This Privacy Policy describes how Lawnova ("Lawnova", "we", "us") collects, uses, and discloses information when you use VerdictPilot (the "Service") available at trial.lawnova.pro. VerdictPilot is operated by Lawnova in collaboration with Trial Lawyers and Legal Services Colorado LLC, its managing legal partner. This policy applies to visitors, registered users, and authorized firm members. By using the Service, you agree to the practices described here.
1. Information We Collect
Account information. When you register, we collect your email address, a hashed password, optional display name, and the firm or role you identify. Administrators may additionally record approval notes.
Case and simulation content. Matters, case descriptions, juror profiles, voir dire questions, and simulation results that you create or upload. In the self-hosted configuration, this content is processed only by local models and never leaves your network.
Operational data. Server logs, IP address, user agent, request timing, and rate-limit counters used to secure the Service and diagnose issues.
Communications. Demo requests, support messages, and other correspondence you send us, including delivery metadata from our email provider.
2. How We Use Information
We use the information we collect to:
- Operate, maintain, and improve the Service and its AI features.
- Authenticate your account, enforce admin approval, and prevent abuse.
- Generate juror personas, voir dire prompts, and simulation outputs on your behalf, using the AI provider you have configured.
- Communicate with you about account status, security, and platform updates.
- Comply with legal, regulatory, or court-ordered obligations.
3. AI Processing and Privileged Material
VerdictPilot supports multiple AI providers. When Ollama is configured for local inference, all model execution happens inside your own environment and no case content leaves that environment. When you elect to use a third-party provider (for example OpenAI, Anthropic, or Google), prompts are transmitted to that provider under their contractual terms; we do not retain that content ourselves beyond what is strictly necessary to return the response to you.
Do not submit information you are not authorized to disclose. You are responsible for ensuring that your use of the Service complies with your obligations of confidentiality, privilege, and professional conduct.
4. How We Share Information
We do not sell your personal information. We share it only in the limited circumstances below:
- Service providers that support hosting, email delivery, and error reporting, bound by contractual confidentiality obligations.
- AI providers you explicitly configure, solely for the purpose of generating the results you request.
- Legal requirements such as valid court orders, subpoenas, or to protect rights, safety, and property.
- Business transfers in the event of a merger, acquisition, or asset sale, subject to the protections of this policy.
5. Cookies and Sessions
We use a single authentication cookie (auth-token), marked HttpOnly, Secure, and SameSite=Lax, to maintain your signed-in session. This cookie is strictly necessary for the Service to function and is cleared when you sign out. We do not use third-party advertising cookies.
6. Data Retention
Account records are retained for as long as your account is active. Cases, jurors, and simulations persist until you delete them. Operational logs are retained for a rolling 90-day window for security and troubleshooting. You may request deletion of your account and associated content at any time by writing to we@lawnova.pro.
7. Security
We apply administrative, technical, and physical safeguards appropriate to the sensitivity of legal work product, including TLS for data in transit, encrypted storage for data at rest, hashed passwords (bcrypt), rate-limited authentication endpoints, and an administrator approval workflow before new accounts gain Service access. No method of transmission or storage is completely secure; if you learn of a security issue, please email us immediately.
8. Your Rights
You may access, correct, export, or delete the information we hold about you by contacting us. Depending on your jurisdiction, you may have additional rights under laws such as the GDPR, UK GDPR, or the CCPA/CPRA. We will honor verified requests within a reasonable time frame and at no cost.
9. International Transfers
The Service is hosted in the United States. If you access it from outside the U.S., your information will be processed in a country whose data protection laws may differ from your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
10. Children
The Service is intended for legal professionals and is not directed to individuals under 18. We do not knowingly collect information from children.
11. Changes to This Policy
We may update this Privacy Policy as the Service evolves. Material changes will be communicated through the Service or by email. The "Last updated" date above reflects the current version.
12. Contact
Questions or requests relating to this Privacy Policy may be directed to we@lawnova.pro.