Privacy Policy

Paralegal Power-Up (“we,” “us”) provides an AI workspace for law firms. This policy explains what we collect, how we use it, and the commitments we make about your data. Because the product is in active beta, we may update this policy; we’ll change the date above when we do.

Information we collect

Account information you provide when you or your firm sign up — your name, work email, firm name, and role. Firm content you submit to generate work product — documents, prompts, and the drafts the AI produces. Usage information — basic logs needed to operate and secure the service. We use cookies only for authentication (keeping you signed in), not for advertising.

How we use it

To provide the service, generate the work product you request, route items for attorney review, maintain your firm’s audit trail, secure the platform, and communicate with you about your account or pilot.

We do not train AI on your client content

Your firm’s content is used to produce your output — nothing more. We do not use it to train or fine-tune AI models, and we do not sell it or share it for advertising. Content is sent to our AI provider only to generate your requested output, under agreements that prohibit training on it.

Data isolation

Each firm’s data is isolated from every other firm’s at the database level using row-level security — not just in the interface. Users only ever see their own firm’s workspace, data, and team.

Service providers (subprocessors)

We rely on a small set of vendors to run the service: Supabase (database, authentication, file storage), Vercel (hosting), our AI model provider (accessed to generate output, bound by no-training terms), and Resend (transactional email). Each processes data only to provide their function.

Security

We use encryption in transit, database-enforced access controls, scoped secrets, and an audit trail on reviews. No system is perfectly secure, but security is central to how the product is built.

Retention & deletion

We keep your content for as long as your firm’s workspace is active. On request, we will delete your firm’s content and account data, subject to any legal retention obligations.

Confidentiality & privilege

We treat firm content as confidential. You remain responsible for your own professional obligations, including attorney-client privilege and client consent for the material you submit.

Your choices

You can access, correct, export, or delete your data by contacting us. If you were invited to a firm workspace, your firm administrator also manages your access.

Changes

We’ll post any changes here and update the date above. Material changes will be communicated to firm administrators.