AdaptLaw Privacy Policy

Effective Date: February 8, 2026 Last Updated: February 8, 2026

Overview

AdaptLaw ("we," "us," "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your data.

AdaptLaw is operated by Adaptensor LLC. By using AdaptLaw at adaptlaw.io, you consent to the practices described in this policy.

1. Information We Collect

Account Information

Name and email address (provided during registration)
Authentication credentials (managed by Clerk)
Subscription tier and billing status

Conversation Data

Questions you submit for legal analysis
AI-generated analysis responses
Graph context data (which legal concepts were matched)
Source toggle preferences per query
Timestamps and processing metadata

Uploaded Documents

Documents you upload for analysis (PDF, DOCX, TXT)
Extracted text content used for analysis
Document metadata (filename, file size, page count)

Usage Data

Features accessed and frequency of use
AI model selections
Number of queries per billing period
Error logs and performance data

Device and Technical Information

IP address
Browser type and version
Operating system
Device type
Referring URL

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. We receive and store only: last four digits of your card, card brand, billing address, and transaction history.

2. How We Use Your Information

We use the information we collect to:

Provide the Service -- Process your legal questions, run analysis, search the knowledge graph, and return results.
Maintain conversations -- Store your chat history so you can revisit past analyses.
Process documents -- Extract text from uploaded files and analyze them against the constitutional framework.
Process payments -- Manage your subscription, process billing, and handle refunds.
Improve quality -- Analyze usage patterns to improve the analysis framework, knowledge graph, and user experience. We do not use your conversations or documents to train AI models.
Provide support -- Respond to your questions, troubleshoot issues, and communicate important service updates.
Enforce terms -- Detect and prevent abuse, fraud, and violations of our Terms of Service.
Legal compliance -- Meet legal obligations, respond to lawful requests, and protect our rights.

3. Third-Party Services

We use the following third-party services to operate AdaptLaw:

Stripe (Payments)

Processes subscription payments and manages billing.
Receives your payment information directly.
Privacy policy: https://stripe.com/privacy

Clerk (Authentication)

Manages user registration and login.
Stores authentication tokens and session data.
Privacy policy: https://clerk.com/legal/privacy

AI Providers (Analysis)

When you submit a question or upload a document, the text is sent to the AI provider you selected:

Google (Gemini) -- Default model for all tiers. Privacy: https://ai.google.dev/terms
Anthropic (Claude) -- Available on Pro and Developer tiers. Privacy: https://www.anthropic.com/privacy
OpenAI (GPT-4o) -- Available on Developer tier or via BYOK. Privacy: https://openai.com/privacy

The text of your questions and document extracts is sent to these providers for analysis. We do not control how these providers handle data after receipt. Please review their respective privacy policies.

Analytics

We may use privacy-respecting analytics to understand usage patterns. We do not use invasive tracking or sell data to advertising networks.

4. BYOK (Bring Your Own Key) Privacy

When you use your own API key:

Your API key is transmitted directly to the selected AI provider over HTTPS.
Your API key is never stored, logged, cached, or persisted by AdaptLaw.
Your key exists in memory only for the duration of the single request.
We have no access to your third-party AI provider account or usage.
API requests made with your key are subject to the AI provider's data handling policies, not ours.

5. Document Privacy

Uploaded documents are stored on AdaptLaw's servers and associated with your conversation.
Text extracted from documents is sent to the selected AI provider for analysis.
Documents are not shared with any third party other than the AI provider processing the analysis.
You can delete your documents and conversations at any time through the Service.
We do not use your uploaded documents for training, marketing, or any purpose other than providing analysis to you.

6. Data Retention

| Data Type | Retention Period | |-----------|-----------------| | Account information | Until you delete your account | | Conversations | Until you delete them (Free tier: 30 days; Pro/Developer: unlimited) | | Uploaded documents | 90 days after upload, then automatically deleted | | Payment records | As required by law (typically 7 years for tax records) | | Usage analytics | 12 months (aggregated, anonymized) | | Server logs | 30 days |

After account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

Access -- Request a copy of the personal data we hold about you.
Export -- Download your conversations and account data in a portable format.
Delete -- Request deletion of your account and associated data.
Correct -- Update or correct inaccurate personal information.
Object -- Object to certain processing of your data.
Restrict -- Request that we limit how we use your data.

To exercise any of these rights, contact us at privacy@adaptlaw.io. We will respond within 30 days.

8. Children's Privacy

AdaptLaw is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected data from a child under 18, we will delete that information promptly. If you believe a child under 18 has provided us with personal data, please contact us at privacy@adaptlaw.io.

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption in transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
Encryption at rest: Our managed database provider (Neon PostgreSQL) encrypts stored data at the disk level. In addition, third-party AI provider keys you save under Settings → Integrations (BYOK) are encrypted at the application layer with AES-256-GCM before being written to the database; after you save a key, only the last four characters are ever returned to your browser.
Browser-local data: Some practice-management features (cases, contacts, tasks, time entries, notes, drafts) currently store data in your browser's localStorage. This data is not transmitted to our servers and is not encrypted by us — it is protected only by your operating system's user-account boundary. Clearing your browser data will delete this information. Do not use shared or public computers for privileged client work.
Access controls: Access to user data is restricted to authorized personnel on a need-to-know basis.
Secure authentication: User accounts are protected by Clerk with industry-standard security practices (multi-factor authentication available; passwords are never stored on our servers).
Regular review: We regularly review and update our security practices, including periodic Open Trust transparency audits published in this repository.

No system is perfectly secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials and the device you use to access AdaptLaw.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know: You can request details about the categories and specific pieces of personal information we have collected.
Right to delete: You can request deletion of your personal information.
Right to opt out of sale: We do not sell your personal information. There is nothing to opt out of.
Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at privacy@adaptlaw.io or call us with the contact information below.

11. International Users

AdaptLaw is operated from the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or by posting a notice on the Service at least 30 days before the changes take effect. Your continued use of AdaptLaw after the effective date constitutes acceptance of the updated policy.

13. Contact

For questions about this Privacy Policy or to exercise your data rights:

Email: privacy@adaptlaw.io
General support: support@adaptlaw.io
Website: https://adaptlaw.io