AILaw INC. PRIVACY POLICY

Last Updated: March 2026

AILaw INC. (the "Company") is committed to maintaining robust privacy protections for its users. The company provides legal software of an easy-to-use platform integrating case management, form auto-filling, lawyer and client portals. Our Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use and safeguard the information you provide to us and to assist you in making informed decisions when using our Service.

For purposes of this Agreement, "Service" refers to the Company's software platform used by law firms and authorized personnel for case management, document automation, client collaboration, and AI-assisted workflow support. The Service can be accessed via our website or through our mobile application. The terms "we," "us," and "our" refer to the Company. "You" refers to you, as a user of Service. By accepting our Privacy Policy and Terms of Use, you consent to our collection, storage, use and disclosure of your information as described in this Privacy Policy.

"Customer Content" refers to case files, uploaded documents, personal information, attorney work product, AI prompts, and AI-generated outputs provided by or on behalf of a customer through our Service.

I. INFORMATION WE COLLECT

We collect Personal Information and Customer Content as described in this Privacy Policy. We also collect device, cookie, IP address, and usage information, and we may create de-identified or aggregated information from that data. Depending on applicable law, certain device, cookie, IP address, and usage data may be treated as Personal Information.

Personal Information includes, but is not limited to, name, gender, age, marital status, immigration status, immigration related documents, country of origin, nationality, information related to government-issued papers, educational and working experience, past and present address, telephone and fax number, IRS documents, email address etc.

1. Information collected via Technology

To activate the Service you do not need to submit any Personal Information other than your email address. Depending on how the Service is used, customers may submit or upload Personal Information and Customer Content, including case files, documents, prompts, and outputs. In an effort to improve the quality of the Service, we track information provided to us by your browser or by our mobile application when you view or use the Service, such as the website you came from (known as the "referring URL"), the type of browser you use, the device from which you connected to the Service, the time and date of access, and other information that does not personally identify you. We track this information using cookies, or small text files which include an anonymous unique identifier. Cookies are sent to a user's browser from our servers and are stored on the user's computer hard drive. Sending a cookie to a user's browser enables us to collect usage information about that user and keep a record of the user's preferences when utilizing our services, both on an individual and aggregate basis.

The Company may use both persistent and session cookies; persistent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser.

2. Information you provide us by registering for an account

In addition to the information provided automatically by your browser when you visit the Site, to become a subscriber to the Service you will need to create a personal profile. You can create a profile by registering with the Service and entering your email address, and creating a user name and a password. By registering, you are authorizing us to collect, store and use your email address in accordance with this Privacy Policy.

II. HOW WE USE AND SHARE INFORMATION

We use Personal Information and Customer Content to provide, operate, secure, maintain, and support the Service, including case management, document processing, workflow automation, AI-assisted features requested by the customer, troubleshooting, fraud prevention, and legal compliance.

1. Personal Information:

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who are performing services for the Company, such as the servers for our email communications who are provided access to user's email address for purposes of sending emails from us. Those vendors use your Personal Information only at our direction and in accordance with our Privacy Policy. In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to contact users in response to questions, solicit feedback from users, provide technical support, and inform users about promotional offers.

2. De-identified and Aggregated Information

In general, we use de-identified and aggregated usage data to help us improve the Service and customize the user experience. We also aggregate such data in order to track trends and analyze use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of de-identified or aggregated information and we reserve the right to use and disclose such information to our partners and other third parties at our discretion. We do not sell Customer Content and do not disclose Customer Content to advertisers.

In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If we materially change this Privacy Policy, we will provide notice as described in Section X.

3. Sharing with third parties

A. Sharing with service providers: We may share Customer Content with service providers solely to deliver and support the Service on our behalf. These providers are bound by confidentiality obligations and may not use Customer Content for their own purposes. Separately, we may engage marketing and analytics vendors who receive only de-identified or aggregated website usage data, not Customer Content.

B. Sharing due to merger, acquisition and other corporate reorganization: If the Company is merged, acquired, or sold, or if some or all of our assets or equity are transferred, the Company may disclose or transfer Personal and Non-personal Information in connection with such transaction.

III. HOW WE PROTECT INFORMATION

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

IV. YOUR RIGHTS REGARDING THE USE OF YOUR PERSONAL INFORMATION

You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional e-mail. Please note that even if you opt out of promotional communications, we may continue to send you administrative emails including, for example, periodic updates to our Privacy Policy.

If your information was submitted to the Service by or on behalf of a law firm customer, please direct your request to that law firm first. You may also contact us directly at [email protected] for requests related to your own account information.

V. DATA OWNERSHIP

As between the customer and AILaw, the customer retains all rights in Customer Content. AILaw processes Customer Content on the customer's behalf to provide the Service. This includes any data contributed by collaborators whom you invite to participate or interact with our services. Subject to applicable law and our retention and deletion policy, customers may access and modify Customer Content through their account. To export or delete Customer Content, customers may contact our support team.

VI. DATA RETENTION AND DELETION POLICY

We retain your data as long as your account is active or as needed to provide you with our services. If your account remains dormant for five years, we will delete or anonymize your data, unless required by law to retain it longer.

You can request deletion of your data stored with us by contacting our support team at [email protected]. Upon verified deletion request or account closure, we will delete Customer Content from active systems within three months. Backup copies and certain system logs may take additional time to age out. Retention beyond these periods occurs only where required by law.

VII. TRANSFER OF OWNERSHIP

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, your information may be transferred as permitted by law and this Privacy Policy. If required by law, we will provide notice of material changes to our privacy practices.

VIII. ACCOUNT CLOSURE

To close your account, you can contact our support team at [email protected]. Upon closure, your data will be deleted in accordance with the retention and deletion policies described in Section VI.

IX. LINKS TO OTHER WEBSITES

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our Site or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

X. CHANGES TO OUR PRIVACY POLICY

The Company reserves the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

XI. AI AND DATA USE

Your data is your data. We do not use Customer Content to train or improve our models or any third-party models, or for any provider's own product improvement, unless the customer expressly opts in. This includes case files, uploaded documents, personal information, AI prompts, and AI-generated outputs.

Our third-party AI service providers process Customer Content solely to deliver the Service. They are contractually restricted from using Customer Content for their own model training or product development.

We may use de-identified and aggregated usage data, such as telemetry and performance metrics, to improve our services and technology. This data cannot be used to identify any individual customer, law firm, or client.

AI prompts and outputs are retained as part of the Service to support case management, audit, and customer support. They are not used for model training and are subject to the same retention and deletion policies as other Customer Content.

Customer Content is stored and processed in the United States.

XII. PROFESSIONAL USE AND ATTORNEY OVERSIGHT

Our Services are designed to be used by and at the direction of licensed attorneys and authorized law firm personnel. AILaw processes Customer Content on the customer's behalf and in accordance with the customer's instructions.

AI-generated content is assistive only and is not a substitute for professional legal judgment. The customer is responsible for ensuring appropriate review by qualified legal professionals before any AI-generated output is used for legal advice, filings, submissions, or client communications. AILaw does not provide legal advice and does not establish attorney-client relationships with the law firm's clients.

XIII. CONTACT US

If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us at [email protected].