Privacy Policy

1. Introduction

DepoDigest.ai (the “Service”) is operated by Atty Finders (“Atty Finders,” “we,” “us,” or “our”). The Service provides AI-assisted analysis of legal deposition transcripts. This Privacy Policy applies to information collected through the Service, including our website, web application, and related services.

If you do not agree with this Policy, please do not use the Service. Capitalized terms not defined here have the meaning given in our Terms of Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, password (hashed), and any profile details you choose to provide.

2.2 Uploaded Content

You may upload deposition transcripts and related PDF documents (“Uploaded Content”). Uploaded Content may contain sensitive personal information about deponents, parties, witnesses, and third parties. You are solely responsible for ensuring you have the legal authority to upload such content.

2.3 Payment Information

Payments are processed by Stripe, Inc. We do not store your full payment card number. We receive limited information from Stripe such as the last four digits of your card, billing ZIP code, transaction IDs, and subscription status.

2.4 Usage Data

We collect technical information about how you use the Service, including IP address, browser type, device identifiers, pages viewed, features used, timestamps, referring URLs, and error logs.

2.5 Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and measure usage. You can control cookies through your browser settings, but some features may not function without them.

3. How We Use Information

• To provide, operate, and maintain the Service, including processing Uploaded Content;
• To generate AI summaries, chronologies, citations, and other analytical output;
• To process payments, manage subscriptions, and track credit balances;
• To communicate with you about your account, security, and product updates;
• To provide customer support and respond to inquiries;
• To detect, prevent, and address fraud, abuse, security, or technical issues;
• To improve the Service through aggregated, de-identified analytics;
• To comply with legal obligations and enforce our Terms.

4. AI Processing

To generate analyses, your Uploaded Content is transmitted to third-party AI model providers, which currently include Google (Gemini models) and OpenAI (GPT models), accessed through the Lovable AI Gateway. These providers process the content solely to return results to us and, per their stated policies as of the date above, do not use API content submitted in this manner to train their models. Their policies may change; you should review them directly.

AI output is generated by statistical models and may contain errors, omissions, or “hallucinations.” You must independently verify all output against the source document before relying on it for any legal, financial, or professional purpose. See our Terms of Service for additional disclaimers.

5. How We Share Information

We do not sell your personal information. We share information only as described below:

• Service providers: hosting and infrastructure (including Supabase and Cloudflare), payment processing (Stripe), AI model providers (as described above), email delivery, and analytics providers, each subject to contractual confidentiality and security obligations.
• Legal compliance: when required by law, subpoena, court order, or governmental request, or to protect our rights, property, or safety, or that of our users or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• With your consent: for any other purpose disclosed at the time of collection or with your authorization.

6. Data Retention

We retain account information for as long as your account is active. Uploaded Content and generated analyses are retained until you delete them or close your account. Transaction and billing records are retained as required by tax, accounting, and legal obligations (typically up to seven years). Backups and logs may persist for a limited period after deletion.

7. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS), encryption at rest, role-based access controls, and database row-level security. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal information, and to withdraw consent. Residents of the European Economic Area, United Kingdom, California, and other jurisdictions with comparable laws (e.g., GDPR, UK GDPR, CCPA/CPRA) may have additional rights. To exercise these rights, contact us at the address below. We may need to verify your identity before responding.

California residents have the right to request information about the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it, and to request deletion or correction. We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined under the CCPA.

9. Legal Materials & Confidentiality

Depositions and other legal materials may contain information that is privileged, confidential, subject to a protective order, or otherwise sensitive. You represent and warrant that you are authorized to upload such materials and that doing so does not violate any court order, ethical obligation, contract, or law. We treat Uploaded Content as confidential and limit internal access to personnel with a legitimate need. Nothing in this Policy creates an attorney-client relationship between you and Atty Finders.

10. Children's Privacy

The Service is not directed to anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. International Transfers

We are based in the United States, and information we process may be stored and accessed in the United States or other countries that may have data protection laws different from those in your jurisdiction. Where required, we use appropriate safeguards such as standard contractual clauses for cross-border transfers.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the Service. The “Last updated” date at the top of this Policy indicates when it was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us

Questions, requests, or complaints about this Policy or our data practices? Contact us at privacy@attyfinders.com or through attyfinders.com.