CounselAudit privacy & data

we collect your name, email address, organization name, and role within your organization.

When you create an account, we collect your name, email address, organization name, and role within your organization.

We receive only a transaction reference, subscription status, plan type, and the last four digits of your card for display purposes.

Such responses may include the email address of the individual responding and any name or other details they include in their message, the network (IP) address from which a submission is made (which we use to prevent abuse)

We collect information about how you interact with the Service, including pages visited, features used, and actions taken.

the email addresses and network (IP) addresses of law-firm personnel

any names or other details they include in their messages

To provide and maintain the Service, including invoice parsing, guideline enforcement, and billing analysis

To create de-identified statistics combined across many customers (for example, typical rates by role and region, or how often common billing issues occur) for benchmarks, research, publications, and advisory services.

To ensure security and prevent unauthorized access

Your data is processed solely to provide the CounselAudit.ai service. Nothing more.

CounselAudit.ai may use it for benchmarking, research, publications, advisory services, and improving the service, and it is never used to train AI models.

You control how long we retain your billing documents.

Anthropic deletes API data within 30 days, except where it must keep data longer to comply with law or because its trust and safety systems flagged it (up to 2 years).

Upon termination of the service agreement, we will delete all personal data within 30 days, unless applicable law requires us to retain certain data.

Anthropic does not use API data for model training and deletes it within 30 days, except where it must keep data longer to comply with law or because its trust and safety systems flagged it (up to 2 years).

Data hosted in US-East region (AWS infrastructure)

Vercel Application hosting and edge delivery United States

Standard Contractual Clauses (SCCs) adopted by the European Commission.

We maintain a list of sub-processors. We notify you before adding new ones.

Data Processing Agreement. Available before you ask.

You may request deletion of your account and all associated data at any time by contacting privacy@counselaudit.ai .

Access your personal data

Correct inaccurate data

Request deletion of your data

Export your data in a portable format

Opt out of certain data processing

Withdraw consent for data processing

Access: Confirmation of whether personal data is being processed and a copy of the data.

Erasure: Deletion of personal data where there is no compelling reason for continued processing.

Portability: Provision of personal data in a structured, commonly used, and machine-readable format.

Objection: Cessation of processing where the data subject objects on grounds relating to their particular situation.

We never sell your data.