What we collect, where it goes, and how long we keep it.
1. Who is the operator.
This site is operated by Blake Beyel, an attorney admitted to the Florida Bar, in connection with content published as Legal Overflow. Beyel Brothers Inc. is the entity hosting and paying for site infrastructure. For purposes of US privacy law, "we," "us," or "the operator" refers to that combined operation.
Contact: blake.beyel@beyel.com.
2. What we collect.
We collect three categories of information:
- Account information. When you sign up, we collect your email address and password (the password is stored hashed by Supabase Auth — we never see the plaintext). If you fill out the configure form, we additionally collect the name, company, jurisdiction, industry, business description, negotiating positions, red flags, and other text you choose to paste in.
- Uploaded documents. When you upload a contract or brief to one of the agents, the file itself and any text we extract from it are stored on our infrastructure and processed by the third-party services listed below.
- Operational telemetry. We log access times, request paths, and basic usage counters (e.g., how many reviews you have run in the last 30 days). We do not use third-party analytics or advertising trackers.
3. Where your data goes — subprocessors.
We use the following third-party services to process the data you submit. Each is bound by its own privacy policy and (where applicable) data-processing terms:
- Supabase (database, authentication, file storage). Holds your account row, your saved profile, your review history, and the source files you upload. Hosted on AWS (US-East). Privacy: supabase.com/privacy.
- Anthropic (Claude language model). Receives the text of the documents and the prompts the agents construct. Anthropic's enterprise/API terms commit to not training on submitted content. Privacy: anthropic.com/privacy.
- Modal Labs (Python compute for PDF markup). Receives PDF source files and the markup instructions, holds them only for the duration of the request. Privacy: modal.com/privacy.
- Resend (transactional email). Receives email addresses + the body of any system email we send you (signup confirmation, password reset). Privacy: resend.com/legal/privacy-policy.
- CourtListener / Free Law Project (case-existence and citation lookup). Receives query strings (case names, citations) but not the full text of your uploaded document. Privacy: courtlistener.com/help/privacy.
- Netlify (web hosting + serverless functions). Receives standard HTTP request data including IP address. Privacy: netlify.com/privacy.
If you change any of these subprocessors, we will note it on this page.
4. How long we keep it.
- Account information: kept until you delete your account. Email blake.beyel@beyel.com to request deletion.
- Uploaded contracts and source files: automatically deleted from storage 30 days after upload. The structured findings (no source text) may be retained longer for review-history purposes.
- Citation-verifier source files: retained only when you opted in via the retain text checkbox; otherwise deleted along with the source after 30 days.
- Operational telemetry: retained for up to 12 months for diagnostics, then aggregated or deleted.
5. Confidentiality and privilege.
Documents you upload pass through the third-party subprocessors named above. Even though those services are commercially careful with your data, you should understand that uploading attorney-client-privileged or work-product material to a cloud-based AI service raises confidentiality issues that you must consider before doing so. Florida lawyers should review Florida Bar Ethics Opinion 12-3 and any subsequent guidance. Lawyers in other jurisdictions should consult their own bar's published guidance on cloud computing and AI.
Use of this site does not, by itself, satisfy any obligation you owe to your clients regarding informed consent for cloud processing of confidential information. That obligation is yours.
6. What we do not do.
- We do not sell your data.
- We do not use third-party advertising trackers, retargeting pixels, or social-media trackers.
- We do not train AI models on your uploads. Anthropic's enterprise terms also prohibit training on API content.
- We do not share your uploaded documents with anyone other than the subprocessors named in section 3, who use them only to deliver the requested service.
7. Your rights.
Depending on your jurisdiction, you may have the right to access, correct, or delete the personal information we hold about you. To exercise any of these rights, email blake.beyel@beyel.com. We will respond within 30 days.
California residents have additional rights under the CCPA/CPRA; EU/UK residents have rights under GDPR/UK-GDPR. We honor those rights to the extent applicable.
8. Children.
This site is not directed to children under 13 and we do not knowingly collect their information.
9. Changes.
If we change this policy in a material way, we will note the change at the top of this page.