On this page
- 1. Information we collect
- 2. How we use your information
- 3. AI processing & model training
- 4. Voice calls & recordings
- 5. Sensitive information
- 6. Cookies & analytics
- 7. Service providers we work with
- 8. Where your data is processed
- 9. How long we keep it
- 10. How we protect it
- 11. Your rights & choices
- 12. Quebec Law 25
- 13. Age requirement
- 14. Changes to this policy
1.Information we collect#
Account and profile details (name, email, language, country); the content you provide (your questions, uploaded documents, cases, and notes); voice-call audio and transcripts when you call our assistant; usage, device, and log data; and payment information, which is handled by Stripe (we never store full card numbers).
2.How we use your information#
To provide and operate the service: generate cited answers, transcribe and analyze calls and meetings, save your work, process payments, prevent fraud and abuse, provide support, and meet our legal obligations. We do not sell your personal information or use it for advertising.
3.AI processing & model training#
Your questions, documents, and call audio are processed by AI systems (ours and trusted third-party model providers) to generate answers. We do not use your private content (questions, documents, cases, or call recordings) to train public AI models, and our providers are contractually barred from doing so. We may use aggregated or de-identified data to improve quality. We do not make decisions producing legal effects about you by automated means alone.
4.Voice calls & recordings#
Calls with our phone assistant are handled by an automated AI system and are recorded and transcribed so we can answer you and improve the service. We tell you this at the start of each call; by continuing, you consent. Audio and transcripts are processed by our voice provider (Retell) and AI providers and may be processed outside Quebec and Canada under contractual safeguards. You can ask us to delete a call recording.
5.Sensitive information#
Legal questions can reveal sensitive details (health, finances, immigration, family). Please share only what you need to. We treat this information with heightened care, never sell it, and never use it for advertising.
7.Service providers we work with#
We share data only with vendors that process it on our instructions: Supabase (database and authentication), Vercel (hosting and analytics), Stripe (payments), Retell (voice calls), and large-language-model providers such as Google, OpenAI, and Anthropic (AI answers). Each is bound by confidentiality and data-protection terms.
8.Where your data is processed#
Your core account data is hosted in Canada. Some processing (notably AI model providers and voice calls) may take place in the United States or elsewhere. Before transferring personal information outside Quebec, we assess the transfer and rely on contractual and technical safeguards.
9.How long we keep it#
We keep your account data while your account is active. Chats, cases, meetings, and calls are kept until you delete them or up to 30 days after you close your account, after which they are deleted or de-identified. Some records (such as billing) are kept longer where the law requires.
10.How we protect it#
Encryption in transit and at rest, row-level database controls so each user reaches only their own data, least-privilege access for staff, audit logging, and regular security reviews.
11.Your rights & choices#
You can access, correct, delete, or export your personal information, withdraw consent, and object to certain uses, either from your account settings or by emailing privacy@courtstairs.com. We respond within the timelines the law requires. If you are in California or another US state, we do not sell or "share" your personal information, and you may request access or deletion.
12.Quebec Law 25#
We have a designated person responsible for the protection of personal information (our Privacy Officer), reachable at privacy@courtstairs.com. We apply privacy by default, collect only what we need, are transparent about AI and automated processing, support data portability, and will notify the Commission d’accès à l’information and affected individuals of any confidentiality incident that poses a risk of serious injury.
13.Age requirement#
CourtStairs is intended for adults. You must be at least 18 to use it, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us data, contact us and we will delete it.
14.Changes to this policy#
We may update this policy. We will post the new version with an updated date and, for material changes, notify you in the app or by email before they take effect.
Questions about your privacy?
Contact our Privacy Officer at privacy@courtstairs.com, or email support@courtstairs.com.