Privacy Policy

Effective Date: March 26, 2026

Introduction

TrialIntel ("we," "us," or "our") operates a litigation intelligence platform that helps users organize, analyze, and understand legal documents. This Privacy Policy describes how we collect, use, store, and protect your information when you use our mobile application and related services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please discontinue use of the Service.

1. Information We Collect

We collect the following categories of information when you use TrialIntel:

  • Account Information: Your name, email address, password (stored as a bcrypt hash — never in plain text), and optional bar number if you are a licensed attorney.
  • Case Data: Case names, case numbers, descriptions, and team member assignments you create within the Service.
  • Documents: Files you upload, including PDFs, Word documents, images, and audio files. These are stored in Microsoft Azure Blob Storage on your behalf.
  • Extracted Content: Text extracted from your documents using Azure Document Intelligence (OCR), and AI-generated analysis including entity extraction, timeline events, legal claims, and document classifications produced by Azure OpenAI Service (GPT-4o).
  • Chat History: Messages you exchange with our AI assistant within the Service.
  • Usage Data: Your subscription tier, feature usage counters, and login timestamps used for account management and service improvement.

We do not use third-party analytics services, advertising networks, or tracking cookies. We do not track you across other websites or applications.

2. How We Use Your Information

We use the information we collect solely to provide and improve the Service. Specifically, this includes:

  • Processing and extracting text from documents you upload
  • Providing AI-assisted case analysis, semantic search, and chat functionality
  • Managing your account, subscription, and billing
  • Detecting and preventing fraud, abuse, or unauthorized access
  • Improving the reliability, performance, and features of the Service
  • Communicating with you about your account, subscription, and material changes to this policy

We do not sell your personal information. We do not use your data for advertising. We do not share your data with third parties except as described in Section 3 below.

3. AI Processing and Third-Party Services

To deliver the Service, we use the following Microsoft Azure services to process your data:

  • Azure Document Intelligence: Optical character recognition (OCR) to extract text from uploaded documents.
  • Azure OpenAI Service (GPT-4o): AI analysis, entity extraction, timeline generation, chat responses, and other intelligence features. Operated under a Data Processing Agreement that explicitly prohibits Microsoft from using your data to train AI models.
  • Azure AI Search: Semantic indexing and vector search across your case documents.
  • Azure Service Bus: Asynchronous job queuing for document processing pipelines.

We do not use non-Microsoft third-party AI providers for processing your case data. All AI processing occurs within the Microsoft Azure ecosystem under enterprise privacy commitments.

4. Data Storage and Security

Your data is stored and protected using the following technical measures:

  • Azure PostgreSQL: Relational data (accounts, cases, metadata) stored with encryption at rest using Azure-managed keys.
  • Azure Blob Storage: Document files stored with server-side encryption (AES-256) at rest.
  • Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher.
  • Password Security: Passwords are hashed using bcrypt with 12 rounds before storage. We never store your password in plain text.
  • Authentication: JWT-based authentication with short-lived access tokens and rotating refresh tokens to limit exposure in the event of token compromise.

5. Data Retention

We retain your data for the following periods:

  • Account data: Retained while your account is active.
  • Deleted cases: Soft-deleted cases are permanently purged from all systems after 30 days.
  • Extracted text and AI analysis: Retained for 365 days from extraction date.
  • Chat history: Retained for 365 days.
  • Audit logs: Retained for 2 years for security and compliance purposes.
  • Authentication tokens: Refresh tokens expire after 30 days of inactivity.

When you delete your account, all associated data — including documents, cases, chat history, and extracted content — is permanently deleted within 30 days. This process is irreversible.

6. Application Monitoring

We use Azure Application Insights for error tracking, performance monitoring, and service reliability. This service collects technical telemetry such as crash reports, error messages, API response times, and device/OS information.

Azure Application Insights does NOT collect the content of your documents, chat messages, or any case data. Monitoring data is used exclusively for maintaining and improving service reliability.

7. Your Rights

You have the following rights with respect to your personal data:

  • Access: You may request a copy of the personal data we hold about you.
  • Export: You may export your cases and documents as a ZIP archive from within the app.
  • Deletion: You may delete your account at any time from Settings > Delete Account within the app. This permanently removes all your data.
  • Correction: You may update your account information at any time within the app settings.
  • GDPR/CCPA Requests: If you are located in the European Union or California, you may have additional rights under GDPR or CCPA. To exercise these rights, contact us at privacy@trialintel.com.

We will respond to verifiable data rights requests within 30 days.

8. Attorney-Client Privilege Notice

TrialIntel is a technology tool and is not a law firm. We do not provide legal advice, and no attorney-client relationship is formed by use of the Service.

AI-generated analysis produced by the Service may not be protected by attorney-client privilege. Pursuant to the holding in United States v. Heppner (S.D.N.Y. 2026), communications with and outputs from AI systems operated by third-party cloud providers may not qualify for privilege protection under the traditional attorney-client privilege framework.

Professional and Firm tier subscribers may designate individual documents as "Privileged" within the app. Documents marked as Privileged are excluded from AI processing. You are responsible for making appropriate privilege designations and consulting with qualified legal counsel regarding privilege protection strategies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the application and update the Effective Date at the top of this policy. Your continued use of the Service after receiving notice of changes constitutes your acceptance of the updated policy.

For non-material changes (such as clarifications or formatting updates), we may update the policy without separate notification beyond the updated Effective Date.

10. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:

privacy@trialintel.com