ocoaiOne Click Operation AIPhilippine Bar & law practiceSign inOpen the app

Privacy Policy

Last updated: 1 November 2026

This policy explains how ocoai (“we”) collects and uses personal information when you use ocoai.in, our Bar review and legal practice tools for the Philippines. We process personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

1. What we collect

  • Account details: your name, email address and password (stored only as a hash), or your Google sign-in identifier if you use Google.
  • What you type or upload: questions, essay answers, notes, flashcards, docket entries, hearing dates, notarial register entries, MCLE records, pleadings and files you place in the Vault.
  • Voice: when you use a voice feature (Live Examiner, Recitation, Hearing Prep), your browser converts speech to text; we receive the text, not a recording.
  • Google sign-in: if you choose “Continue with Google”, Google shares your name, email address, profile picture and a Google account identifier with us. We do not receive your Google password.
  • Usage and device data: pages and tools you open, the questions and searches you submit, how long a feature took to answer, errors, feature counts used for daily limits, browser and device type, your browser’s time zone and language (used to estimate your country; we do not look up your location from your IP address), and how you found us (the referring site and campaign tags in the link you clicked). We also record when a “Try this next” suggestion is shown, clicked or closed.
  • Guest mode: if you use ocoai without an account, your saved items stay in your own browser’s local storage and are not sent to us except for the request you are making.

2. Why we use it

  • To give you the service you ask for: answers, essay marking, drafts, reminders and saved work.
  • To keep your account secure, enforce fair daily limits and prevent abuse.
  • To understand how ocoai is used (for example, which tools are popular and where people get stuck), to suggest a useful next tool, and to see which campaigns bring visitors. Only authorised ocoai administrators can see this information, and every administrator action on an account is logged.
  • To fix errors and improve the tools. We do not sell your personal information and we do not use your documents to advertise to you.

Our lawful bases are your consent, the performance of our agreement with you, and our legitimate interest in running a secure service (Sections 12 and 13 of RA 10173).

3. Client and privileged information

Lawyers remain responsible for their duties of confidentiality under the Code of Professional Responsibility and Accountability. Upload only what you need, remove client names where you can, and use a password-locked Vault folder for sensitive files.

4. AI processing

To generate answers, the text you submit (and, for the Vault, the file you ask about) is sent to our AI model provider, Google (Gemini API), only to produce your answer. Answers are checked against the official legal texts ocoai holds; citations that cannot be verified are removed.

5. Sharing

We share personal information only with service providers who help us run ocoai (hosting, database, email, AI processing), under contracts that require them to protect it, or when required by law or a lawful order of a Philippine court or the NPC. Some providers process data outside the Philippines; we require them to give it the same level of protection.

6. Retention

We keep your account data while your account is active. When you delete your account, we delete your account, saved work and Vault files, except records we must keep by law. Copies in routine backups are overwritten in the normal backup cycle. Usage and activity records are deleted automatically after 12 months.

7. Your rights

Under RA 10173 you have the right to be informed, to access, to object, to rectify, to erasure or blocking, to data portability, to damages, and to file a complaint with the National Privacy Commission (privacy.gov.ph). To use these rights, email support@ocoai.in or delete your account at ocoai.in/delete-account.

8. Security

We use encrypted connections (HTTPS), hashed passwords, access controls and optional password locks on Vault folders. No system is perfectly secure; if a personal data breach affects you, we will notify you and the NPC as the law requires.

9. Children

ocoai is meant for law students, reviewees and lawyers aged 18 and above.

10. Changes and contact

We will post any changes here and update the date above. Questions: support@ocoai.in.

Privacy Policy | ocoai