Privacy Policy

• We do not sell personal information, and we never use case files to train AI models.
• The Site uses Google Analytics, Microsoft Clarity, and Meta advertising tools to measure visits, see how pages are used, and tell whether our ads work. The Service does not.
• Case files belong to the law firms that upload them. We handle them only to generate that firm's documents.
• Medical records and intake forms uploaded to the Service are deleted thirty days after upload.
• You can ask us what we hold about you, or ask us to correct or delete it, by writing to info@cyberdialect.com.

1.1 Information about you. When you visit the Site, contact us, book a demo, or use the Service, we decide what information to collect about you and how to use it. Most of this policy covers that information.

1.2 Case content. When a law firm uploads its clients' case files to the Service, that firm decides what is uploaded and why. We handle that information on the firm's behalf, only to provide the Service to the firm, under our written agreement with that firm. Section 5 explains how.

1.3 If you are a law firm's client. If your records were uploaded by your law firm, the firm controls them. Please contact your law firm with questions or requests about your information. If you contact us, we will direct your request to the firm and help it respond.

2.1 Information you give us.

• Contact form. Your name, firm, email address, phone number (optional), approximate monthly volume, and any note you write. We also record the page you sent it from and when.
• Demo bookings. When you book a call through the Calendly calendar on the Site, Calendly collects your name, email address, the time you chose, and any answers you give, and shares them with us.
• Email and calls. Whatever you choose to tell us when you write or call.
• Account information. For users of the Service: your name, email address, firm, and role.
• Billing information. Your firm's billing contact and address. Card details go directly to our payment processor, Stripe. We never see or store full card numbers.
• Case content. The documents a firm uploads and the documents the Service generates. See Section 5.

2.2 Information collected automatically on the Site.

• Google Analytics. Pages you view, how you arrived, approximate location (city level), device and browser type, and actions on the page, such as playing a video, using the before and after comparison, submitting the contact form, clicking an email or phone link, and the steps of booking a demo. Google Analytics uses cookies and similar identifiers to do this.
• Meta Pixel and Meta Conversions API. Page views, and whether you submitted the contact form, clicked an email or phone link, or completed a demo booking. The Pixel uses cookies to tell us whether a Facebook or Instagram ad led to a visit. When you submit the contact form or book a demo, our server also reports it to Meta directly; see Section 4 for exactly what that report contains.
• Microsoft Clarity. How you use each page: where you click and tap, how far you scroll, how long you stay, and a recording of those movements that we can replay. Clarity hides what you type into forms before anything leaves your browser. It uses cookies to tell one visit from another.
• Personal links. If we sent you a link made for you, such as to a customer story, we record that you opened it and how much of its video you watched, and we connect that to our notes about our conversation with you.
• Vercel Web Analytics. Aggregate counts of page views, referring sites, countries, and device types. It does not use cookies.
• Server logs. Like almost every website, our hosting provider records IP addresses, browser details, and the pages requested, to deliver the Site and protect it from abuse.

2.3 Information collected automatically in the Service.

• Sign in and security records, including email addresses and IP addresses used to request sign in links, which we use to limit repeated attempts and to detect attacks.
• An activity log of actions taken in your firm's account, such as uploads, generations, downloads, deletions, and support access.
• Error reports and performance information needed to keep the Service working.

The Service does not use advertising or analytics trackers.

• to answer your questions and schedule and hold demo calls
• to provide, build, support, and secure the Service for your firm
• to send sign in links, service notices, and invoices, and to collect payment
• to understand how people use the Site and which of our ads lead to real inquiries, so we spend on the ones that work
• to detect, prevent, and investigate fraud, abuse, and security incidents
• to comply with the law and enforce our Terms of Use and our agreements with customers

If you contact us about the Service, we may follow up with you about it. We do not add you to a mailing list without asking, and you can tell us to stop contacting you at any time.

We do not sell personal information, and we do not share it with data brokers. We share it only with the service providers who help us run the Site and the Service, for the purposes described here:

• Vercel hosts the Site and the Service.
• Supabase stores the Service's database, sign in system, and uploaded files.
• Modal provides the computing that generates documents.
• Anthropic provides the AI model that drafts documents, and receives case content to do it. Its commercial terms state that this content is not used to train its models.
• Resend delivers sign in emails and delivers contact form messages to our inbox.
• Stripe processes payments.
• Calendly runs the demo booking calendar.
• Google receives Site analytics through Google Analytics.
• Microsoft receives records of how the Site is used through Clarity.
• Meta receives Site advertising measurement through the Meta Pixel. When you submit the contact form or book a demo, our server also sends Meta a report of it containing scrambled (SHA-256 hashed) copies of your email address, phone number, and first and last name, along with your IP address, your browser type, and the Meta cookie values described in Section 6. Meta uses these to match the inquiry to a Facebook or Instagram account, if you have one, and tell us whether one of our ads led to it. Meta does not receive your note or anything about a case.

Case content goes only to Vercel, Supabase, Modal, and Anthropic. It is never shared with Google, Meta, Calendly, or any other customer.

We may also disclose information when the law requires it, such as in response to a valid subpoena or court order; to protect the rights, safety, or property of our customers, ourselves, or others; or as part of a merger, acquisition, or sale of our business, in which case this policy continues to apply to the information transferred. If a legal demand reaches us for case content, we refer it to the firm where we can, and notify the firm before responding unless the law or the demand forbids it.

Case files can contain sensitive information about people who are not our customers, including medical history, treatment, injuries, dates of birth, employment, and the last four digits of Social Security numbers. We treat it accordingly:

• We use it only to generate documents for the firm that uploaded it, and to support and secure the Service for that firm.
• Each firm's data is separated from every other firm's at the database level.
• We never use it to train or improve AI models, and we never sell or share it with another customer.
• Full Social Security numbers printed in document text are masked before text is sent to the AI model.
• Uploaded medical records and intake forms are permanently deleted thirty days after upload. Other case materials and generated documents are kept until the firm deletes the case or closes its account.

Our Security page describes these controls in detail, including their limits.

Cookies are small files a website stores in your browser. Here is what uses them:

• Google Analytics sets cookies whose names begin with _ga, to tell one visit from another. They last up to two years.
• The Meta Pixel sets cookies named _fbp and, if you arrived from a Meta ad, _fbc. They last up to 90 days.
• Microsoft Clarity sets cookies named _clck and _clsk, to tell one visit from another. _clck lasts up to a year and _clsk one day.
• Calendly sets its own cookies on the contact page when its booking calendar loads.
• The Service sets a sign in session cookie that keeps you signed in. It cannot be read by page scripts and is not used for tracking.

You can block or delete cookies in your browser settings. The Site works without them, though the booking calendar may not.

7.1 Opting out of analytics and ad measurement.

• Google offers a browser add-on that stops Google Analytics from collecting your visits, at tools.google.com/dlpage/gaoptout.
• You can control how Meta uses information from websites for ads in your Facebook or Instagram settings, under Ad Preferences.
• Most browsers let you block third party cookies, and many ad blockers stop these trackers entirely.

7.2 Browser signals. The Site does not currently change its behavior in response to Do Not Track or Global Privacy Control signals. The options above still work.

7.3 Access, correction, and deletion. You may ask us what personal information we hold about you, ask us to correct it, ask us to delete it, or ask us to stop using it for advertising measurement. Email info@cyberdialect.com. We will confirm we received your request and respond within 45 days. We may need to verify your identity first, and we may keep information the law requires us to keep, such as billing records. These rights may be stronger under the law of the state where you live, and we honor these requests wherever you live.

7.4 No penalty. We will not treat you differently for making a privacy request.

• Contact form notes and emails are kept in our email account for as long as they are useful to the conversation or the business relationship, and deleted on request.
• Google Analytics data is kept for no more than 14 months.
• Microsoft Clarity keeps recordings of visits for up to 30 days and page level heatmaps for up to 13 months.
• Account information is kept while your firm's account is active, and for up to 30 days after it closes.
• Case content is kept as described in Section 5, and deleted from the Service 30 days after an account closes.
• Billing records are kept for as long as tax and accounting law requires, generally seven years.
• Activity log entries are kept for the life of the firm's account so the firm can evidence what happened in it, and contain no case content.

Copies in our providers' backups age out on their normal schedules.

We use reasonable administrative, technical, and physical safeguards to protect information, as New York General Business Law Section 899-bb requires. Traffic is encrypted in transit, stored data is encrypted by our providers, and access to each firm's data is restricted at the database level. Our Security page describes the controls and their limits in detail. No system is perfectly secure, and we cannot guarantee that information will never be accessed without authorization.

If a breach affects your personal information, we will notify you and any authorities as New York General Business Law Section 899-aa and other applicable laws require. For case content, we will notify the affected law firm within 72 hours of confirming a breach, and help it notify its clients.

The Site and the Service are for legal professionals and are not directed to children. We do not knowingly collect personal information from anyone under 18 through the Site. Case files uploaded by a law firm may concern a minor client; that information is handled as described in Section 5, under the firm's direction.

We are based in New York, and the Site and the Service are intended for use in the United States. Information is stored and processed in the United States. If you visit from elsewhere, your information will be transferred to the United States.

We will update this policy when our practices change, post the new version here, and change the effective date at the top. If a change materially expands how we use personal information we already hold, we will notify customers by email before it takes effect.

Questions or requests about privacy go to Cyberdialect, Long Island, New York, at info@cyberdialect.com or (516) 531-3962. You will be writing to the person who built the system, and you will get a direct answer.