Privacy Policy

Draft placeholder pending review by the client's counsel.

What we hold. Account details (name, email, role), the documents uploaded to each matter, text extracted from them, search questions and results, and an activity log.

Service providers (all in the United States): Supabase (database, file storage and sign-in), Vercel (application hosting), Anthropic (AI summaries, only on matters where AI is turned on; zero data retention, no training), Resend (sign-in and invitation emails only; no document content).

No tracking. No analytics, advertising, session replay or third-party scripts.

Security. Invite-only accounts, required authenticator-app 2-step sign-in, per-matter access control, encryption in transit and at rest, and an append-only activity log.

Personal data in documents. Social Security numbers found in extracted text are masked in search results and AI input; the original files are kept unchanged as evidence.

Retention and deletion. Data is kept for the life of the matter and deleted on the matter admin's written instruction. Provider backups may keep deleted data for a limited period before it is overwritten.