Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account information: Name, email address, and profile data provided during registration via Manus OAuth.
• Case information: Case titles, descriptions, facts, parties, and legal documents you enter into the platform.
• Documents: Files you upload for analysis (PDFs, Word documents, images).
• Communications: Messages you send to our AI chat assistant and support team.
• Payment information: Billing details are collected and processed by Stripe. We store only your Stripe Customer ID — we never see or store your full card number, CVV, or bank account details.

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent, and interaction patterns.
• Device information: Browser type, operating system, IP address, and device identifiers.
• Log data: Server logs including request timestamps, error logs, and performance metrics.
• Cookies: Session cookies for authentication. See Section 7 for details.

1.3 Information from Third Parties

• Manus OAuth: Basic profile information (name, email, user ID) provided by your Manus account upon login.
• Stripe: Subscription status, billing history, and payment method metadata (last 4 digits, card brand).

2. How We Use Your Information

We use the information we collect to:

We do not sell your personal information to third parties. We do not use your case information or legal documents to train AI models without your explicit consent.

3. How We Share Your Information

We share your information only in the following limited circumstances:

• Service providers: We share data with trusted vendors who help us operate the Service (Stripe for payments, Manus platform for hosting and AI inference, cloud storage providers). These vendors are contractually bound to protect your data.
• Legal requirements: We may disclose information if required by law, subpoena, court order, or governmental authority, or to protect the rights, property, or safety of ProSeAI, our users, or the public.
• Business transfers: If ProSeAI is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.
• With your consent: We may share your information for any other purpose with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:

• Account data: Retained until you delete your account.
• Case data and documents: Retained until you delete them or close your account.
• Chat history: Retained for 12 months, then automatically purged.
• Payment records: Retained for 7 years as required by tax and accounting laws.
• Usage logs: Retained for 90 days for security and debugging purposes.

To request deletion of your data, contact us at [email protected]. We will process deletion requests within 30 days, subject to legal retention requirements.

5. Your Rights

5.1 All Users

• Access a copy of the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Opt out of marketing communications at any time
• Export your case data and documents

5.2 California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising CCPA rights

To exercise your CCPA rights, submit a request to [email protected] with the subject line "CCPA Rights Request."

5.3 European Residents (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure / "right to be forgotten" (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object to processing (Article 21)
• Right to withdraw consent at any time

To exercise your GDPR rights, contact our Data Protection contact at [email protected]. You also have the right to lodge a complaint with your local supervisory authority.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• TLS/HTTPS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• JWT-signed session tokens with secure cookie flags
• Payment processing exclusively through PCI-DSS compliant Stripe
• Regular security reviews and dependency updates
• Access controls limiting employee access to user data

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

7. Cookies and Tracking

We use the following types of cookies:

Essential cookies are required for the Service to function and cannot be disabled. You may disable optional analytics cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 18, please contact us at [email protected].

9. International Data Transfers

ProSeAI is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States where our servers are located. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

For transfers from the EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for data transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date at the top. For significant changes, we will also send an email notification to registered users. We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: