Privacy Policy
This notice explains how AttorneyCore handles personal data for law firms, staff members, clients, prospects, and visitors across U.S. market deployments.
Who this applies to
This policy applies to people who use the platform, request a demo, receive firm-generated communications, upload documents, collaborate through the client portal, or otherwise interact with AttorneyCore.
Information we collect
- Account data such as name, email address, password hash, firm name, role, and machine or device identifiers used for licensing and fraud prevention.
- Operational data such as matters, clients, tasks, billing records, documents, notes, activity logs, audit trails, and support communications.
- Technical data such as IP address, browser or app metadata, crash diagnostics, session identifiers, and security events.
How we use information
- To provide the platform, authenticate users, enforce licensing, and secure accounts and firm data.
- To monitor system health, investigate misuse, prevent fraud, and maintain business continuity.
- To deliver support, product notices, legal updates, and service communications.
- To improve the software, measure feature reliability, and understand how customers use the service.
US privacy disclosures
For U.S.-facing processing, we disclose categories of personal information, business purposes, retention practices, and rights workflows in line with applicable federal and state privacy requirements. We do not describe personal information as sold, and customers should contact us if they need a state-specific notice, contract term, or data processing addendum.
Sensitive legal information
The platform may process confidential legal material, including client communications and case records. Customers are responsible for confirming that their use of the software matches professional conduct obligations, court rules, retention duties, and privilege requirements that apply to their matters.
AI-assisted features
Some workflows use AI-assisted drafting, classification, analysis, or summarization. These features are currently powered by OpenAI: when a firm uses an AI-assisted workflow, the relevant matter, client, and case details entered into that workflow are sent to OpenAI's API for processing. Customers must review outputs before relying on them in legal work. The platform is a tool for professionals and does not replace legal judgment, supervision, or firm review procedures.
Sharing and service providers
We may use infrastructure and service providers for hosting, database operations, storage, analytics, monitoring, authentication, and customer support. We may also disclose information when required by law, court order, or to protect the safety, rights, and security of users, firms, and the service.
Retention
We retain information for as long as needed to provide the service, enforce contracts, preserve security logs, resolve disputes, satisfy professional or legal obligations, and maintain backup and recovery operations. Specific retention periods may differ by deployment, contract, or customer instruction.
Security
We use administrative, technical, and organizational safeguards intended to protect personal data and confidential firm records. No software environment can promise absolute security, and firms remain responsible for access control, user supervision, endpoint security, and the lawful handling of privileged material.
Your rights
- U.S. users may have rights that include access, deletion, correction, and appeal or opt-out rights depending on state law.
- We may need to verify identity and authority before actioning a request.
International data handling
Data may be processed in locations where our service providers operate. Where required, we use contractual and operational safeguards designed to protect cross-border transfers.
Contact
Privacy and data rights requests can be sent to support@attorneycore.io.