1. Introduction

CounselAI, Inc. ("CounselAI," "we," "us") is committed to protecting the privacy and security of your data. This Privacy Policy describes how we collect, use, and protect information when you use our platform. Given that our users are law firms, we hold ourselves to the highest standards of data protection.

2. Information We Collect

Account Information: Name, email address, firm name, role, and contact details provided during registration.

Firm Data: Documents, matter information, client records, and other data you upload to the platform. This may include privileged or confidential legal information.

Usage Data: Interaction logs, feature usage, and performance metrics to improve the Service.

Technical Data: Browser type, IP address, device information, and cookies.

3. How We Use Your Information

We use your information to: (a) provide, maintain, and improve the Service; (b) process AI agent requests on your behalf; (c) communicate with you about your account; (d) ensure security and prevent fraud; (e) comply with legal obligations.

4. AI Data Promise

We do NOT use your firm's data to train AI models. Your documents, client information, and work product are never used for model training, fine-tuning, or any purpose beyond processing your specific requests. Data sent to AI providers is processed ephemerally and not retained by those providers.

5. Data Security

We implement industry-leading security measures including: AES-256 encryption at rest, TLS 1.3 encryption in transit, SOC 2 Type II compliance, regular penetration testing, role-based access control, complete audit logging, and tenant-isolated data architecture.

6. Data Sharing

We do not sell your data. We share information only with: (a) AI service providers (OpenAI) for processing your requests, subject to data processing agreements; (b) infrastructure providers necessary to operate the Service; (c) as required by law or valid legal process.

7. Data Retention

We retain your data for as long as your account is active. Upon cancellation, you may export all data within 90 days. After 90 days, data is securely deleted. Audit logs are retained for 7 years to support compliance requirements.

8. Your Rights

You have the right to: access your data, correct inaccurate data, delete your data, export your data in standard formats, restrict processing, and withdraw consent. To exercise these rights, contact privacy@smarter-counsel.com.

9. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (which can be disabled) to understand Service usage. We do not use advertising or tracking cookies.

10. Children

CounselAI is not directed at individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 30 days before they take effect.

12. Contact

For privacy-related questions, contact our Data Protection Officer at privacy@smarter-counsel.com or write to: CounselAI, Inc., 100 Market Street, Suite 300, San Francisco, CA 94105.