Privacy Policy

We collect information you provide directly to us, such as when you:

• Create an account or profile
• Use our AI-powered demand letter generation services
• Upload documents or case information
• Contact us for support
• Subscribe to our newsletter or updates

This may include your name, email address, law firm information, case details, and uploaded documents.

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate AI-powered demand letters and legal analysis
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze trends and usage

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• TLS encryption for all data in transit (HSTS enforced)
• Encryption at rest provided by our database and hosting providers (Supabase, Vercel)
• Per-account row-level security in the database, so one account cannot read another account's cases
• Bearer-token authentication on every API route that touches account data
• Client and party identifiers replaced with pseudonym tokens before any document text is sent to the AI model

We do not hold a SOC 2 report or a HIPAA attestation, and we do not claim end-to-end encryption; see our security page for exactly what is and is not in place.

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and prevent fraud
• With the service providers that run the platform, each bound by its own terms: Anthropic (AI model provider; receives pseudonymized document text and letter drafts; its commercial terms prohibit training on customer content), Supabase (database and authentication, United States), Vercel (hosting), Stripe (payments, when checkout is enabled) and Resend (transactional email)

Uploaded source files are processed in memory to extract text and are not stored as files. The pseudonymized text extracted from them is stored with each generated letter version so the letter can be regenerated or audited. Cases, letter versions and account details are kept until you delete the case or delete your account (Settings, Delete Account), which removes them from our database. Our AI model provider does not retain inputs for training.

You have the right to:

• Access and update your personal information
• Request deletion of your data
• Opt-out of marketing communications
• Request data portability
• Withdraw consent at any time

To exercise these rights, please contact us at demandaipro@gmail.com

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and provide personalized content. You can control cookie settings through your browser preferences.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

If you have any questions about this Privacy Policy, please contact us: