Privacy Policy

1. Overview

ParalegalMate (“ParalegalMate,” “we,” “us”) provides an AI-powered legal operating system exclusively to licensed attorneys and their law firms. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website and our platform (the “Service”).

Key commitments in plain English:

• We do not sell your data. Ever.
• We do not use your matter documents, chats, or drafts to train third-party foundation models.
• We preserve attorney-client privilege. Your matters are isolated to your firm.
• Your data is stored and processed in the United States.
• You can export or delete your data at any time.

2. Who We Are

ParalegalMate is operated from the United States. For any privacy question or request, contact us at legal@paralegalmate.com.

3. Information We Collect

3.1 Account information

Name, email address, firm name, state bar number (if provided), billing information, and authentication data.

3.2 Matter content

Documents, evidence, exhibits, chats, and drafts you upload or generate within a matter. This content is encrypted at rest and is scoped to your firm and the users you authorize.

3.3 Usage data

Product analytics (features used, performance metrics, error reports) to operate and improve the Service. We avoid collecting analytics that include matter content.

3.4 Device & log data

IP address, browser type, operating system, referring URLs, timestamps, and similar technical metadata.

4. How We Use Information

• To provide, maintain, and improve the Service.
• To process billing and subscription management.
• To communicate with you about your account, support, and service updates.
• To detect, investigate, and prevent security incidents and misuse.
• To comply with legal obligations.

5. How We Share Information

We share information only with the following categories of recipients, and only as necessary:

• Sub-processors (cloud infrastructure, AI model providers, payment processors, analytics) who process data on our behalf under contractual data-protection obligations. A current list of sub-processors is maintained in our Data Processing Agreement and provided upon request.
• Your firm. Users within the same firm account may have access to shared matters and firm-wide settings based on role.
• Legal obligations. We may disclose information if required by law, court order, or to protect rights and safety.
• Business transfers. In the event of a merger, acquisition, or asset sale, data may transfer with appropriate notice.

We do not sell personal information.

6. Matter Content & Attorney-Client Privilege

We recognize that matter content may be subject to attorney-client privilege, work-product protection, and professional confidentiality obligations. We treat all matter content as privileged by default. We do not access matter content except as strictly necessary to operate the Service, comply with law, or at your authorized request (e.g., technical support).

7. AI Model Processing

The Service uses large language models operated by third-party providers. We configure these providers to operate under zero-retention, no-training terms for customer content. Prompts and matter content sent for AI processing are used only to generate your requested output and are not retained by the provider for model improvement.

8. Data Retention

We retain account information for the life of your account and for a reasonable period thereafter to comply with legal and financial obligations. Matter content is retained for the life of your account and is deleted within 30 days of account termination, except where longer retention is required by law.

9. Your Rights

Subject to applicable law, you may:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your personal information.
• Export your data in a portable format.
• Object to or restrict certain processing.

To exercise any right, email legal@paralegalmate.com. We will respond within 30 days.

10. California Privacy Rights (CCPA/CPRA)

California residents have the rights above, plus the right to know the categories of personal information collected and shared, the right to correct, the right to delete, and the right to opt out of “sales” or “sharing” (we do not sell or share for cross-context behavioral advertising). We do not discriminate against users who exercise their rights.

11. International Users

ParalegalMate is designed for users in the United States. Data is stored and processed in the U.S. If you access the Service from outside the U.S., you consent to the transfer of your information to the U.S. for processing.

12. Security

We implement industry-standard security measures, including TLS 1.3 encryption in transit, AES-256 encryption at rest, multi-factor authentication, role-based access control, and matter-scoped data isolation. Our SOC 2 Type II audit is in progress and targeted for completion in Q3 2026. No system can guarantee absolute security; we continuously improve our controls.

13. Children

The Service is not directed to anyone under 18. We do not knowingly collect personal information from minors.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice at least 30 days before they take effect for existing customers.

15. Contact Us

Privacy questions, requests, or concerns: legal@paralegalmate.com