Privacy Policy

Data Accessed

If you choose to integrate Google Drive or Google Auth, our application accesses your identity (email/name) strictly for authentication, and accesses specific files (e.g., PDFs, Word documents) only after you explicitly select them via the Google Picker interface.

Data Usage

We use this data strictly to authenticate your account and to attach the explicitly selected files to your respective legal matter within MyAdvoMate. This assists you in reviewing, drafting, or archiving case documents directly from your Google Drive.

Data Sharing

Google user data obtained through APIs is not shared with third-party data brokers. It is used strictly for application functionality and is only accessible to you and authorized firm members who have permission to view your matters.

Data Storage & Protection

Selected files are securely transferred and stored in encrypted cloud storage environments (Firebase). Strict access-control rules enforce that retrieved data remains isolated and only visible to authorized system members.

Data Retention & Deletion

Imported files are retained within the system solely for the active duration of the matter. Users can manually delete any imported file from the matter dashboard. If an account is deleted, all retained Google data associated with the account is permanently destroyed.

Account and identity data

Name, email address, phone number, role, firm details, bar council number, city, state, country, and account credentials handled by Firebase Authentication.

Purpose: Account creation, sign-in, profile setup, subscription management, and security.

Retention: Active account period and up to 3 years after closure unless a longer period is legally required.

Matter and client data

Client names, phone numbers, emails, matter descriptions, court details, CNR numbers, case notes, hearing metadata, timesheets, invoices, and uploaded records.

Purpose: Legal practice management, collaboration, reminders, client communication, invoicing, and portal access.

Retention: Until deleted by the account owner or account deletion is completed, subject to legal retention obligations.

Documents, recordings, and transcripts

Uploaded files, audio recordings, transcripts, extracted text, and document analysis outputs.

Purpose: Document storage, review, drafting, transcription, AI summaries, and matter history.

Retention: Until deleted by the user, matter owner, or account deletion workflow.

Billing and payment data

Plan selections, subscription status, invoice settings, invoice records, payment metadata, and payment processor identifiers.

Purpose: Subscription billing, tax invoicing, and payment reconciliation.

Retention: Generally up to 7 years where financial and tax records must be preserved.

Security, audit, and usage data

IP addresses, client portal sessions, audit logs, token usage logs, device/browser metadata, and support records.

Purpose: Fraud prevention, abuse monitoring, service diagnostics, security investigations, and dispute handling.

Retention: Short-lived sessions are removed automatically where possible; audit and usage logs are retained only as needed for security, support, billing, and compliance.