Attorney-review draft
Privacy Policy
Draft paid-product privacy policy for EveryAILaw Pro. This extends the public reference-site posture with disclosures for subscription billing, intake data, transactional email, database storage, and hosting.
1. Scope
This Privacy Policy applies to the paid EveryAILaw Pro service at https://app.everyailaw.com/. The public EveryAILaw reference at https://everyailaw.com/ is a separate public reference site.
2. Information We Collect
We collect information you provide during checkout, intake, service delivery, and support, including name, email address, organization, role, jurisdictions of interest, AI system profile, monitoring cadence, notes, support communications, and billing-related account references.
We may also store service records such as Stripe customer ID, subscription ID, subscription status, selected plan, intake submission records, email delivery logs, and operational webhook logs.
3. Payment Information
Payments are processed by Stripe through Stripe-hosted checkout and billing tools. We do not store full payment card numbers on our servers. Stripe may collect payment, billing, fraud prevention, tax, transaction, and identity information according to its role and policies.
4. How We Use Information
We use customer information to provide regulatory monitoring, personalize coverage, process subscriptions, send service emails, maintain billing records, respond to support requests, troubleshoot service delivery, protect the service, and satisfy legal, accounting, security, or operational obligations.
During launch and support review, service emails may be copied to an internal EveryAILaw mailbox for operational monitoring, quality control, and troubleshooting.
5. Service Providers
We currently use the following service providers:
- Vercel for hosting, deployment, and serverless runtime.
- Supabase for server-side database storage.
- Stripe for payment processing and subscription management.
- Resend for transactional email delivery.
These providers process information only as needed to support the paid service, subject to their own applicable terms and privacy commitments.
6. Sources and Public Materials
The regulatory content delivered through EveryAILaw Pro is compiled from publicly available official sources. Customer-specific monitoring preferences and intake responses are not public source materials and are treated as customer service data.
7. AI-Assisted Processing
Portions of the EveryAILaw reference and paid monitoring workflow may be compiled, structured, summarized, or reviewed with assistance from AI tools. Customer data should not be submitted to external AI systems except where approved, necessary to provide the service, and disclosed or governed by appropriate terms. This sentence is a review point for counsel before launch.
8. Cookies and Similar Technologies
The paid app should use only functional technologies needed to operate the service, authentication, billing, security, and preferences. Any analytics, advertising, session replay, or non-essential tracking should be reviewed before use and disclosed here.
9. Retention
We retain customer records while an account or subscription is active and for a reasonable period afterward for billing, support, security, legal, accounting, and audit purposes. Payment details are retained by Stripe according to Stripe's policies. Specific retention periods should be finalized with counsel.
10. Customer Rights
Depending on location, customers may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information. Requests may be sent to legal@everyailaw.com.
11. Security
We use HTTPS, server-side secret storage, Stripe-hosted payment collection, restricted operational access, and database access controls. No internet service can guarantee absolute security.
12. International Users
EveryAILaw Pro may be used by customers in multiple jurisdictions. Data residency, cross-border transfers, GDPR terms, CCPA/CPRA treatment, and any required data processing addendum should be reviewed with counsel before enterprise or EU-heavy launch.
13. Contact
Privacy requests and questions should be sent to legal@everyailaw.com. Service support requests should be sent to support@everyailaw.com.