Privacy Policy

1. Scope and responsible entity

This Privacy Policy explains how CFOCrew LLC, doing business as LitiGenie (“LitiGenie,” “we,” “us,” or “our”), collects, uses, discloses, and retains personal information through our websites, applications, and services (collectively, the “Service”). It applies to website visitors, account users, firm representatives, pilot participants, advisor applicants, and people whose information is submitted to the Service.

A law firm or other organization may submit information about clients, witnesses, employees, or other people. In that context, the organization determines why the information is processed and LitiGenie generally processes it on the organization's instructions. Requests concerning that information may need to be directed to the organization that submitted it.

2. Information we collect

Information you provide

• Account and professional information: name, email address, firm or organization, role, authentication details, and account preferences.
• Case and workspace information: uploaded documents, transcripts, medical records, images, case facts, notes, instructions, generated outputs, citations, edits, and associated metadata.
• Commercial information: plan, usage, order, invoice, and transaction records. Payment-card information is handled by our payment processor and is not stored directly by LitiGenie.
• Communications: support requests, product feedback, demo requests, and other messages you send us.
• Pilot and advisor information: firm, role, professional profile, areas of interest, workflow needs, experience, and other application responses.

Information collected automatically

When you use the Service, we and our providers may collect IP address, browser and device type, operating system, referring pages, pages or features used, timestamps, approximate location derived from IP address, cookie or similar identifiers, and diagnostic, performance, authentication, and security-event information. We configure website analytics to anonymize IP addresses where that setting is supported.

Information from other sources

We may receive account information from authentication providers, payment and billing information from payment processors, files you choose to import from integration providers, and legal research results from public or licensed sources. The information received depends on the service you connect and the permissions you grant.

3. How we use information

We use personal information to:

• provide, authenticate, operate, and support the Service;
• process documents and perform workflows requested by users;
• generate, store, retrieve, and cite-check AI-assisted outputs;
• administer accounts, organizations, pilots, advisor applications, billing, and communications;
• personalize workflows and remember user settings;
• monitor reliability, understand feature usage, and improve the Service;
• detect fraud, abuse, security incidents, and violations of our terms;
• comply with legal obligations and protect users, LitiGenie, and others; and
• send service notices and, where permitted, information about LitiGenie that may be relevant to you.

We do not use Customer Data submitted through litigation workflows to train generative AI models. We may use aggregated or de-identified information that cannot reasonably be linked to a person or matter to operate, secure, and improve the Service.

4. AI processing

When a user requests an AI-assisted workflow, relevant text, document excerpts, instructions, and contextual information may be transmitted over encrypted connections to commercial AI model providers acting on our behalf. We currently use commercial API services, including Anthropic, rather than consumer chatbot accounts. Commercial API inputs and outputs are not used for model training by default, subject to the provider's terms and limited exceptions such as abuse monitoring, legal requirements, or an affirmative opt-in.

Provider retention and product features may change. For current information about Anthropic's commercial data practices, review its Commercial Customers privacy resources.

5. How we disclose information

We may disclose information in the following circumstances:

• Service providers: providers supporting hosting, databases, storage, AI processing, document processing, authentication, analytics, email, error monitoring, customer support, billing, security, and legal research.
• Your organization and integrations: administrators and authorized users of your organization, and third-party services you direct us to connect with.
• Professional advisers: lawyers, accountants, insurers, auditors, and consultants subject to appropriate duties.
• Legal and safety purposes: when reasonably necessary to comply with law or valid legal process, enforce agreements, investigate abuse, or protect rights, safety, and security.
• Business transactions: in connection with financing, diligence, a merger, reorganization, acquisition, or sale of assets, subject to appropriate protections.
• With your direction or consent: when you ask us to disclose information or otherwise authorize it.

We do not sell personal information for money. We do not use Customer Data for cross-context behavioral advertising. We may disclose limited website and device data to analytics providers as described below.

6. Cookies, analytics, and browser signals

We use cookies and similar technologies that are necessary for authentication, security, preferences, and Service functionality. We also use Google Analytics to understand traffic and website performance. Google may process device, usage, and cookie information under its own terms. You can control cookies through your browser and may use Google's available analytics opt-out tools, but disabling necessary cookies may prevent parts of the Service from working.

Because there is not yet a uniform industry response to browser “Do Not Track” signals, the Service does not currently respond to them in a standardized way. We will process legally recognized opt-out preference signals where required by applicable law.

7. Retention and deletion

We retain personal information for as long as reasonably necessary to provide the Service, maintain account and transaction records, comply with legal obligations, resolve disputes, prevent fraud and abuse, enforce agreements, and protect security. Retention depends on the type of information, the sensitivity and risk, the reason it was collected, user and firm instructions, and applicable contractual or legal duties.

Users may delete supported documents and outputs using available product controls. Account or broader deletion requests may be sent to the address below. Following a valid request or account termination, information may remain for a limited period in backups, security logs, billing records, or records we must retain by law. We may retain de-identified information that can no longer reasonably be associated with a person or matter.

8. Security and confidential legal materials

We use administrative, technical, and organizational safeguards designed to protect personal information. These include encrypted transmission, password hashing, authenticated access, and application permissions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. See our Security page for current public details.

Firms remain responsible for evaluating whether the Service is appropriate for a matter and for complying with privilege, confidentiality, protective orders, client consent, and professional-responsibility requirements. Using LitiGenie does not itself establish or guarantee attorney-client privilege or work-product protection. Do not submit confidential client materials through demo, pilot, advisor, careers, or general contact forms.

9. Your choices and requests

Depending on your relationship with us and applicable law, you may request access to, correction of, or deletion of personal information; obtain information about our data practices; or object to or restrict certain processing. You may also unsubscribe from promotional email using the instructions in the message. Service and legal notices may still be sent when necessary.

Submit a request to privacy@litigenie.com. We may need to verify your identity and authority before completing a request. If information was submitted by a firm or other organization, we may refer the request to that organization. We will not discriminate against a person for exercising an applicable privacy right.

10. California privacy disclosures

California residents may have rights to know, access, correct, or delete personal information and to receive information about categories of information collected, sources, purposes, and disclosures. Where California law applies, authorized agents may submit requests subject to verification of their authority. We do not knowingly sell personal information, and we do not knowingly sell or share the personal information of people under 16.

The categories described in Section 2—including identifiers, professional information, commercial information, internet or electronic activity, and potentially sensitive case, health, authentication, or account information—may have been collected and disclosed for the business purposes described in Sections 3 and 5. These disclosures are provided for transparency and do not concede that every privacy law applies to LitiGenie in every context.

11. Children

The Service is intended for legal professionals and authorized adult users, not children under 18. We do not knowingly collect personal information directly from children through account registration or marketing forms. Case materials may contain information about minors when submitted by an authorized legal professional; that information is processed as Customer Data on the submitting organization's instructions.

12. United States processing

LitiGenie is based in the United States, and information may be processed and stored in the United States and other locations where our providers operate. Those locations may have different privacy laws than your jurisdiction. Any additional international-transfer terms required for an organization should be addressed in its written agreement with us.

13. Changes to this Policy

We may update this Privacy Policy as our Service and practices change. We will post the revised Policy and update the effective date. If a change materially affects how we use personal information, we will provide additional notice through the Service, by email, or another appropriate method.

14. Contact

CFOCrew LLC operates LitiGenie from Orange County, California. For privacy questions or requests, email privacy@litigenie.com. For legal notices concerning the Service, email legal@litigenie.com.