1. Information We Collect
We collect information to provide and improve our AI-powered legal services. This includes:
Account Information
- Name and Contact Details — Full name, email address, phone number
- Professional Information — Law firm name, state, bar number
- Account Credentials — Securely hashed password
- Billing Information — Processed securely through Stripe
Case Data
- Medical Records — PDFs, DOCX, images uploaded by you
- Case Details — Case name, client information, injury type, dates
- Financial Data — Medical bills, lost wages, settlement amounts
- Insurance Information — Insurance company, claim numbers
AI Usage Data
- AI Prompts — The input text you provide for AI processing
- AI Outputs — Generated chronologies, demand letters, settlements
- Usage Patterns — How you interact with our AI features
- Performance Data — Processing time, tokens used, cost
Technical Data
- Device Information — Browser type, operating system
- IP Address — For security and analytics
- Session Data — Login history, activity timestamps
- Cookies — Essential and functional cookies
2. How We Use Your Information
Provide Core Services
- Generate AI-powered legal documents (Chronology, Demand Letter, Settlement Estimate, Case Summary)
- Manage your cases and medical records securely
- Process payments and manage subscriptions
- Provide customer support and respond to inquiries
Improve Our AI
- Analyze usage patterns to enhance AI accuracy
- Train and fine-tune our AI models (anonymized, non-identifiable data)
- Optimize performance and user experience
🤖 AI Data Promise: Your case data is used exclusively for your benefit. We do not use your sensitive legal data to train models without explicit consent. All AI processing occurs in isolated, secure environments.
3. AI Data Processing
How AI Works
AI Accident Pilot uses state-of-the-art AI models (Qwen3-8B) through Together AI. When you request AI generation:
- Your medical records and case data are sent securely to Together AI servers
- AI processes the data and generates the requested document
- The output is stored in your secure tenant database
- All AI processing is temporary — data is not retained by AI providers
AI Data Protection
- Encryption: All data in transit is encrypted (TLS 1.3)
- Isolation: Each tenant's data is completely isolated
- No Sharing: We never share your data with third parties without consent
- No Training: Your data is not used to train public models
4. Data Security
We implement enterprise-grade security measures to protect your data:
- Encryption: AES-256 encryption for data at rest, TLS 1.3 for data in transit
- Access Control: Multi-tenant isolation ensures your data is private
- Authentication: Secure login with bcrypt password hashing
- CSRF Protection: Tokens on all forms
- Prepared Statements: SQL injection protection
- Session Security: HttpOnly, Secure, SameSite cookies
- Rate Limiting: Protection against brute force attacks
5. Data Sharing
We share your data only in these limited circumstances:
- With Your Consent: When you explicitly authorize us
- Service Providers:
- Stripe — Payment processing (billing information)
- Together AI — AI model processing (temporary, encrypted)
- Brevo — Email notifications and communications
- Legal Requirements: When required by law or to protect rights
We do not sell your personal data.
6. Your Rights
You have the following rights regarding your data:
- Right to Access — Request a copy of your data
- Right to Correct — Update inaccurate information
- Right to Delete — Request permanent deletion of your account
- Right to Export — Download your data in CSV/JSON format
- Right to Opt-out — Unsubscribe from marketing communications
- Right to Withdraw Consent — Stop AI processing (limited functionality)
To exercise these rights, contact us at privacy@accidentpilot.com
7. Data Retention
- Active Accounts: Data retained as long as your account is active
- Deleted Accounts: Data permanently removed within 30 days
- Legal Obligations: Some data may be retained as required by law
- Aggregated Data: Anonymized, non-identifiable data may be retained for analytics
8. Contact Us
If you have questions about this policy or your data, please contact us:
Last Updated: July 7, 2026
Version 1.0
Effective: July 7, 2026