Privacy Policy
1. What we collect
Account information you provide (name, work email, password), the documents and matter records you upload, the questions you ask and the answers Whereas returns, and basic usage data (login times, which features you use).
2. How we use it
To provide the product: parsing and answering questions about your documents and maintaining your account and its history. We do not sell your data, and we do not use your documents, questions, or matter data to train any AI model, ours or a third party's.
3. Who we share it with
Two subprocessors currently handle your data on our behalf: Supabase (database, file storage, and authentication) and Anthropic (the language model that generates answers to your questions). Anthropic's API terms do not permit using API inputs or outputs to train its models. We do not share your data with any other third party except as required by law.
4. Data isolation between client firms
If your account works across multiple client firms (the paralegal-service use case), each client firm's documents and matter data are walled off from every other client firm on the same account, enforced at the database level, not just in the interface.
5. Retention
Your documents, questions, and matter history are retained for as long as your account is active. You can request deletion of a specific document, matter record, or your entire account at any time; see Contact below.
6. Security
Data is encrypted in transit and at rest. Access to your account's data is scoped to your own account (and, where applicable, your own client firm) and enforced by database-level access policies, not just application-level checks. If we discover unauthorized access to your data, we will notify affected accounts promptly.
7. Cookies
Whereas uses a single session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.
8. Your rights
You can access, correct, export, or delete your account data at any time by contacting us. If you are located somewhere with a specific statutory right (for example, under GDPR or CCPA), that right applies in addition to, not instead of, what's described here.
9. Children's privacy
Whereas is a business tool intended for legal professionals and is not directed at, or knowingly used by, children.
10. Changes to this policy
If this policy changes in a material way, we'll notify active accounts by email before the change takes effect.
11. Contact
Questions about this policy, or a data access/deletion request, can be sent to info@getwhereas.com.