are a party to it, represent a party, or have another legitimate interest in it. It never comes up in a search by name, and we never publish it. The safeguards are in section 4. |
| The Ministry of Justice's lists of professionals (“Find a professional”) | (f): the legitimate interest of those looking for an authorised professional, and ours in showing them the official lists, which the Ministry publishes as open data to be used; only what it publishes (section 2) |
| The relevance profile and the “because…” line | (b): part of the Radar Just service, which picks decisions and news by your cases. The profile is computed for as long as you have the account; you correct what you get with “Less of this” and with the sources you follow (Settings › Sources) |
| Contact requests about a Protocore service | (b): steps taken at your request before a possible contract |
| Security, usage limits, logs and backups | (f): legitimate interest in keeping the service safe and not losing data |
| Answering your requests about your data | (c): legal obligation (GDPR Art. 12–22) |
We make no automated decisions with legal effects on you (GDPR Art. 22). Notifications on a phone or in a browser start only if you allow them there, and you can turn them off at any time. Email notifications are part of the service: they are on from the start, and you turn them off at any time in one tap (section 6).
4. Parties' names and the purpose question
A person's name is personal data, even when a court publishes it. That is why:
- A case's data, with the parties' names, is seen only by an account that follows the case, found it in its own search, belongs to a group that follows it, or was given access to it by a lawyer. Every request is checked: beyond these, an account cannot read another account's cases, searches, lists or saved items, nor a group it does not belong to.
- The parties' names never appear in an app notification, an email or the server's logs. The private pilot's messages may carry them, except a criminal case's (below).
- A name leaves the server only toward the accounts that see the case, as above (not toward a client the lawyer hid the parties from; in the private pilot, through its messaging service), Protocore's admin database, and the backups, which expire. The names in a criminal case reach neither the private pilot's messages nor the admin database (below).
- To watch a person's name, you first answer a question: “A name is personal data. I'll watch it only if it's your own name, a party you represent, or one you have a legitimate interest in. Do you confirm?” We keep the confirmation and when you gave it. Without it, the name is not watched.
- A name nobody watches any more is deleted within a day, together with the cases found only for it.
- Some cases (for example family cases) can hold especially sensitive data. We show it only to those who see the case (above), as the court publishes it, and use it for nothing else. The legal basis is in section 3.
Criminal cases
- You can follow a criminal case only by its number, after confirming that you are a party to it, represent a party, or have another legitimate interest in it. We keep the confirmation and when you gave it. In a group, each member confirms for themselves; so does a client given access to it.
- Searches (by name, by subject or by number), watching a name or a subject, “Similar cases” and “Related cases” never return a criminal case.
- The index of the hearing lists (section 2) holds the criminal cases on the lists too, like every other: the number, the court, the sitting, the time, the category and the stage, with no names and no subject. Nobody sees it, and a criminal case is still seen and followed only as above.
- The parties' names and the court's text in a criminal case are seen only by the account that confirmed, in the app. They never appear in notifications, emails, logs or the admin database, and we never publish them.
- In the private pilot, a criminal case can be followed only from a private conversation, and the messages about it carry neither the parties' names nor the court's text.
- When the court takes the case off the portal (for example it makes it confidential, or 3 years have passed since it ended), we delete it too at our first check after that; we check a followed criminal case at least once a day. We also delete it within a day once nobody who confirmed follows it.
- If your name appears in a criminal case, write to us at contact@radarjust.ro with the case number and the court: we hide it in Radar Just, except from those who are a party to the case or represent one. We keep a fingerprint of the name, never the name. We answer within the time in section 9.
If your name appears in a case
The data comes from portal.just.ro or, for the High Court of Cassation and Justice, from www.scj.ro, where the courts publish it: your name and your standing in the case, alongside the case data. You have the same rights toward us as anyone (section 9), including the right to object. Write to us at contact@radarjust.ro with the case number and the court. We cannot change what the courts publish; for that, contact the court.
5. Notifications
- An app notification says only what happened (for example “Decision: partly granted”), the case number and the court; for a news item, the source and its title.
- Never the parties' names, your label (it may hold a name), the case's subject, the court's text, a personal reminder's note, a task's words, a hearing note, an entry of a register, the description of logged time, a comment's words, the name you watch, a group's name, label or note, or a lawyer's message. You read the rest in the app, once you open it.
- On Android, notifications pass through Google (Firebase Cloud Messaging); on iPhone, through Google and Apple (Apple Push Notification service). They see only what is described above. The same way we update a hearing day on the Lock Screen: the time, the panel and your place on the list, without sound and without the parties' names.
- With quiet nights on, notifications between 22:00 and 07:00 arrive without sound. Reminders never come at night.
- In a browser, notifications come only if you turned them on; its push service (Google, Microsoft, Mozilla or Apple) carries them encrypted and cannot read them.
6. Emails
- By email we send you the code that confirms your address or resets your password, alone in its own email, the notifications about the cases you follow, an email when your password changes or when you connect or disconnect Google or Apple, so you know if it was not you, invitations to groups (with the inviter's name), an email when you are let into a group you asked to join or removed from one (these name the group), a lawyer's invitation to see a case, and a note when the lawyer writes to you (both with the lawyer's name), and, with a plan, an email before your trial ends and before a first payment (with the day and the amount). We send no ads and no newsletters.
- A notification email says as much as a phone notification: what changed (for example “New hearing”), the case number, the court and when we saw the change, with a button that opens the case in the web app. Never the parties' names, your label, the case's subject, the court's text, the name you watch, anything of a group's, or a lawyer's message. About a criminal case we write only to someone who confirmed how they're connected to it (section 4).
- Notification emails come for each change, those of a few minutes gathered into one email, or as one summary a day at the hour you choose (18:00 unless you choose another), only on days with something new. You can choose to get only rulings, new hearing dates and appeals. Court day lists and news from the sources stay in the app; the weekly summary also comes by email, on Mondays. Hearing reminders and personal reminders also come by email, while your emails are on, at their time (a personal reminder without your note).
- They are on from the start, for each change. You change them or turn them off in Settings › Notifications › Email; you also turn them off in one tap, from the link at the end of every email or with your mail app's unsubscribe button.
- An email once sent stays with your email provider, under its rules; you can delete it there.
- If an address rejects our emails for good, or an email is marked as spam, we stop writing to it, and Settings says why. We start them again at your request.
- If you signed in with Apple and hid your address, our emails go through Apple's relay service, which takes them to your address; Apple does not tell us that address.
- Emails go out through Amazon Simple Email Service (Amazon Web Services), from Frankfurt, from noreply@radarjust.ro. Do not reply to it: nobody reads it. Write to us at contact@radarjust.ro.
- When you write to contact@radarjust.ro, the message passes through Amazon Web Services (Amazon SES), where a copy is kept for 30 days, and reaches the team's mailbox. We keep the correspondence for as long as we need to answer you and to show that we acted on a request about your data.
7. Where the data is, and who processes it for us
| Who | What they do | Where |
|---|---|---|
| Amazon Web Services EMEA SARL | Hosts the Radar Just server, Protocore's admin database and the backups; sends the emails and receives the messages sent to contact@radarjust.ro (Amazon SES); serves this website (Amazon S3 and CloudFront). | Frankfurt, Germany (EU). The website, through the CloudFront network. |
| Google (Firebase Cloud Messaging) | Delivers notifications to your phone. | The EU and outside it, including the US. |
| Apple (Apple Push Notification service) | Delivers notifications to iPhones. | The EU and outside it, including the US. |
| Twilio Ireland Limited (Twilio Verify) | Sends by SMS the code you confirm your phone with, and checks it; gets the number and your language for that. | The EU and outside it, including the US. |
| The browsers' push services: Google, Microsoft, Mozilla and Apple | Carry notifications to your browser, encrypted: they cannot read them. | The EU and outside it, including the US. |
| Google (Google Workspace), the team's mailbox | Receives the messages you write to us, forwarded by Amazon SES. | The EU and outside it, including the US. |
| A messaging service | Carries the private pilot's messages (section 2), to invited participants only, and the contact and access requests to the Protocore team's admin chats. | Under the service's rules. |
Protocore's admin database
So that we can run the service, an admin database (a CMS, also on servers in Frankfurt) holds a copy of the account (its language, settings and status; your email address never goes there), the cases, names and subjects followed, the changes in the cases, and the calendar (in which cases show by number only; of the link it keeps only a fingerprint). Your name, profile details and phone, your labels, notes, hearing notes, registers, personal reminders, tasks, logged time, the clients registry, fees, expenses and fee statements, saved items, searches, relevance profile and the index of the hearing lists never go there.
Signing in with Google or Apple
It is optional and your choice: you can always sign in with your email and password. When you sign in with Google or with Apple, you deal with them directly, under their rules: they confirm who you are and give us the identifier and the address in section 2. We send them nothing about you or your cases, and Apple only what it gave us, to end the connection. You disconnect it in Settings › Account › Sign-in methods, and what they keep about it, in your Google or Apple account's settings.
Outside the EU
When Google, Apple, Microsoft or Mozilla process a notification outside the EU, when Twilio sends and checks a code by SMS, when Apple takes an email to your hidden address and when Google keeps the messages sent to contact@radarjust.ro, the transfer relies on the safeguards the GDPR requires (the EU–US Data Privacy Framework or standard contractual clauses).
We do not sell data, we give it to no one for advertising, and we use no tools that track you across apps or websites.
8. How long we keep it
| What | How long |
|---|---|
| Your account and everything in it (what you follow, what you saved, what we sent you) | Until you delete it. |
| Your name, profile details, phone and where it shows, and the “Later” choice | On the account, until you change them or delete your account; a detail the new profile does not have, until you change your profile. Backups and the disk's snapshots keep them until they expire (below). |
| An account that never got past the privacy notice | 30 days. |
| A new account that never confirmed its phone | A day after the last code sent by SMS (or after it was made, if it asked for none); then all of it is deleted. |
| When we last sent you a code by SMS and the number's fingerprint; for a number, as a fingerprint, how many codes it got in a day | On the account, until you confirm the number or delete your account; a number's count, two days. |
| A name or subject nobody watches any more | At most a day, together with the cases found only for it. |
| A case nobody follows any more | 90 days, then it is deleted with its changes. |
| A criminal case | While someone who confirmed how they're connected to it follows it, and while it is on the portal: it is deleted, with its changes, at our first check after it leaves the portal (we check it at least once a day), or within a day once nobody who confirmed follows it. The backups keep it until they expire, like any other data (below). |
| Searches | The last 100, each for at most 90 days. A case found only by a search is kept for as long as the search is, and deleted a day after it. |
| The index of the hearing lists | 2 years from the list's day, then it is deleted, day by day. The backups keep it until they expire (below). |
| The hearing lists read for followed panels and a case's place on the day's list | 31 days after the list's day. The backups keep them until they expire (below). |
| The search count (the hourly limit) | A day. |
| The code sent by email (an address confirmed, a password reset) | Until you use it or it expires. |
| The password's fingerprint | Until you change it or delete your account. |
| The connection to a Google or Apple account | Until you disconnect it or delete your account. |
| The token from Apple, encrypted | Until you disconnect it or delete your account; then we ask Apple to end the connection and delete it (two days at most if it does not answer). |
| The fingerprint of a Google or Apple confirmation once used (so it cannot be used twice) | Until the confirmation expires, at most an hour. |
| The count of codes sent by email, of wrong answers, of wrong passwords, of wrong access codes, of invitations (to a group or to a case) sent and received, and of a lawyer's messages (the per-address limits) | Two days, under a fingerprint of the email address, never the address; it also goes with the account. |
| The record of notification emails sent (when, which kind, how many changes; never the address or the text) | 30 days; it also goes with the account. |
| The lists of case numbers you imported, and what became of each | 30 days; it also goes with the account. |
| A shared group, with its cases, notes, activity and the members who left | For as long as it exists: an owner deletes it. |
| An invitation to a group (the masked address and its fingerprint) | Until it is accepted or expires (14 days). |
| A request to join a group, by a link | While the link lasts (at most 30 days); it also goes with the account. |
| Access for a client, with the lawyer's messages | While it lasts, and 30 days after it ends; an invitation not accepted, until its link expires (7 days; 15 minutes for a code shown in the office). It also goes with the lawyer's account. |
| A report (yours, or about your words) | Until the team decides it, and 90 days after. If you delete your account, the reports you made no longer name you and lose what you wrote in them; one about your words no longer names you as their author. |
| The changes waiting for the next email | Until the email goes out (for the daily summary, at most a day), or until you turn the emails off. |
| Your session in the app | 30 days from the last use, or until you sign out. |
| A phone's notification token, or a browser's subscription | Until you sign out there or delete your account; a browser's, also until you turn notifications off there or its push service says it is gone. |
| A hearing day on the Lock Screen (the case, the day and, on an iPhone, the display's identifier) | Until the next day; and until you close it, turn it off in Settings, sign out on the phone or delete your account. |
| An access code, with who used it and when | While it works, then 90 more days after it stops (ended by us, used up or past its last day). Your use also goes with your account. |
| An access request (the address, the profile, the message, the language, the code sent) | Until we answer it and 30 more days; one we never answered, 90 days from when you sent it. It also goes with the account that has the same address; if you have no account, write to us and we delete it. |
| The record of what the team does in your account | As long as the service runs. When you delete your account, only what was done and when stay, tied to an account number that names no one any more; the reasons are deleted. |
| The Ministry of Justice's lists of professionals | Only the newest list of each kind: we check it every night and replace it whole when the Ministry publishes a new one; an entry no longer on the Ministry's list goes then. Backups and the disk's snapshots keep it until they expire (below). The fingerprint of an entry hidden on request: as long as we show the lists. |
| Backups | The server's nightly copy: 90 days (a replaced version, 30 more). The copy taken before a server update: at most 30 days. The admin database's copies: 180 days (a replaced version, 30 more). In all, at most 7 months. |
| Daily snapshots of the Radar Just server's disk, which also holds the admin database | 14 days. A deleted account can remain in them that long. |
| The record of deletions | The fingerprint (SHA-256 hash) of a deleted account's id, for 400 days, so that a restored backup cannot bring the account back. It holds no email address and nothing else about the account. |
If the Radar Just server's database is restored from its nightly copy or the one taken before an update, the deletions made after that copy are repeated before the server starts again.
9. Your rights, and how to use them
You have the right to know what data we hold about you and to get a copy, to correct it, to delete it, to restrict its use, to take it with you (portability), and to object to its use on the basis of legitimate interest.
- In the app: Settings › My data gives you everything we keep about your account, as a file; Settings › Delete account deletes all of it. You change your name, details and phone (Settings › Profile › About you), labels, notes, what you follow and what you saved directly in the app.
- By email: write to contact@radarjust.ro from your account's address (that is how we know it is you). We answer within one month of receiving the request. Where necessary, given the complexity and number of requests, that can be extended by at most two further months (GDPR, Art. 12(3)); we then tell you within the first month, and why.
- You can complain at any time to a data protection authority. The controller's only establishment is in Cyprus, so the lead supervisory authority (GDPR, Art. 56) is the Commissioner for Personal Data Protection of Cyprus (Office of the Commissioner for Personal Data Protection, Nicosia), dataprotection.gov.cy. You may also complain to the authority of the member state where you live or work, or where you believe the infringement took place (GDPR, Art. 77): in Romania, the National Supervisory Authority for Personal Data Processing, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), dataprotection.ro.
10. Exporting your data
My data gives you a JSON file with everything we keep about your account: the account and settings, your sign-in methods (whether you have a password and since when, the Google or Apple accounts connected, with their identifier and address), your sign-in sessions, the cases you follow with their labels and notes and, for a criminal case, your confirmation, the names and subjects you watch, the sources, matters and laws you follow, your searches, what you saved and your personal groups, the lists of case numbers you imported and what became of each, your personal reminders, your tasks (and, in groups, those you set, have to do or ticked off), your hearing notes (yours and those you wrote in groups) and the hearings we sent you the evening question for, your registers (the numbering and the entries, with their history) and the entries you wrote in groups' registers, the time you logged and your running timer, your comments in groups, your clients registry (and the clients you entered in a group), your clients' fees and those you set in a group, your own hourly rate in groups, your expenses and your fee statements, what we sent you, when and whether you read it, the email notifications' settings (and when you chose what they hold), the offers you closed, “About you” (your name, your phone, when you confirmed it and where it shows, when we last sent you a code by SMS, your profile's details, and whether you chose “Later” when we asked for your name), your groups (your role, settings, confirmations for criminal cases), what you did in them, the invitations and links you sent and your join requests, the access you gave clients (with your messages) or were given by a lawyer, the reports you made (the kind of words, the reason, what you wrote, when and what was decided), the record of emails sent and the changes waiting for the next email, your “Less of this” answers, the relevance profile, your contact requests, the access code that let you in and when, what the team did in your account and when (without who or why), the access requests made with your address, your registered phones and browsers, the hearing days their Lock Screens show now, and what the admin database holds. The calendar link shows only as “set” or “not set”, because it is secret; tokens, browsers' addresses and keys, the codes sent by email and your password or its fingerprint never appear. The file is made when you ask for it, and you download it directly in the app.
11. Deleting your account
Settings › Delete account deletes, on the server and in the admin database, your account with its email address, the password's fingerprint, the connections to Google or Apple, the sign-in sessions and your use of an access code (the code still counts it, without naming you), the access requests made with your address, your settings, what you follow with its labels, notes and the confirmations for criminal cases, your searches, the lists of case numbers you imported, what you saved and your personal groups, your “Less of this” answers, the relevance profile, your contact requests, your reminders, your hearing notes, your registers, the calendar link, the registered phones and browsers, the record of what we sent you, on the phone and by email, your name, profile details and phone, your join requests and your place in shared groups (a group where you were alone is deleted); in the others, what you added and wrote stays, with “former member” instead of your name, and the last owner of a group with other members hands it over first; the access you gave clients, with your messages, and the access lawyers gave you; your name and what you wrote from the reports you made, and your name as the author from the reports about your words; if you asked for access, the request the admins received no longer names you; the record of what the team did in your account loses its reasons. What stays: the public data of cases others also follow, with no trace of you; the fingerprint in the record of deletions (section 8); the backups, until they expire (at most 7 months), and the snapshots of the server's disk, for at most 14 days; and the messages about your contact and access requests the Protocore team received in its admin chats, for as long as it needs them to answer you: they are not on the server, and those older than 48 hours cannot be deleted automatically.
Every step, including deletion by email, is on the Deleting your account page.
12. How we protect it
- Every connection is encrypted (HTTPS).
- We do not keep your password, only its fingerprint (scrypt, with a salt for each password). We refuse passwords under 10 characters and the most used ones. After a few wrong passwords in a row, tries are spaced out. You change your password only with the current one or after a recent proof that it is you; changed or reset, it ends your other sessions and we email you.
- The code by email is not a way in: it confirms your address when you make your account, and it is how you reset your password. Nor is the SMS code: it only confirms your phone. A Google or Apple sign-in is checked on the server, against the keys they publish.
- Every request is checked on the server: what you follow and what you search for, only you see. The cases of a shared group you belong to are seen by its members, and a client you give access to sees that one case only.
- The Radar Just server's disk is not encrypted, nor are the copies kept on it or its snapshots. Instead, the server is private, only its administrators reach it and its snapshots, and the token from Apple is encrypted (AES-256-GCM). Backups are private, and the ones in Amazon S3 are encrypted.
13. Children
Radar Just is made for professionals and is not meant for children.
14. Changes to this notice
The version in force is always on this page, with its number and date. We announce an important change in the app before it applies.
Version 1.45, 23 October 2026.