Privacy Policy

1. Who We Are

EvidenceDesk AI ("we," "us," or "our") is a document organization service operated at evidencedeskai.com. We are not a law firm and we do not provide legal advice. This Privacy Policy explains how we collect, use, and protect information when you use our service.

2. Information We Collect

2a. Information you provide directly

• Name, email address, and phone number (from the intake form)
• Case details: case type, county, state, court date, and case description
• Payment information (processed by Stripe — we do not store card numbers)
• Case documents you upload (police reports, transcripts, photos, audio files, etc.)
• For attorney pilot requests: first name, last name, firm name, bar number, and practice area

2b. Information collected automatically

• Server logs (IP address, browser type, pages visited, timestamps) — retained for up to 30 days
• Analytics data collected by Vercel hosting infrastructure (aggregated, not personally identifiable)

3. How We Use Your Information

• To process your intake form and create your case record
• To organize and summarize your uploaded documents using AI
• To generate and deliver your attorney-ready packet
• To process payment via Stripe
• To send you transactional emails (payment confirmation, upload link, delivery notice)
• To notify you when your packet is ready
• To communicate with you about your case or support requests
• For fraud prevention and service security

We do not sell your data. We do not use your case documents to train AI models. We do not share your documents with third parties except as required to operate the service (Supabase for storage, OpenAI for document processing, Stripe for payment).

4. Third-Party Service Providers

We use the following third-party services to operate EvidenceDesk AI:

Each provider has its own privacy policy and security controls. We select providers that offer data processing agreements (DPAs) appropriate for handling sensitive documents.

5. Data Retention

• Raw uploaded files: Deleted automatically 14 days after your final packet is delivered. You must keep your own copies of all original documents.
• Final packet (PDF/ZIP): Deleted automatically 30 days after delivery.
• Case record (intake data, status): Retained for 90 days after completion for support and dispute resolution, then deleted.
• Payment records: Retained as required by Stripe and applicable tax law (typically 7 years).
• Attorney pilot applications: Retained for 1 year, then deleted.

6. Security

We implement the following security measures:

• All files are encrypted at rest using AES-256 (via Supabase Storage)
• All data is encrypted in transit using TLS 1.2+
• Unique per-case upload links prevent cross-case access
• Admin access requires a secure token
• No client case documents are used for AI model training

No system is perfectly secure. You upload documents at your own risk. We recommend keeping copies of all original files.

7. Your Rights

You may request:

• A copy of the personal data we hold about you
• Correction of inaccurate information
• Deletion of your data (subject to legal retention obligations)
• That we stop sending marketing communications (we generally only send transactional emails)

To exercise these rights, contact us at the address below. We will respond within 30 days.

8. Children

EvidenceDesk AI is not directed to anyone under the age of 18. We do not knowingly collect information from minors. If you believe a minor has submitted information to us, contact us immediately for deletion.

9. Changes to This Policy

We may update this policy periodically. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after a policy update constitutes acceptance of the revised terms.

10. Contact

Questions about this Privacy Policy or your data?