Data Policy
Last updated: [[EFFECTIVE DATE]]
Provided for transparency. This page is not legal advice and does not create an attorney–client relationship; consult your own counsel.
This page describes how the hosted Metasystems service handles your data and the third-party sub-processors it relies on. It complements our Privacy Policy.
Sub-processors
We use the following providers to operate the service. Each receives only the data needed for its function.
| Provider | Purpose | Data it receives |
|---|---|---|
| Anthropic (Claude) | AI model that powers the assistant | Your prompts and case content during a session |
| Clerk | Authentication & identity | Name, email, organization |
| Stripe | Payments & subscriptions | Billing details, plan/customer metadata |
| Amazon Web Services | Hosting — DynamoDB (case data) & S3 (documents) | Your case content, encrypted at rest |
| CourtListener | Case-law & docket lookups | Your search queries |
| PACER | Federal court records (billed per use) | Your docket/case queries |
| People Data Labs | Participant / juror research enrichment | The identifiers you submit for lookup |
| U.S. Census Bureau | Venue demographics | Geographic queries (no personal data) |
| Plausible | Cookieless usage analytics | Aggregate page/event data, no personal identifiers |
Security
- Case data is owner-scoped in DynamoDB — each user or organization is isolated to its own partition.
- Generated documents are stored in S3 with server-side encryption; data is encrypted in transit (TLS).
- Participant/juror research results from People Data Labs are used to answer your request and are never cached, for freshness and privacy.
Enterprise agreements
Enterprise plans can add a Data Processing Agreement (DPA) and, where applicable, a Business Associate Agreement (BAA), plus custom data-retention terms.
Retention & deletion
You control your case content and can delete it at any time. On account deletion, we remove your content from active systems and purge it from backups on our routine backup cycle. Sub-processors retain data per their own policies for the data they receive.
Breach response
If we become aware of a security incident affecting your personal information, we will investigate and notify affected users and regulators as required by applicable law, including the Illinois Personal Information Protection Act (815 ILCS 530).
Contact
privacy@[[DOMAIN]], or Metasystems, Ltd., [[MAILING ADDRESS]].