1. Who We Are
Counsel is operated by a5u.ai. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services at a5u.ai.
For privacy inquiries, contact us at privacy@a5u.ai.
2. Information We Collect
We collect the following categories of information:
| Category | Examples |
|---|---|
| Account | Name, email address, password (hashed) |
| Case data | Jurisdiction, issue type, intake form answers, timeline events |
| Uploaded files | Leases, photos, and documents you upload to your case |
| Payment | Billing email, last 4 digits of card (Stripe handles full card data) |
| Usage | Pages visited, features used, browser type, IP address |
| Referrals | Referral code used when registering (if applicable) |
We do not collect Social Security numbers, driver’s license numbers, or other government-issued ID numbers.
3. How We Use Your Information
We use your information to:
- Provide, operate, and improve the Service
- Process payments and manage your subscription
- Generate document preparation worksheets based on your case data
- Send transactional emails (account confirmations, payment receipts)
- Respond to your support requests
- Detect and prevent fraud or abuse
- Comply with legal obligations
We do not use your case data to train AI models or share it with third parties for marketing purposes.
4. How We Share Your Information
We do not sell or rent your personal data. We share information only in the following limited circumstances:
- Service providers — Stripe (payments), Cloudinary (file storage), Resend (email delivery), and our hosting provider (Replit). Each is bound by confidentiality obligations.
- Partner program — if you registered via a referral link, we share your plan status (not personal details) with the referring partner solely for commission calculation.
- Legal compliance — if required by law, court order, or to protect the rights and safety of Counsel or others.
- Business transfer — in the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before it is subject to a different privacy policy.
5. File Storage and Security
Documents you upload are stored using Cloudinary, a secure cloud storage provider, using encrypted connections (TLS). Access to your files is restricted to your account only — no other users can view your uploads.
Your password is hashed using bcrypt and is never stored or transmitted in plain text. Payment information is handled entirely by Stripe and never stored on our servers.
While we take reasonable security measures, no system is completely secure. We encourage you to use a strong, unique password and to notify us immediately of any suspected unauthorized access.
6. Cookies and Tracking
We use the following cookies and similar technologies:
- Session cookies — required to keep you logged in during a browsing session
- Referral cookie — an HTTP-only cookie (30-day expiry) to track partner referral codes
- Analytics — we may use anonymized usage analytics to understand how the Service is used
We do not use third-party advertising cookies or cross-site tracking pixels.
7. Data Retention
We retain your account and case data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records, which are retained for 7 years per tax law requirements).
Uploaded files are deleted within 30 days of account deletion or upon your explicit request.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your account and associated data
- Portability — request your case data in a machine-readable format
- Opt-out — unsubscribe from any marketing emails at any time using the unsubscribe link
To exercise any of these rights, email privacy@a5u.ai. We will respond within 30 days.
9. Children's Privacy
The Service is not directed to children under 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a child under 18, we will delete it promptly.
10. Third-Party Links
The Service may contain links to third-party websites (court systems, legal aid organizations, etc.). This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To submit a request, contact privacy@a5u.ai.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date and, where appropriate, by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related questions or requests:
privacy@a5u.ai
a5u.ai / Counsel