Privacy Policy

This Privacy Policy explains how CounselyAI ("CounselyAI", "we", "us"), operated by Tannous Investment LTD, collects, uses, and protects information when you use our website and application (the "Service").

We collect the following categories of information:

• Account information — your name, email address, firm name, role, and password (stored in hashed form) when you or your firm register.
• Client and case data you provide — client records, case details, calendar entries, invoices, and similar information your firm enters or asks the assistant to create.
• Documents you upload — files you attach or send to the assistant, stored so they can be retrieved, searched, and (where you request it) drafted or revised.
• Conversations — messages exchanged with the assistant over WhatsApp or the web, kept so the assistant has context and your firm has a record of what it did.
• Usage data — basic technical information generated by using the Service (e.g. request timestamps, error logs) used to operate and maintain it.

CounselyAI does not use cookies for tracking or advertising, and does not currently use third-party analytics services. Sign-in is handled using secure tokens stored in your browser's local storage rather than cookies. See our Cookie Policy for detail.

CounselyAI uses third-party AI models to understand requests, answer questions, and draft or revise text. Content relevant to a request (such as a message, a document's extracted text, or retrieved legal sources) is sent to our AI provider to generate a response. This processing is used to operate the Service, not to train the provider's general-purpose models on your data beyond what our provider agreement specifies.

We rely on a small number of third-party services to operate CounselyAI, including:

• An AI model provider, to power the assistant's understanding and responses.
• WhatsApp / Meta's Cloud API, if your firm uses the WhatsApp channel.
• Cloud infrastructure and object storage, to host the Service and store documents securely.

Each of these providers processes data only as needed to provide their part of the Service.

We retain account, client, case, document, and conversation data for as long as your firm's account is active, or as long as needed to provide the Service and meet legitimate business or legal record-keeping needs. If your firm closes its account, we will delete or anonymize data within a reasonable period, except where retention is required by law or legitimate business need.

Each firm's data is kept in an isolated, access-controlled tenant, access within a firm is governed by staff roles, and connections to the Service use HTTPS encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, or request deletion of your personal information. Most account and client data can be managed directly within the application; for anything else, contact us using the details below.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Questions about this Privacy Policy can be sent to hello@counselyai.com.