Legal
Effective 2026. Built for one of the most sensitive journeys a person can make.
TLS in transit and AES at rest protect your data end to end.
API keys and credentials live in a dedicated vault, never exposed to the app.
Each user's cases and documents are siloed — no cross-user access.
Secure sessions and role-based access via a managed identity provider.
Administrative actions are role-gated and reviewable.
We never sell your data or use it to train external models.
We collect only what your case requires: the account email and name you sign up with, and the documents, form answers, and case details you choose to upload. We do not access your financial accounts, browser history, or device location.
Your information is used solely to run your immigration workspace — organizing documents, generating checklists and packets, filling official forms, and preparing you for interviews. We never sell your data, and we never use your data to train external models.
Security is engineered into the platform from the ground up. All network traffic is encrypted in transit with TLS. Databases are encrypted at rest with industry-standard AES. Each user's records are isolated with row-level access control — you see only your own cases and documents, and no other user can reach them. Authentication is managed through a hardened identity provider with secure session handling. Secrets and integration keys are stored in a dedicated vault, never exposed to the client. Administrative actions are role-gated and auditable.
Esther is the in-app AI lawyer assistant. Every conversation with Esther is private to your account: it is created and stored under your signed-in identity, isolated with the same row-level access controls as your cases, and encrypted in transit and at rest. Esther can only read your own cases, documents, and forms — never another user's. Notes Esther keeps to personalize her guidance (such as your goals or timeline) are stored in your account only; you can ask her at any time to list or delete them, and you can start a fresh conversation from the chat window. Esther never sends personal identifiers (names, receipt or A-numbers, passport or Social Security numbers) to external research sources, and your conversations are never sold or used to train external models. Esther provides general information, not legal advice.
We keep your case data for as long as your account is active so you can return to it at any time. You may delete a case or any document at any time. When you close your account, your personal case data is removed within 30 days.
We share data only with the infrastructure providers that host and secure the application, under contracts that require them to protect it to the same standard. We do not share your information with advertisers, data brokers, or third parties for their own purposes. Where you connect a third-party integration, you authorize that connection directly and can revoke it at any time.
You can view, export, correct, or delete your information at any time from within your workspace or by contacting us. If you are a resident of California, the EU, or the UK, you have additional rights under applicable privacy law, including the right to know, delete, and opt out of the sale or sharing of personal information.
This service is not directed to children under 16, and we do not knowingly collect their personal information. Minors included as beneficiaries on a case are represented only through the petitioner's account.
We may update this policy as our practices evolve. Material changes will be posted here with an updated effective date. Continued use after a change means you accept the updated policy.
This platform provides organizational tools and guidance, not legal advice.