Privacy Policy

This Privacy Policy explains how ClerqLegal ("ClerqLegal," "we," "us," or "our") collects, uses, and protects information when you visit our website at clerqlegal.com (the "Site"), use our software platform and related services (together, the "Services"), or otherwise interact with us.

What this policy covers, and what it does not. This policy describes the information we handle as a business, such as information about the law firms that use the Services, the people at those firms who use them (your "Authorized Users"), and visitors to our Site. It does not govern the notices, documents, case data, and client information that your firm uploads to or generates through the Services, which we call "Firm Data." We process Firm Data only on your firm's behalf and according to your instructions, to provide the Services. Our handling of Firm Data is governed by our Terms of Service and any Data Processing Addendum between you and ClerqLegal, not by this Privacy Policy. In short, your firm controls its Firm Data, and we act as its service provider.

Changes to this policy. We may update this Privacy Policy from time to time. The "Last updated" date above shows when it last changed. If we make material changes, we will provide additional notice, such as by posting on the Site or sending you a message.

1. Information we collect

Information you provide to us.

• Account and firm details, such as your name, your firm's name, email address, phone number, and role, which we use to set up and manage accounts.
• Billing information, which is handled by our payment processor when you subscribe.
• Integration credentials, such as OAuth tokens or API keys, that you provide so the Services can connect to the systems your firm uses.
• Communications, such as the information you provide when you contact us for support or send us a message.

Information we collect automatically. When you use the Site or Services, we automatically collect certain technical information, such as your IP address, browser and device type, the pages and features you use, and the dates and times of your activity. We use cookies and similar technologies for sign-in, session management, and to understand how the Services are used.

Firm Data. The notices, documents, case data, client information, and templates your firm uploads to or generates through the Services are Firm Data. As explained above, we process Firm Data to provide the Services and as described in our Terms of Service, and not for our own purposes.

2. How we use information

We use the information we handle as a business to:

• Provide, maintain, secure, and support the Services;
• Set up and manage accounts and the permissions your firm assigns;
• Process payments and manage subscriptions;
• Send you service and support communications, including technical notices and security alerts;
• Send you information about features and updates, which you can opt out of at any time;
• Monitor, analyze, and improve the performance and reliability of the Services;
• Detect, investigate, and prevent fraud, abuse, and security incidents;
• Comply with our legal obligations; and
• Create aggregated or de-identified information that does not identify you.

How we use data to improve the Services. We use information about how the Services are used to operate and improve them. We will not use your Firm Data or your clients' personal information to train artificial intelligence models that we make generally available to other customers, except in aggregated or de-identified form that does not identify you, your firm, or your clients.

No advertising. ClerqLegal does not show ads. We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising, as those terms are defined under U.S. state privacy laws.

3. How AI and automated processing work

The Services use automated systems, including machine learning and other artificial intelligence, to read notices, extract information, sync data to your other systems, and draft client updates.

To protect the confidentiality of your firm's data, we do not use your Firm Data or your clients' personal information to train foundation models or any models we make generally available to other customers, except in aggregated or de-identified form that does not identify you, your firm, or your clients. We process Firm Data only to provide these features to your firm.

As explained in our Terms of Service, output from these systems is generated automatically and should be reviewed by qualified people at your firm before you rely on it.

4. How we share information

We share information in the following ways:

• Service providers. We share information with vendors that perform services for us, such as cloud hosting and infrastructure providers and the artificial intelligence service providers that help power the Services. These providers act on our behalf, are bound by confidentiality and security obligations, and may not use the information for their own purposes. We maintain a current list of these providers and can provide it on request.
• Integrations you choose. When you connect a third-party system, such as Clio, Filevine, MyCase, Docketwise, CampLegal, USCIS, EOIR, or Google Calendar, we exchange information with that system at your direction. Your use of those systems is governed by their own terms and privacy practices.
• Legal and safety reasons. We may disclose information if we believe it is required by law or legal process, in response to a lawful request from a government authority, or to protect the rights, property, or safety of ClerqLegal, our customers, or others.
• Corporate transactions. We may disclose information in connection with a merger, acquisition, financing, or sale of assets.
• With your consent or at your direction.
• Aggregated or de-identified information that does not identify you.

As stated above, we do not sell your personal information or share it for advertising.

5. Google user data

ClerqLegal integrates with Google Calendar to create and manage calendar events on behalf of Authorized Users. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

What Google data we collect. When you connect your Google account, we collect and store:

• your Google account email address and display name, to identify the connected account;
• an OAuth access token and refresh token, to make requests to the Google Calendar API on your behalf; and
• the calendar event IDs that Google returns when we create an event, stored only to identify and delete that event if a later notice supersedes it.

At this time, ClerqLegal's Google integration is limited to Google Calendar. We collect and use only the Google user data necessary to provide the Google features you choose to enable. If we later offer integrations with additional Google services, we may collect and use the data required for those services as described in an updated Privacy Policy and only with your authorization.

How we use Google data. We create calendar events automatically when appointment notices, such as USCIS interviews or court hearings, are detected in processed documents, and we delete those events when a later cancellation notice is received. We use Google user data only to provide and support the Google integrations you choose to enable and for no other purpose except as disclosed in this Privacy Policy. We do not use it for advertising, analytics, or profiling, and we do not share it with any third party.

Retention and deletion of Google data. We keep your Google account email and display name while your Google Calendar connection is active, and OAuth tokens only while the connection is active. We keep calendar event IDs until the related appointment is no longer relevant or the connection is disconnected. You can disconnect Google Calendar at any time in the application settings, and when you do, your OAuth tokens are deleted from our systems immediately and all Google user data is deleted. You can also revoke access from your Google Account permissions page. To request deletion of any retained data, contact us through our Site.

6. How we protect information

We use administrative, technical, and organizational measures designed to protect information, including:

• Encryption. Data sent between your browser, our servers, and connected third-party services is encrypted in transit using TLS.
• Authentication. We support two-factor authentication (2FA) to add a layer of protection beyond a password when Authorized Users sign in.
• Access controls. Access to firm data is limited to authenticated and authorized users, and role-based permissions limit access to sensitive operations.
• Credential security. OAuth tokens and API credentials used for integrations are stored securely and are not exposed to unauthorized parties.

No method of storage or transmission is completely secure, so we cannot guarantee absolute security. If we become aware of a security breach affecting your information, we will notify you without undue delay and consistent with applicable law.

7. Data retention

We keep account and firm business information for as long as your account is active and as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.

We retain Firm Data as described in our Terms of Service. After your subscription ends, you may export Firm Data for 30 days, after which we may delete it, except for copies we are required to keep by law or that exist in routine backups, which are deleted in the ordinary course.

We keep integration credentials only while the connection is active, and we delete Google user data as described in the Google section above.

8. Your choices and rights

Account information. You can access and update certain account information by signing in or by contacting us.

Communications. You can opt out of non-essential emails by following the instructions in those messages. We may still send you messages about your account and the Services.

Cookies. You can usually adjust your browser settings to remove or reject cookies, though some features may not work as well.

State privacy rights. Depending on where you live, U.S. state privacy laws may give you the right to request access to, correction of, or deletion of the personal information we hold about you as a business, to receive a copy of it, and to not be treated differently for exercising these rights. To make a request, contact us through our Site. We do not sell personal information or share it for targeted advertising.

Requests about client information. If you are an individual whose information was provided to us by a law firm, such as one of the firm's clients, please direct your request to that firm, which controls the information. We will assist the firm in responding as its service provider.

9. Children's privacy

The Services are intended for law firms and their authorized staff, not for children, and we do not knowingly collect personal information from children as users of the Services. Firm Data that a firm uploads may include information about the firm's clients, who may in some cases be minors. We process that information on the firm's behalf under our Terms of Service.

10. International data processing

ClerqLegal operates the Services from the United States, and we and our service providers process and store information in the United States.

11. Contact us

If you have questions about this Privacy Policy or our data practices, contact us through our website at clerqlegal.com. Please do not include sensitive personal information in ordinary email.

12. California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you certain rights regarding the personal information we handle about you as a business.

Categories we collect. In the past 12 months, we have collected the categories of personal information described in the "Information we collect" section, which may include identifiers such as your name and email address, professional information such as your firm and role, commercial information such as subscription and billing records, and internet or network activity such as usage and device information. We collect this information from you, from your firm, and automatically as you use the Services, and we use and share it for the business purposes described in this policy.

No sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We also do not use or disclose sensitive personal information for purposes that would give you a right to limit that use under California law.

Your rights. Subject to certain exceptions, you have the right to request access to the personal information we hold about you, to request a copy of it in a portable form, to request correction or deletion, and to not be discriminated against for exercising these rights.

How to exercise your rights. To make a request, contact us through our Site. We will take steps to verify your request before responding, and you may use an authorized agent to submit a request on your behalf.

Firm and client information. For Firm Data, including information about a firm's clients, ClerqLegal acts as a service provider to the firm, so requests about that information should be directed to the firm, which controls it, and we will assist the firm in responding.