Ourfirm.ai, Inc.
Effective Date: October 23, 2025
Ourfirm.ai, Inc. ("Ourfirm.ai," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Services.
This Privacy Policy applies to information collected through:
Important Distinction: This Privacy Policy covers our collection and use of information about you and your use of the Services. Our processing of Customer Data (data you upload or generate in the Services) is governed by our Data Processing Addendum and Security Addendum.
What We Collect vs. What We Don't:
Usage Data Definition: "Usage Data" means information reflecting the access, interaction, or use of the Service by or on behalf of Customer including frequency, duration, volume, features, functions, visit, session, click through or click stream data, and statistical or other analysis, information, or data based on, or derivative works of, the foregoing. Usage Data does not include any Customer Data or Content.
When you create an account, we collect:
For paid subscriptions, we collect:
Content, documents, and data you upload, input, or generate using the Services. See our Data Processing Addendum for details on how we process Customer Data.
Information you provide when you:
We collect Usage Data to analyze platform performance and improve the Services. Usage Data includes:
What Usage Data Does NOT Include:
We use cookies, web beacons, and similar technologies to:
You can control cookies through your browser settings.
If you use single sign-on (SSO), we receive information from your identity provider (e.g., Google Workspace, Microsoft Azure AD).
Our payment processor provides us with transaction information but not your complete payment card details.
We may supplement information with publicly available data for business purposes (e.g., verifying organization information).
Customer Data Use: Customer Data is used ONLY to provide the Services to you. We do not use Customer Data for any other purpose.
Usage Data Only: Service improvements are based solely on Usage Data (metadata about how the platform is used), never on Customer Data (your actual content, documents, or prompts).
We do not sell your personal information. We share information only as described below:
We share information with third-party service providers who perform services on our behalf, including:
See our Subprocessor List for details on providers that process Customer Data.
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.
We may disclose information if required by law or in response to valid legal process:
See our Law Enforcement & Legal Requests Policy for details on how we handle government requests.
We may share information for other purposes with your consent.
We may share aggregated or de-identified information that cannot reasonably be used to identify you.
Our Services use large language models and other AI technologies to provide features like:
Customer Data is NOT used to train AI models - period. We have contractual agreements with all our AI providers (OpenAI, Anthropic, Google, Cerebras) that strictly prohibit:
We may use anonymized, aggregated Usage Data to improve our Services, such as:
Important: This analysis uses only Usage Data (metadata about platform usage), never the substance of your Customer Data.
AI-generated content may contain errors or "hallucinations." You are responsible for reviewing and verifying all AI-generated content. See Section 6 of our Terms of Service for details.
We retain account information for as long as your account is active or as needed to provide Services.
We retain Customer Data for the duration of your subscription plus any period required by law or our backup retention policies. See our Data Processing Addendum for details.
After account termination, we delete or anonymize your information within a commercially reasonable time, except as required by law or our legitimate interests (e.g., fraud prevention, dispute resolution).
Information in backups may persist for up to 90 days after deletion.
We implement technical and organizational measures to protect your information, including:
See our Security Addendum for comprehensive details.
However, no system is 100% secure. You are responsible for maintaining the security of your account credentials.
You may access and update your account information through account settings or by contacting us.
You may export your Customer Data at any time through the Services.
You may request deletion of your account and information by visiting our account deletion request page or contacting us at privacy@ourfirm.ai. Some information may be retained as permitted by law.
You may opt out of marketing communications by:
You cannot opt out of service-related communications.
You may control cookies through your browser settings, but this may affect functionality.
Our Services do not respond to Do Not Track signals, as there is no industry standard for how to respond.
If you are a California resident, you have the following rights:
Right to Know: Request details about personal information we collect, use, and disclose.
Right to Delete: Request deletion of your personal information (subject to exceptions).
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: We do not sell or share personal information as defined by the CCPA.
Right to Non-Discrimination: We will not discriminate against you for exercising your rights.
Sensitive Personal Information: We do not use or disclose sensitive personal information except as permitted by law.
To exercise these rights, visit our account deletion request page, email privacy@ourfirm.ai, or call [PHONE NUMBER].
If you reside in Virginia, Colorado, Connecticut, Utah, or other states with privacy laws, you may have similar rights. Contact us to exercise applicable rights.
We may require verification of your identity before responding to privacy requests. We will respond within the timeframes required by applicable law.
The Services are not intended for individuals under 18. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it promptly.
Our Services are provided from and primarily hosted in the United States. If you access the Services from outside the US, your information will be transferred to and processed in the US.
For US customers, our Data Processing Addendum confirms that processing occurs within the US.
For non-US customers, by using the Services, you consent to the transfer of information to the US and other countries where we or our service providers operate.
We may update this Privacy Policy from time to time. Material changes will be communicated by:
The "Effective Date" at the top indicates when the policy was last updated. Your continued use after changes take effect constitutes acceptance.
For questions about this Privacy Policy or our privacy practices, contact:
Ourfirm.ai, Inc.
Privacy Team
Email: privacy@ourfirm.ai
Legal: legal@ourfirm.ai
For data subject requests (access, deletion, correction), visit our account deletion request page or email privacy@ourfirm.ai with "Privacy Request" in the subject line.
Related Documents:
Effective Date: October 23, 2025
Version: 1.0