1. Scope of This Privacy Policy

This Privacy Policy applies when Angus acts as a business, controller, or other entity determining the purposes and means of processing personal information, such as when we process information about:

• website visitors;
• prospective customers;
• account holders;
• Authorized Users;
• billing contacts;
• customer administrators;
• support contacts;
• newsletter recipients;
• sales contacts; and
• individuals who communicate with Angus.

For Customer Data submitted to Angus4Law by a law firm, organization, attorney, legal department, or other customer, Angus generally processes personal information on the customer’s behalf and under the customer’s instructions. In that context, Angus generally acts as a service provider or processor, while the customer is responsible for determining whether it has the authority and legal basis to provide the information to Angus.

For example, a law firm may upload information about clients, opposing parties, witnesses, employees, experts, judges, medical providers, or other individuals. The law firm—not Angus—generally determines the legal purpose for that processing and is responsible for its own confidentiality, privacy, professional, and client-consent obligations.

2. Personal Information We Collect

The personal information Angus collects depends on how a person interacts with the Platform.

2.1 Account and Contact Information

We may collect:

• name;
• email address;
• telephone number;
• law firm, company, organization, or employer name;
• job title or role;
• account username;
• authentication information;
• account preferences;
• support and communication preferences; and
• information provided when communicating with Angus.

2.2 Subscription and Billing Information

When a customer purchases a subscription, tokens, or other services, Angus may receive or process:

• subscription plan information;
• seat, user, or license information;
• billing contact information;
• billing address, if provided;
• subscription status;
• transaction history;
• invoice records;
• payment status;
• token purchases;
• usage-limit information; and
• Stripe customer or transaction identifiers.

Payment-card information is processed by Stripe. Angus does not receive or store complete payment-card numbers.

2.3 Customer Data and Matter Data

Customers may submit information through Angus4Law, including:

• documents and records;
• extracted document text;
• document metadata;
• legal research materials;
• prompts and chat messages;
• legal drafts;
• notes;
• facts;
• timelines;
• evidence records;
• citations;
• reports;
• Case Memory;
• Custom AI Modes;
• user-created reasoning configurations;
• attorney or firm work product;
• client, matter, case, project, or engagement information;
• matter-level billing rates;
• matter-level usage records; and
• generated Outputs.

Customer Data may contain personal information, sensitive personal information, confidential information, attorney-client privileged information, work product, medical information, employment information, financial information, criminal-record information, or other sensitive content depending on what the customer chooses to submit.

2.4 Usage, Device, and Log Information

We may automatically collect certain information about use of the Platform, including:

• IP address;
• browser type;
• operating system;
• device information;
• log-in activity;
• session information;
• date and time of access;
• feature use;
• workflow activity;
• token usage;
• account and administrative actions;
• error, diagnostic, and security information;
• API or integration activity, where applicable; and
• audit-log information.

For Angus4Law, usage information may be associated with a user, matter, workflow, draft, session, research activity, or subscription plan.

2.5 Website Analytics Information

On public Angus website pages, Angus uses Google Analytics to collect information about website use, such as:

• pages viewed;
• referring URL;
• approximate location derived from IP address;
• browser and device information;
• time spent on pages;
• website interactions; and
• general traffic and performance information.

Google Analytics is not installed in, and does not track activity within, the authenticated Angus4Law application.

Angus does not currently use Google Signals. Angus does not intentionally use Google Analytics for targeted advertising or cross-context behavioral advertising.

2.6 Communications Information

If you contact Angus, subscribe to communications, request a demonstration, submit a support request, or otherwise communicate with us, we may collect:

• the content of your communications;
• contact details;
• records of communications;
• support-request information;
• account information associated with the request; and
• information necessary to respond to the request.

3. How We Use Personal Information

Angus may use personal information for the following purposes.

3.1 Provide and Operate the Platform

We use personal information and Customer Data to:

• create and manage accounts;
• authenticate users;
• provide Platform functionality;
• process documents and extracted text;
• organize matter-related content;
• operate Case Memory and persistent matter context;
• retrieve authorized context for user-requested workflows;
• generate requested Outputs;
• support document analysis, drafting, writing review, evidence work, timeline work, citation work, research workflows, and matter organization;
• process Custom AI Modes and user configurations;
• provide exports and reports;
• administer subscriptions;
• track plan limits and usage;
• generate matter-level usage reports; and
• provide requested customer support.

3.2 Process Payments and Administer Subscriptions

We use billing and subscription information to:

• process payments through Stripe;
• administer subscriptions, renewals, cancellations, and token purchases;
• issue receipts, invoices, or transaction confirmations;
• manage payment status;
• respond to billing requests; and
• prevent fraud or payment abuse.

3.3 Maintain Security and Prevent Misuse

We may use personal information to:

• protect accounts and credentials;
• detect, investigate, prevent, and respond to security incidents;
• investigate suspected fraud, abuse, or violations of our agreements;
• enforce plan, usage, and access limits;
• maintain audit logs;
• diagnose technical issues; and
• protect Angus, customers, users, providers, and third parties.

3.4 Communicate With You

We may use personal information to:

• provide support;
• send account, billing, product, security, and service notices;
• respond to inquiries;
• send newsletters, product announcements, and marketing communications where permitted by law; and
• administer customer, sales, or partnership relationships.

You may opt out of promotional emails by using the unsubscribe link in the message or contacting us at privacy@angus-intelligence.com. You cannot opt out of essential account, billing, security, legal, or service communications while maintaining an active account.

3.5 Comply With Law and Protect Rights

We may use or disclose personal information to:

• comply with law, subpoena, court order, legal process, or governmental request;
• protect the rights, property, security, and safety of Angus, customers, users, or others;
• establish, exercise, or defend legal claims;
• enforce our agreements; and
• support a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction.

3.6 Aggregated and De-Identified Information

Angus may create and use aggregated, statistical, or de-identified information for lawful business purposes, including security, service reliability, capacity planning, operational analysis, and Platform administration.

Angus will not use aggregated or de-identified information to identify a customer or disclose Customer Data in identifiable form.

4. AI Processing and No-Training Commitment

Angus4Law includes AI-enabled workflows. Depending on the feature used, Angus may process:

• user prompts;
• selected document excerpts;
• extracted facts;
• Case Memory;
• research results;
• drafts;
• prior Outputs;
• Custom AI Mode instructions; and
• other context selected for the requested workflow.

Angus uses retrieval, ranking, authorization, and context-selection processes intended to provide information reasonably needed for a requested workflow. External AI providers do not receive unrestricted access to the entire Angus4Law database or an unrestricted corpus of Customer materials merely because an AI-enabled feature is used.

Angus currently uses commercial/API services provided by OpenAI and Anthropic for certain AI-enabled functions.

Angus does not use Customer Data, including uploaded materials, Matter Data, prompts, Case Memory, Custom AI Modes, or Outputs, to:

• train Angus models;
• fine-tune models;
• train shared or general-purpose models;
• create shared model-evaluation datasets;
• create shared benchmark datasets;
• create public examples;
• conduct public demonstrations;
• market Angus products or services;
• train employees; or
• provide another customer with access to Customer Data,

unless Angus obtains the Customer’s express written authorization for that specific use.

OpenAI and Anthropic commercial/API services do not use Angus API inputs and outputs to train their generally available models by default under their applicable commercial/API terms. However, Angus does not currently represent that Zero Data Retention is enabled. Authorized AI service providers may retain inputs and outputs for limited periods under their applicable security, abuse-prevention, safety, legal-compliance, and service-retention practices.

For additional information, please review the Angus AI Data Use and No-Training Notice.

5. How We Disclose Personal Information

Angus may disclose personal information as follows.

5.1 Service Providers and Subprocessors

We may disclose personal information to authorized service providers and subprocessors that help us operate the Platform, including providers of:

• hosting, cloud infrastructure, database services, and backups;
• content delivery and frontend infrastructure;
• AI inference services;
• payment processing;
• email and communications;
• support;
• analytics;
• security;
• monitoring;
• authentication;
• document processing;
• data storage; and
• professional services.

Current key providers may include:

Angus authorizes service providers to process personal information only as necessary to provide services to Angus, comply with legal obligations, protect security, or as otherwise permitted by applicable agreements and law.

5.2 Customer-Authorized Third-Party Services

Customers may connect authorized third-party services, including legal-research sources, through the Platform.

Angus4Law does not provide or sublicense a legal-research database or licensed legal content. Where the Platform supports a customer-authorized research integration, the customer is responsible for its provider credentials, subscription, rights, and compliance with applicable third-party terms.

Information may be sent to the customer’s selected research provider as necessary to perform the requested workflow.

5.3 Legal, Security, and Compliance Disclosures

We may disclose information where reasonably necessary to:

• comply with applicable law;
• respond to lawful legal process;
• protect against fraud, misuse, or security threats;
• enforce our agreements;
• protect rights, safety, or property; or
• establish, exercise, or defend legal claims.

5.4 Business Transfers

We may disclose personal information in connection with a potential or actual merger, acquisition, financing, corporate reorganization, sale of assets, bankruptcy, or other transaction involving all or part of Angus’s business.

Where required by law, we will take reasonable steps to provide notice of a material change in ownership or control affecting personal information.

5.5 At Your Direction

We may disclose personal information when you direct us to do so or when disclosure is necessary to provide a service or integration that you request.

6. We Do Not Sell or Share Personal Information for Targeted Advertising

Angus does not sell personal information.

Angus does not share personal information for cross-context behavioral advertising or targeted advertising.

Angus does not permit advertising trackers in the authenticated Angus4Law application.

7. Cookies and Similar Technologies

Angus uses cookies and similar technologies on its public website for necessary website functionality, security, and analytics.

7.1 Essential Cookies

Some cookies are necessary to operate the website, support security, remember settings, prevent fraud, or provide requested functionality. These cookies may remain active because they are necessary for the website to function.

7.2 Analytics Cookies

Angus uses Google Analytics on public website pages to understand website traffic, user interactions, and website performance.

Google Analytics is not used in the authenticated Angus4Law application.

Where required by applicable law, Angus will seek consent before placing non-essential analytics cookies. Users may manage cookie choices through Angus’s available cookie-consent or preference tools.

For more information, review the Angus Cookie Notice.

8. Data Retention

Angus retains personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Platform, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and preserve business and financial records.

8.1 Active Accounts

We generally retain Customer Data during the active subscription or service period, subject to customer-directed deletion and available Platform controls.

8.2 Matter Deletion

When an authorized user deletes a matter through available Platform controls, Angus is designed to permanently delete active matter content associated with that matter, including, as applicable:

• extracted document text;
• document records;
• Case Memory;
• associated embeddings and vectors;
• reports;
• chats and matter-associated transcripts;
• drafts and drafting conversations;
• citations;
• evidence, timeline, and discovery workflow records;
• matter-associated Custom AI Mode relationships; and
• related active matter workflow data.

Angus may retain limited billing, accounting, usage, audit, security, legal-compliance, dispute-resolution, and financial records associated with a deleted matter.

8.3 Account Cancellation or Termination

Following cancellation or termination, Angus will make Customer Data available for up to ninety (90) days for retrieval or export.

After that period, Angus will delete or de-identify Customer Data from active systems, except for limited information retained for billing, accounting, audit, security, legal compliance, dispute resolution, enforcement of agreements, and system integrity.

8.4 Backups

Deleted Customer Data may remain in provider-managed backups for up to ninety (90) additional days under the applicable backup lifecycle.

8.5 User-Level Data and Configurations

Certain user-level preferences, Custom AI Modes, reasoning profiles, or cross-matter learning records may be maintained separately from an individual matter during an active account.

Upon account-level deletion, Angus will delete or de-identify applicable Customer Data across the account, including persistent data outside individual matters, subject to the limited retention exceptions described in this Privacy Policy.

9. Original Source Files and Preservation Responsibilities

In the ordinary document-upload workflow, Angus4Law may extract and process text from an uploaded source file without retaining the original uploaded native or source file.

The Platform may retain extracted text, document metadata, page or Bates-range information where available, document chunks, generated reports, and other related Platform records.

Customers are responsible for preserving authoritative copies of original documents, native files, evidence, records, and materials subject to legal holds, preservation duties, chain-of-custody requirements, or records-retention obligations.

Angus4Law is not a substitute for:

• an evidentiary repository;
• a legal-hold system;
• a chain-of-custody system;
• a native-file preservation system;
• an electronic-discovery preservation system; or
• a records-retention system.

10. Security

Angus uses administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

10.1 Encryption in Transit

Angus uses Transport Layer Security (“TLS”) for data transmitted between:

• browsers and the Platform;
• Platform services;
• application programming interfaces;
• databases; and
• authorized AI service providers.

10.2 Managed Infrastructure

Customer Data is stored in managed infrastructure, including infrastructure operated through Railway. Angus does not currently represent that it applies independent application-level encryption to all stored Customer content.

Storage-layer encryption and backup encryption, where provided, are managed by the applicable infrastructure provider.

10.3 Security Limitations

No system, network, service provider, or transmission method is completely secure. Angus cannot guarantee absolute security of personal information or uninterrupted, error-free Platform operation.

Customers are responsible for securing account credentials, managing Authorized Users, protecting their own devices, preserving authoritative original records, and using the Platform in accordance with their legal and professional obligations.

11. International Users and Data Transfers

Angus is based in the United States.

As of the effective date of this Privacy Policy:

• Angus production services and database infrastructure are deployed in California, United States;
• server-side Vercel functions are deployed in Washington, D.C., United States; and
• public website content may be delivered using globally distributed content-delivery infrastructure.

The Platform may be accessed from outside the United States. Customer Data and personal information may be transferred to, processed in, or stored in the United States and other locations where Angus or its authorized service providers operate.

Privacy and data-protection laws in the United States or other processing locations may differ from the laws of the location where a user resides or where information originated.

Customers are responsible for ensuring that their use of the Platform, submission of Customer Data, and international data transfers comply with applicable law, professional obligations, contractual commitments, and data-transfer requirements.

12. Your Privacy Choices and Rights

Depending on applicable law and the nature of Angus’s role in processing information, individuals may have rights to request:

• confirmation of whether Angus processes their personal information;
• access to personal information;
• correction of inaccurate personal information;
• deletion of personal information;
• a copy of personal information in a portable format;
• restriction of certain processing;
• opt-out of marketing communications; or
• information concerning Angus’s data practices.

To submit a privacy request, email:

privacy@angus-intelligence.com

Please include enough information for Angus to understand and verify the request. Angus may request additional information to verify identity, authority, or the nature of the request.

Angus will respond to verifiable privacy requests within the period required by applicable law.

12.1 Requests Concerning Customer Data

If Angus processes personal information on behalf of a law firm, organization, or other customer, Angus may direct the individual to contact that customer. The customer is generally responsible for responding to privacy requests relating to Customer Data for which it is the controller or business.

Angus will provide reasonable assistance to customers as required by applicable law or an applicable DPA.

12.2 Marketing Opt-Out

You may opt out of promotional emails by using the unsubscribe link in a marketing email or contacting privacy@angus-intelligence.com.

13. Children’s Privacy

The Platform is not directed to children under eighteen (18) years of age.

Angus does not knowingly collect personal information directly from children under 18. If you believe a child has provided personal information to Angus without appropriate authorization, contact us at privacy@angus-intelligence.com.

14. Third-Party Websites and Services

The Platform may include links to or integrations with third-party websites, services, legal-research providers, payment providers, or other resources.

Angus does not control third-party privacy practices. This Privacy Policy does not apply to third-party services, and Angus encourages users to review the privacy policies and terms of each third party before providing information or connecting an integration.

15. Changes to This Privacy Policy

Angus may update this Privacy Policy from time to time to reflect changes in the Platform, legal requirements, data practices, providers, or business operations.

If we make a material change, we may provide notice through the Platform, by email, by posting an updated Privacy Policy, or through another reasonable method.

The “Last Updated” date at the top of this Privacy Policy identifies when it was most recently revised.

16. Contact Us

For privacy questions, requests, or concerns, contact:

Angus Intelligence, LLC
5900 Balcones Drive, Suite 100
Austin, Texas 78731
United States

Privacy: privacy@angus-intelligence.com
Legal: legal@angus-intelligence.com
Support: support@angus-intelligence.com
Security: security@angus-intelligence.com
General: info@angus-intelligence.com
Telephone: 310.431.9547