Privacy Notice

1. Who this notice is about

Two groups. The people who use this software — attorneys and staff at the firms that have accounts — and the people who appear in the case files those users upload, who are not users and have no account here.

There is no open sign-up. An account can only be created from an email address at a domain a firm has already registered here, and the account it creates belongs to that firm. Nobody can sign up from an address that does not match a registered firm domain.

2. What is collected about users

Email address, the firm the account belongs to, and the answers given in the onboarding questionnaire. Every sign-in, terms acceptance, document generation, and document download is recorded with a timestamp and the originating IP address.

3. What is collected about people in case files

Whatever the uploaded documents contain. In practice this includes names, dates of birth, addresses, injuries, medical treatment and findings, and in some source documents Social Security numbers.

None of it is collected from those people directly. It arrives because a firm uploaded a case file, and it is used only to produce that firm's draft document.

4. Who it is shared with

The service providers listed below, each only for the function named. Case content is not sold, is not used to train any AI model, and is not shared with any other firm — every query the application makes is scoped to the firm that owns the case. A filed bill a firm uploads is used only to teach the system that firm's own document format.

5. How long it is kept

The uploaded files that carry the client's medical and personal details are deleted thirty days after they are uploaded: medical records, intake forms, statements and reports, and police reports. That deletion runs on a schedule, removes both the file and its bytes, and cannot be reversed or restored. Keep your own copy of anything you upload: this is not a system of record.

The firm's court papers are kept until the firm deletes the case: the bill of demands and lease and ownership papers it uploads, the Bill of Particulars drafted here with its answers and citations, any finished bill the firm uploads, and the Summons and Verified Complaint. These are documents already exchanged between the parties to the lawsuit.

The Medical Records Summary is deleted thirty days after it is generated, and so is the stored request used to generate a document. A new generation starts a new thirty days.

The details typed into a case (its reference, index number, dates, and expense and earnings figures) are kept while the case's court papers are kept. Once every file and document on a case is gone, they are cleared thirty days after the case was last worked on, meaning the latest of its last edit, upload or generation. What remains is a placeholder reference, the case type, the names of the law firms and attorneys on it, and the dates it was created and cleared, so the firm can see the case existed and when its contents were deleted. Error messages from failed generations, notes kept while fixing them, and the buyer's contact details on a used or expired checkout link are also cleared after thirty days.

Deleting a case removes the case, its generated documents, its citation review, and any uploaded files still remaining, permanently and with no copy kept. A firm can also ask for its files to be removed rather than doing it itself.

When a firm cancels its subscription, all of its cases, files, generated documents and user accounts are deleted thirty days after the cancellation, or sooner if the firm asks. Billing records are kept for accounting with plaintiff names, index numbers and accident dates removed; those details are also removed from billing records thirty days after they are billed.

Database backups are kept for 7 days, so a deleted case entry can remain in a backup for up to a week before it rolls off. Uploaded and generated files are not kept in backups.

The activity log is append-only by design: it cannot be edited, and it is not deleted along with the documents it describes, because a record of how a document was handled is only worth keeping if it outlives the document. It holds no case content. When a firm's data is deleted its log entries are kept but stripped of email and IP addresses.

6. Security

Access is by emailed sign-in link; there are no passwords to leak. Every firm's data is separated at the database level, so one firm's account cannot read another's cases even in the event of an application bug.

7. Contact

Questions about this notice, or a request to delete a firm's files, go to the operator of this software through your firm's usual contact.

Service providers

• Supabase

  Database, authentication, and file storage. Uploaded case files and generated documents are stored here.

• Vercel

  Hosting for the web application. Handles requests; does not store case files.

• Modal

  The compute environment that reads uploaded documents and assembles the generated draft.

• Anthropic

  The language model that reads the uploaded documents and produces the draft text. The documents and the case content drawn from them are sent to it for that purpose. Under Anthropic's commercial terms it may not train its models on them, and it keeps them for no more than 30 days.

• Resend

  Email delivery for sign-in links and notices. Receives email addresses and the notice text. Never document contents.

• Google Workspace

  Our business email. Receives the emails firms send us and our own operational notices. Never document contents.

• Stripe

  Billing. Receives the firm's billing contact and, for each billed document, the matter's plaintiff name, index number and accident date, so the invoice shows what it is for. Never case files. Stripe keeps its copy of each invoice under its own retention; the copy here loses those details thirty days after billing.