Privacy Policy

Our commitment: YesCounsel does not sell your data, does not use your data for advertising, and does not train AI models on your documents or client information. Your data is yours -- always.

Account Information: When you create an account, we collect your name, email address, firm name, and billing information. This information is necessary to provide and manage the Service.

Usage Data: We collect information about how you interact with the Service, including pages visited, features used, and session duration. This data is anonymized and used to improve the platform.

Your Content: Documents, case data, client information, and other content you upload to the platform remain your property. We process this data solely to provide the Service and never access it for any other purpose without your explicit consent.

Technical Data: We automatically collect device type, browser type, IP address, and operating system information for security monitoring and Service optimization.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send billing-related communications
• Send service-related notifications (e.g., security alerts, maintenance windows)
• Respond to your requests, comments, and questions
• Monitor and prevent fraud, abuse, and security threats
• Generate anonymized, aggregated analytics to improve the platform

We do not use your information to: sell or share with advertisers, train machine learning models, or profile individual users for marketing purposes.

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Service Providers: We use vetted third-party providers (e.g., cloud hosting, payment processing) who process data on our behalf under strict contractual obligations.
• Legal Requirements: We may disclose information if required by law, subpoena, or court order, or if necessary to protect the rights, property, or safety of YesCounsel, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred. We will notify you before any such transfer and offer you the opportunity to delete your data.

We implement industry-leading security measures to protect your data:

• AES-256 encryption at rest for all stored data
• TLS 1.3+ encryption for all data in transit
• Multi-factor authentication available for all accounts
• Role-based access controls with audit logging
• Regular penetration testing by independent security firms
• SOC 2 Type II certification in progress

For more detail, see our Security page.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (“right to be forgotten”).
• Portability: Request your data in a structured, machine-readable format.
• Restriction: Request that we limit processing of your data in certain circumstances.
• Objection: Object to the processing of your data for specific purposes.

To exercise any of these rights, contact us at privacy@yescounsel.ai. We will respond to all requests within 30 days.

We use strictly necessary cookies to operate the Service (e.g., session management, authentication). We do not use third-party advertising cookies or tracking pixels.

We use anonymized analytics to understand how the Service is used. You can disable analytics tracking in your account settings at any time.

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@yescounsel.ai and we will promptly delete it.

Your data may be processed in jurisdictions outside your country of residence. Where we transfer data internationally, we use Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to ensure your data receives an adequate level of protection.

For firms with specific data residency requirements, we offer region-specific hosting options. Contact our team for details.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: