1. Introduction
Echelix, Inc. ("Echelix," "we," "our," or "us") is committed to protecting the privacy and confidentiality of information provided by users of Cassi, our AI-powered legal assistant platform (the "Service"). This Privacy Policy describes how we collect, use, store, and protect information when you use our Service.
By using Cassi, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, law firm name, bar admission details, billing information
- Professional Information: Practice areas, case information, client data entered through Clio integration
- Meeting Data: Audio recordings, transcripts, participant information, meeting notes
- Communication Data: Messages, support requests, feedback
2.2 Information Collected Automatically
- Usage Data: How you interact with Cassi, features used, time spent
- Technical Data: IP address, browser type, device information, operating system
- Log Data: Access times, pages viewed, actions taken within the Service
2.3 Information from Third Parties
Clio Integration Data: Matter information, client data, time entries, contacts, and other legal practice management data accessed through your Clio account.
Meeting Platform Data: Information from integrated video conferencing platforms.
3. How We Use Your Information
We use your information to:
- Provide and improve the Cassi Service
- Transcribe meetings and generate action items
- Create contacts, matters, and time entries in your Clio account
- Provide meeting intelligence and legal assistance
- Process payments and manage your subscription
- Communicate with you about the Service
- Ensure security and prevent fraud
- Comply with legal obligations
4. Attorney-Client Privilege and Confidentiality
4.1 Privilege Protection
We understand the critical importance of attorney-client privilege. Cassi is designed to act as your agent in processing confidential legal information. We implement technical, administrative, and physical safeguards to protect privileged communications.
4.2 Confidential Information Handling
- All client information is treated as confidential
- Data is encrypted in transit and at rest
- Access is limited to authorized personnel on a need-to-know basis
- We do not use your confidential information for training AI models
5. Data Storage and Retention
5.1 Temporary Storage
- Meeting recordings and transcripts are stored temporarily in Cassi
- All confidential information is automatically deleted after 30 days
- Processed results are written to your Clio account as the system of record
5.2 Account Termination
Upon termination of your subscription, all data stored in Cassi is immediately deleted. Data previously written to Clio remains in your Clio account. We retain minimal account information as required by law.
6. Data Sharing and Disclosure
6.1 We Do Not Sell Your Data
We do not sell, rent, or trade your personal or confidential information to third parties.
6.2 Limited Sharing
We may share information only:
- With your explicit consent
- To comply with legal obligations or court orders
- To protect our rights, property, or safety
- With service providers under strict confidentiality agreements
- In connection with a business transfer (with advance notice)
6.3 Clio Integration
Data processed by Cassi is written directly to your Clio account using your credentials, maintaining your control over all legal practice data.
7. Security Measures
We implement industry-standard security measures including:
- End-to-end encryption for data transmission
- Encryption at rest using AES-256
- Multi-factor authentication
- Regular security audits and penetration testing
- Employee background checks and confidentiality agreements
- Secure hosting on Microsoft Azure with SOC 2 compliance
8. Your Rights and Choices
You have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Opt out of marketing communications
- Withdraw consent where applicable
- Request data portability
To exercise these rights, contact us at privacy@echelix.com.
9. Third-Party Services
9.1 Clio Integration
Our integration with Clio is governed by Clio’s Terms of Service and Privacy Policy. We access only the minimum data necessary to provide our Service.
9.2 Other Integrations
We may integrate with video conferencing platforms and other legal technology services. These integrations are subject to their respective privacy policies.
10. International Transfers
If you access our Service from outside the United States, your information may be transferred to, stored, and processed in the United States. We implement appropriate safeguards to protect your information in accordance with applicable law.
11. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.
12. California Privacy Rights
12.1 CCPA Rights
California residents have additional rights under the CCPA:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt out of the sale of personal information
- Right to non-discrimination
12.2 We Do Not Sell Personal Information
We do not sell personal information and have not sold personal information in the past 12 months.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or through the Service. Your continued use after such notification constitutes acceptance of the updated policy.
14. Contact Information
For questions about this Privacy Policy or our privacy practices, contact us:
Echelix, Inc.
Email: privacy@echelix.com
Address: 1141 E. Glendale Ave #1004 Phoenix, AZ 85020
This Privacy Policy is designed to comply with applicable privacy laws including CCPA, and industry best practices for legal technology services.