Privacy

Your account. Your email address. Your password is held by our authentication provider as a salted hash and is never visible to us. There is no third-party sign-in.

What you type and upload. The facts you describe, the questions you ask, the matters you create and any documents you attach. Assume that anything you paste into the product is stored.

Requests on this website. If you request access or write to us, the details you enter in that form and the time you sent it.

Usage records. A timestamped count of the analyses you run, so that allowances can be enforced and abuse spotted. No advertising trackers, no third-party analytics, no cookies beyond the ones that keep you signed in and remember your light/dark preference.

In a database hosted in Mumbai (AWS ap-south-1) — your data does not leave India at rest. Rows are scoped to your account. That is enforced twice: by the application on every request, and by row-level security in the database itself, which is switched on in production, so one account cannot read another’s matters or documents.

To answer a question, the text of that question, the passages retrieved for it and any document you attached are sent to two processors outside India: Anthropic (to draft the analysis) and OpenAI (to convert text into search vectors, to transcribe voice and dictation, and as an unseen backup for drafting when the primary is unavailable). Both are used under their commercial API terms, under which submitted content is not used to train their models.

We do not yet have zero-data-retention agreements with either processor. Not being used for training is not the same as not being kept: each may retain what is sent to it for as long as its own standard terms allow, and this policy does not promise otherwise.

Operational providers. The application is hosted on Vercel, in Mumbai. Account and billing emails are sent through Resend. Sentry receives error reports, built to leave out the text of questions, matters and drafts. An uptime monitor checks that the service is reachable. There is no session recording or replay.

Nothing is sold, and nothing is shared with anyone else — no advertisers, no data brokers, no other users.

This is a research aid in private testing, not a secure client file. Because there are no zero-data-retention agreements with the processors above, anything you send can be retained by them, outside India, under their standard terms. For a privileged or sensitive matter, bring the legal question rather than the client’s file: remove or change names, identifiers and other identifying facts, and do not attach unredacted client documents. The research loses nothing from an anonymised question. Whether to use any cloud tool with a client’s material remains your professional judgment.

Your matters and documents are kept until you delete them or ask us to close your account. A document you attach is deleted from storage once its extract is indexed; the extract stays in your matter. Email privacy@cicerro.com from your registered address and we will delete your account and everything attached to it within 30 days, and confirm when it is done. You can ask for a copy of your data the same way.

Traffic is encrypted in transit, data is encrypted at rest, access to the production systems is limited to the people who run CICERRO, and every request is authenticated. What is and is not yet in place is set out on the Security & data page.

The database is backed up daily and each backup is kept for 7 days. Point-in-time recovery is switched off, so a restore would return us to the last daily backup and up to a day of recent work could be lost.

No system is perfect; if data is ever exposed we will tell affected users directly rather than quietly. This notice has not yet been reviewed by a lawyer.

If this policy changes materially, testers are emailed before it takes effect. Questions, complaints or deletion requests: privacy@cicerro.com. For anything else: support@cicerro.com.