AILaw INC. PRIVACY POLICY

AILaw INC. (the "Company") provides a software platform for immigration law firms that includes matter management, form preparation, attorney and client portals, and AI-assisted features. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service.

For purposes of this Privacy Policy, "Service" refers to the Company's software platform used by law firms and authorized personnel for case management, document automation, client collaboration, and AI-assisted workflow support. The Service can be accessed via our website or through our mobile application. The terms "we," "us," and "our" refer to the Company. "You" refers to you, as a user of the Service. "Site" refers to the Company's public website. By accepting this Privacy Policy, you consent to our collection, storage, use, and disclosure of your information as described in this Privacy Policy.

"Customer Content" refers to case files, uploaded documents, personal information, attorney work product, AI prompts, and AI-generated outputs provided by or on behalf of a customer through our Service.

I. INFORMATION WE COLLECT

We collect Personal Information and Customer Content as described in this Privacy Policy. We also collect device, cookie, IP address, and usage information, and we may create de-identified or aggregated information from that data. Depending on applicable law, certain device, cookie, IP address, and usage data may be treated as Personal Information.

Personal Information includes, but is not limited to, name, gender, age, marital status, immigration status, immigration-related documents, country of origin, nationality, information related to government-issued papers, education and work history, past and present addresses, telephone and fax numbers, IRS documents, email addresses, and similar information.

1. Information collected via Technology

Law firm customers generally enter into an Order Form and the Neutrinet Platform Services Agreement before account administrators invite or provision authorized users. Depending on how the Service is used, customers may submit or upload Personal Information and Customer Content, including case files, documents, prompts, and outputs. In an effort to improve the quality of the Service, we track information provided to us by your browser or by our mobile application when you view or use the Service, such as the website you came from (known as the "referring URL"), the type of browser you use, the device from which you connected to the Service, the time and date of access, and other information about how you interact with the Site and Service. We track this information using cookies, or small text files which may include a unique identifier. Cookies are sent to a user's browser from our servers and are stored on the user's computer's hard drive. Sending a cookie to a user's browser enables us to collect usage information about that user and keep a record of the user's preferences when utilizing our services, both on an individual and aggregate basis.

The Company may use both persistent and session cookies. Persistent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser.

2. Information you provide through a customer account

Accounts are provisioned for law firm customers under signed service documents. A customer account administrator may invite authorized users, who provide information such as a name, email address, username, and password to create or access their profile. We collect, store, and use that information in accordance with this Privacy Policy.

II. HOW WE USE AND SHARE INFORMATION

We use Personal Information and Customer Content to provide, operate, secure, maintain, and support the Service, including case management, document processing, workflow automation, AI-assisted features requested by the customer, troubleshooting, fraud prevention, and legal compliance.

1. Personal Information:

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent, or otherwise share your Personal Information with third parties for marketing purposes without your consent. We share Personal Information with vendors that perform services for the Company, such as email service providers that receive users' email addresses to send communications on our behalf. Those vendors use your Personal Information only at our direction and in accordance with our Privacy Policy. In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to contact users in response to questions, solicit feedback from users, provide technical support, and inform users about promotional offers.

2. De-identified and Aggregated Information

In general, we use de-identified and aggregated usage data to help us improve the Service and customize the user experience. We also aggregate such data in order to track trends and analyze use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of de-identified or aggregated information and we reserve the right to use and disclose such information to our partners and other third parties at our discretion. We do not sell Customer Content and do not disclose Customer Content to advertisers.

In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If we materially change this Privacy Policy, we will provide notice as described in Section X.

3. Sharing with third parties

A. Sharing with service providers: We may share Customer Content with service providers solely to deliver and support the Service on our behalf. These providers are bound by confidentiality obligations and may not use Customer Content for their own purposes. Separately, we may engage marketing and analytics vendors that receive website and device data such as identifiers, URLs, IP addresses, device information, cookies, and site activity. These vendors do not receive Customer Content through our website marketing and analytics tools. Depending on the vendor and your interactions, website data may be associated with an identifiable browser, device, or contact.

B. Sharing due to merger, acquisition and other corporate reorganization: If the Company is merged, acquired, or sold, or if some or all of our assets or equity are transferred, the Company may disclose or transfer Personal Information and de-identified or aggregated information in connection with such transaction.

III. HOW WE PROTECT INFORMATION

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

IV. YOUR RIGHTS REGARDING THE USE OF YOUR PERSONAL INFORMATION

You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional e-mail. Please note that even if you opt out of promotional communications, we may continue to send you administrative emails including, for example, periodic updates to our Privacy Policy.

If your information was submitted to the Service by or on behalf of a law firm customer, please direct your request to that law firm first. You may also contact us directly at [email protected] for requests related to your own account information.

V. DATA OWNERSHIP

As between the customer and AILaw, the customer retains all rights in Customer Content. AILaw processes Customer Content on the customer's behalf to provide the Service. This includes any data contributed by collaborators whom you invite to participate or interact with our services. Subject to applicable law and our retention and deletion policy, customers may access and modify Customer Content through their account. To export or delete Customer Content, customers may contact our support team.

VI. DATA RETENTION AND DELETION POLICY

We retain your data as long as your account is active or as needed to provide you with our services. If your account remains dormant for five years, we will delete or anonymize your data, unless required by law to retain it longer.

You can request deletion of your data stored with us by contacting our support team at [email protected]. Upon a verified deletion request or account closure, we will delete Customer Content from active systems within three months. Backup copies and certain system logs may take additional time to age out. Retention beyond these periods occurs only where required by law.

VII. BUSINESS TRANSFERS

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, your information may be transferred as permitted by law and this Privacy Policy. If required by law, we will provide notice of material changes to our privacy practices.

VIII. ACCOUNT CLOSURE

To close your account, you can contact our support team at [email protected]. Upon closure, your data will be deleted in accordance with the retention and deletion policies described in Section VI.

IX. LINKS TO OTHER WEBSITES

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our Site or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access to or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

X. CHANGES TO OUR PRIVACY POLICY

The Company reserves the right to change this Privacy Policy and our Terms of Use at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

XI. AI AND DATA USE

Your data is your data. We do not use Customer Content to train or improve AILaw models unless the customer expressly opts in. We do not use Customer Content to train or improve third-party models or for any provider's own product improvement. This includes case files, uploaded documents, personal information, AI prompts, and AI-generated outputs.

Our third-party AI service providers process Customer Content solely to deliver the Service. They are contractually restricted from using Customer Content for their own model training or product development.

We may use de-identified and aggregated usage data, such as telemetry and performance metrics, to improve our services and technology. We maintain de-identified and aggregated data in that form and do not attempt to re-identify it.

AI prompts and outputs are retained as part of the Service to support case management, audit, and customer support. They are not used to train or improve AILaw models unless the customer expressly opts in, and are subject to the same retention and deletion policies as other Customer Content.

Customer Content is stored and processed in the United States.

XII. PROFESSIONAL USE AND ATTORNEY OVERSIGHT

The Service is designed to be used by and at the direction of licensed attorneys and authorized law firm personnel. AILaw processes Customer Content on the customer's behalf and in accordance with the customer's instructions.

AI-generated content is assistive only and is not a substitute for professional legal judgment. The customer is responsible for ensuring appropriate review by qualified legal professionals before any AI-generated output is used for legal advice, filings, submissions, or client communications. AILaw does not provide legal advice and does not establish attorney-client relationships with the law firm's clients.

XIII. CONTACT US

If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us at [email protected].