Privacy Policy

1. Introduction

BCC Research, LLC together with its subsidiaries and affiliates (collectively, “Company,” “We,” “us,” or “Our”) is committed to respecting and protecting the privacy of individuals who access or use Our Website located at www.bccresearch.com (the “Website”) and the associated Litigators AI application (“the Application”) accessible at LitigatorsAI (collectively, the “Platform”). This Privacy Policy (“Privacy Policy” or “Policy”) describes how We collect, use, process, disclose, retain, and safeguard Personal Information in connection with Your access to and use of the Platform and the subscription-based Services offered through it. This Policy forms part of and should be read together with Our Terms of Service. For purposes of this Policy, “User,” “you,” and “Your” refer to any individual or entity that accesses or uses the Services, whether on their own behalf or on behalf of an organization.

We implement reasonable administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, and destruction. However, no method of electronic transmission or storage is completely secure, and We cannot guarantee absolute security.

This Policy is effective as of the date of publication indicated above. This Policy applies from the time you first access or use the Services. Where access to the Services is governed by an applicable Order Form, this Policy shall apply from the effective date specified in such Order Form and shall continue for the duration of the applicable Subscription Term.

We may update this Privacy Policy from time to time to reflect changes in Our practices, technology, legal requirements, or business operations. When material changes are made, We will provide notice through the Platform or by other appropriate means. Continued use of the Services after such updates constitutes acknowledgment of the revised Policy.

2. Definitions and Interpretation

For purposes of this Privacy Policy, the following capitalized terms shall have the meanings set forth below. Defined terms shall apply equally to the singular and plural forms of such terms.

“Account” means a registered user account created to access and use the Services pursuant to a valid Subscription.

“AI System(s)” means machine learning models, large language models, natural language processing systems, algorithmic tools, automated reasoning engines, and other artificial intelligence technologies that are owned, developed, licensed, or operated by third parties and integrated with, or made accessible through, the Platform or Services to generate Outputs by processing User Content.

“Authorized User or User” means an individual or an individual authorized by a subscribing entity, such as a law firm, organization, or institution, to access and use the Services under that entity’s Subscription.

“Order Form” means a written or electronic ordering document executed by You and Us that specifies the applicable Subscription plan, pricing, Subscription Term, and related commercial terms governing access to the Services.

“Personal Information” or “Personal Data” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable individual. Personal Information includes, without limitation, names, email addresses, professional contact information, billing information, IP addresses, device identifiers, and any personal data.

“Platform” means the web-based litigation checker application - Litigators AI, associated software, interfaces, databases, APIs, and infrastructure through which the Services are made available.

“Services” means the AI-powered litigation analysis, review, document checking, and related subscription-based services made available through the Platform.

“Subscription” means a paid access plan governed by an applicable Order Form and the Terms of Service, allowing access to the Services for a specified term.

“Subscription Term” means the period of time during which You are authorized to access and use the Services pursuant to an active Subscription, including any initial term and any renewal term as specified in the applicable Order Form.

“User,” “You,” and “Your” mean any individual or entity that accesses or uses the Services pursuant to a Subscription.

“We,” “Us,” and “Our” refer to BCC Research, LLC, the legal entity that owns and operates the Platform and provides the Services, including its affiliates and subsidiaries.

“User Content” means any documents, data, text, prompts, instructions, pleadings, briefs, contracts, discovery materials, research materials, confidential information, personal information, or other content uploaded, submitted, transmitted, stored, or otherwise made available by You through the Services.

“Output” means any analysis, summary, review, report, feedback, citation evaluation, risk flagging, or other content generated by the Services through automated AI Systems based on User Content.

“Terms of Service” means the agreement governing access to and use of the Services, available at Terms and conditions , as may be amended from time to time.

“Third-Party Providers” means external service providers engaged by Us to support, operate, or deliver the Services, including, without limitation, cloud hosting providers, payment processors, infrastructure vendors, analytics providers, and/or related infrastructure providers that process Personal Information on Our behalf.

Interpretation

In this Privacy Policy, references to the singular include the plural and vice versa. References to “including,” “such as,” or similar expressions shall be deemed to mean “including without limitation.” Section headings are for convenience only and shall not affect interpretation. References to applicable law mean such law as amended, replaced, or reenacted from time to time.

3. Information We Collect From You

In connection with Your access to and use of the Services, We may collect the following categories of information.

1. We may collect Personal Information that you provide directly when creating an Account, subscribing to the Services, or communicating with Us. This may include Your name, professional title, organization name, email address, telephone number, mailing address, and other contact details necessary to establish and administer Your Subscription.
2. If you subscribe to the Services, billing-related information such as payment confirmation details, subscription tier, billing address, and transaction identifiers may be collected. Payment card and banking information are processed directly by Our designated Third-Party Provider for payment processing and are not stored on Our servers.
3. In connection with Your use of the Services, We collect User Content that you upload, submit, transmit, or process through the Platform. Such content may contain Personal Information, confidential information, or other sensitive data that you choose to include.
4. We may automatically collect certain technical and usage information when you access the Platform. This may include Your IP address, browser type, device type, operating system, access timestamps, session duration, feature usage data, log files, and diagnostic information. This information is used to maintain system integrity, ensure security, analyze performance, and improve functionality.
5. We may also collect records of communications between you and us, including support inquiries, account-related correspondence, and service feedback.
6. Where permitted by law, We may obtain limited information from third-party service providers necessary to verify billing details, prevent fraud, ensure security, or support account management.
7. We may aggregate or de-identify information so that it no longer reasonably identifies an individual. Aggregated or de-identified information may be used for analytics, performance monitoring, and service improvement purposes.
8. Provision of certain Personal Information is necessary to create an Account and access the Services. If you choose not to provide required information, you may be unable to use certain features of the Platform.

4. Information Collected About Individuals Who Do Not Interact With Us Directly

In the course of providing the Services, We may process Personal Information relating to individuals who do not have a direct relationship with us. For example, Users may upload User Content that contain Personal Information relating to clients, opposing parties, witnesses, experts, attorneys, court personnel, or other individuals involved in legal proceedings. Such information is processed solely for the purpose of providing the Services in accordance with Our Terms of Service. We may also receive Personal Information about personnel of subscribing organizations, such as administrators, billing contacts, or Authorized Users designated to access the Services.

5. Information Collected From Private and Publicly Accessible Sources

We maintain company pages on third-party platforms such as LinkedIn or other professional networking services. If You interact with Our pages on such platforms, the applicable third-party platform’s privacy policy governs those interactions. To the extent that such platforms provide Us with analytics or interaction data, We will handle that information in accordance with this Privacy Policy. We do not conduct background checks, credit scoring, or investigative profiling of Users unless required by law or necessary to protect against fraud, abuse, or security threats.

6. Information Collected Via Cookies and Other Automated Technologies

When You access or use the Platform, We automatically collect certain technical and usage information through cookies, session tokens, log files, web beacons, scripts, and similar technologies.

When You access or use the Platform, We automatically collect certain technical and usage information through cookies, session tokens, log files, web beacons, scripts, and similar technologies.

Categories of Information Collected

The information We collect may include:

• IP address;
• browser type and version;
• device type and identifiers;
• operating system;
• referring URL;
• pages viewed and features used;
• session duration and access timestamps;
• diagnostic and performance data; and
• general location information derived from IP address (e.g., city or state-level location).

In connection with service-related communications, We may also collect limited technical information, such as confirmation of email delivery and interaction metrics, to measure system performance and improve communications.

Technologies Used

We use cookies, browser-based session tokens (including JSON Web Tokens (JWTs) or similar mechanisms), web beacons, and scripts to:

• authenticate Users and maintain secure sessions;
• enable persistent login functionality;
• remember preferences and account settings;
• maintain session integrity;
• monitor system performance and reliability;
• detect, investigate, and prevent fraud, misuse, and unauthorized access; and
• analyze aggregate usage patterns in order to improve the functionality and reliability of the Services.

Authentication mechanisms may store session credentials locally in Your browser. You are responsible for securing Your device and logging out when appropriate.

Analytics Providers

We may use third-party analytics providers to assist Us in understanding aggregate usage trends and improving the Services. These providers may collect technical information such as device type, browser type, IP address, and interaction data, subject to their own privacy practices and Our contractual safeguards. We do not use automated tracking technologies to:

• provide third-party behavioral advertising within the Services; or
• knowingly track Users across unrelated third-party websites for marketing purposes.

Cookie Controls

Most web browsers allow You to control or disable cookies through browser settings. You may configure Your browser to refuse, delete, or restrict cookies; however, doing so may limit or prevent certain features of the Services from functioning properly.

7. Sensitive Personal Data

The Services are not designed for the routine collection or processing of highly regulated sensitive personal data and are not intended to function as a system of record for healthcare, financial, or governmental records. We do not require biometric identifiers, government-issued identification numbers, financial account credentials, or Protected Health Information (“PHI”) for account registration or Subscription access.

Because the Platform is designed for litigation-related document analysis, User Content may contain sensitive Personal Data relating to third parties, including health-related information, financial details, identification numbers, employment records, or confidential business information contained within pleadings, discovery materials, contracts, or evidentiary documents. We process such information solely for the purpose of providing the Services and generating Output.

The Platform is not intended to serve as a Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) compliant environment, and We do not enter into Business Associate Agreements by default. Users are prohibited from uploading PHI subject to HIPAA or similar healthcare privacy laws unless a separate written agreement expressly permitting such processing has been executed between the parties.

You are solely responsible for determining whether you have the legal authority and appropriate consent to upload any User Content, including materials containing sensitive Personal Data, confidential information, attorney-client privileged material, or regulated information. You are also responsible for evaluating whether use of the Services is appropriate in light of applicable confidentiality, privilege, regulatory, or ethical obligations.

8. Use Of Information Collected From You

We use Personal Information and other information collected from You to operate, maintain, and provide the Services in accordance with the Terms of Service and the applicable Subscription.

Specifically, We use such information to:

• create and manage Your Account and Subscription;
• process payments and administer Order Forms;
• provide access to the Platform and enable use of the Services;
• transmit and process User Content through AI Systems in order to generate Output;
• communicate with You regarding technical notices, updates, security alerts, administrative matters, and support-related inquiries;
• respond to questions, requests, or feedback submitted by You;
• monitor usage, performance, and system activity to maintain security, prevent fraud, detect abuse, and protect the integrity of the Services;
• investigate potential violations of the Terms of Service or applicable law;
• improve, maintain, and develop the functionality, reliability, and performance of the Platform; and
• comply with legal obligations and enforce Our contractual rights.

Where You access the Services under a shared Subscription, We may use Account-level and usage information to administer organizational access, manage Authorized Users, and provide support to designated administrators.

9. Sharing Your Personal Information

We do not sell Personal Data and do not authorize Third-Party Providers or AI Systems to use Personal Data for their own independent marketing or commercial purposes.

In order to provide the Services, User Content and Personal Data are stored, transmitted, and processed through Our infrastructure and by authorized Third-Party Providers. Such data may also be transmitted to and processed by AI Systems via API integrations for the purpose of generating Output. We do not access, review, or use Personal Data for purposes unrelated to providing, maintaining, or securing the Services. Personal Data is processed solely to operate the Platform and deliver the Services to You.

Third-Party Providers and AI Systems process Personal Data on Our behalf pursuant to contractual obligations designed to protect confidentiality, implement appropriate security safeguards, and restrict unauthorized use. Such processing is subject to applicable data protection laws and the respective data processing commitments of those providers.

We may disclose Personal Information where We determine in good faith that such disclosure is reasonably necessary to:

1. comply with applicable law, regulation, legal process, or governmental request;
2. enforce the Terms of Service or this Privacy Policy;
3. detect, prevent, or address fraud, security, or technical issues; or
4. protect the rights, property, or safety of Us, Users, or others.

We may share aggregated or de-identified information that does not identify You for lawful business purposes, including analytics and service improvement.

10. Links To Third Party Websites And Services

The Services may contain links to third-party Websites, databases, tools, or other external resources such as legal databases, legal research Websites, court Websites that are not owned or controlled by Us. These links are provided for reference or informational purposes only. If You access any third-party Website or services through the Platform, You do so at Your own risk. We do not control and are not responsible for the content, accuracy, availability, security practices, or privacy practices of any third-party Website or service. Your interactions with such third parties are governed solely by their respective terms and privacy policies. The inclusion of a link does not constitute an endorsement, sponsorship, or recommendation by Us of the third party or any products or services offered through such third party. We shall not be responsible for any loss, damage, or liability arising from Your access to or use of any third-party Website or service.

For avoidance of doubt, this section applies only to third-party external Websites or services that You choose to access directly and does not apply to Third-Party Providers and AI Systems engaged by Us to operate and deliver the Services, which are described separately in this Privacy Policy.

11. Data Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect Personal Information and User Content against unauthorized access, loss, misuse, alteration, or disclosure. Access to Personal Information and User Content is limited to personnel, contractors, and Third-Party Providers who require such access to operate, support, and deliver the Services. Such parties are subject to confidentiality obligations and, where applicable, contractual data protection commitments. We also employ security controls intended to protect the integrity and availability of the Platform, including measures relating to authentication, access management, infrastructure security, and monitoring of system activity. However, no method of transmission over the internet and no method of electronic storage is completely secure. While We take reasonable steps to protect Personal Information and User Content, We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of Your account credentials, safeguarding document access links generated through the Services, and securing the devices used to access the Platform.

12. Your Rights And Choices

You may contact Us at any time to update, correct, or request deletion of Personal Information associated with Your Account, subject to applicable legal, technical, and contractual limitations.

Account Information. Certain Account information may be reviewed and updated directly through the Platform. You are responsible for maintaining accurate registration information.

Communications. You may opt out of non-essential communications by following the unsubscribe instructions in those communications or by contacting Us. You will continue to receive service-related, administrative, security, and account communications necessary for the operation of the Services and Your Subscription.

Access, Correction, and Deletion. Subject to applicable law, You may request access to, correction of, or deletion of Your Personal Information. We will respond to verified requests in accordance with applicable data protection laws.

Deletion of Your Account will result in removal of associated data in accordance with Our system architecture, including linked documents and related records. However:

• User Content shared with other Authorized Users under the same Subscription may remain accessible to those Users;
• Certain operational records, logs, or transactional data may be retained as required for legal, security, or compliance purposes;
• Data may persist temporarily in backup systems consistent with infrastructure retention practices; and
• Personal Information processed by Third-Party Providers, and User Content and Personal Information processed by AI Systems, may be retained in accordance with their respective data protection terms.

Data Portability and Objection Rights. Where required by applicable law, You may request a copy of Your Personal Information in a structured format. Please note that the Platform may not currently provide automated data export functionality, and fulfillment of such requests may be subject to technical feasibility and applicable legal limitations.

Choice to Provide Information. You are not required to provide Personal Information; however, certain information is necessary to create and maintain an Account and Subscription. If You choose not to provide required information, We may be unable to provide access to some or all features of the Services.

13. International Transfers

The Services are operated primarily from the United States. We do not intentionally target or market the Services to individuals located outside United States including in the European Economic Area (“EEA”), the United Kingdom, or other jurisdictions outside the United States; however, the Services may be accessible from such jurisdictions. If you access or use the Services from outside the United States, you acknowledge that Your Personal Data may be transferred to, stored, and processed in the United States and in other jurisdictions. These jurisdictions may have data protection laws that differ from those of Your country of residence.

Additionally, Third-Party Providers and AI Systems, including cloud infrastructure providers, may store, process, or access Personal Data and User Content in the United States and other jurisdictions where they maintain facilities or technical infrastructure. We implement commercially reasonable technical, organizational, and contractual safeguards designed to protect Personal Data and enter into data protection agreements with Third-Party Providers and AI Systems where required by applicable law. While We do not control the underlying infrastructure architecture of such providers, We require them to maintain appropriate confidentiality and security measures.

Where applicable data protection laws grant you certain rights with respect to Your Personal Data, you may submit a request to exercise those rights by contacting Us at email provided in this Policy. We will evaluate and respond to such requests in accordance with applicable law. Nothing in this Privacy Policy is intended to expand or limit any rights you may have under applicable data protection laws.

14. Cross-Border Processing

We may share Personal Information with Our affiliates and group companies for purposes of operating, maintaining, supporting, and improving the Services. Personnel located in jurisdictions outside the United States, may access or process Personal Information strictly on a need-to-know basis in connection with technical support, customer assistance, security operations, product development, or administrative functions. Such access is subject to confidentiality obligations, internal data protection policies, and appropriate contractual safeguards designed to ensure that Personal Information is processed in accordance with applicable law and this Privacy Policy. By using the Services, You acknowledge that Personal Information may be accessed or processed by Our personnel or affiliates in jurisdictions outside the United States.

15. California Privacy Rights

If You are a California resident, You may have certain rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CPRA”). These rights may include the right to request disclosure of the categories and specific pieces of Personal Information We collect about You, the sources from which such information is collected, the purposes for which it is used, and the categories of third parties with whom it is disclosed. You may also have the right to request correction of inaccurate Personal Information and to request deletion of Personal Information, subject to certain legal exceptions.

We do not sell Personal Information and do not share Personal Information for cross-context behavioral advertising purposes. If Our data practices change in a manner that constitutes a “sale” or “sharing” under applicable law, We will update this Policy and provide any required opt-out mechanisms.

California residents may exercise their applicable privacy rights by contacting Us at support@litigatorsai.com or through the designated request mechanism available on the Platform. We may take reasonable steps to verify Your identity before processing any request. We will not discriminate against You for exercising Your rights under applicable law.

16. Data Retention

We retain Personal Information, User Content, legal documents, case data, and related metadata on an indefinite basis unless and until You delete the applicable content or Your Account, or as otherwise required by law. User Content, Account information, organization data, case records, uploaded documents, citation analysis results, validation data, saved prompts, and related workflow metadata are stored in Our database and remain associated with Your account unless manually deleted. Uploaded document files are stored using publicly accessible URLs generated through Our infrastructure provider and remain available unless deleted by You or upon deletion of the associated database record.

We do not currently implement automatic deletion schedules, document time-to-live limits, or periodic cleanup processes for inactive accounts or stored documents. Expired verification tokens and certain expired organizational invitations may remain in the database until removed through system maintenance or account deletion.

When You delete Your Account, associated data is deleted in accordance with Our cascade deletion architecture, which removes linked files, document records, citation results, saved prompts, case memberships, and related data. Certain limited information may be retained as necessary to comply with legal obligations, resolve disputes, enforce agreements, maintain security logs, or prevent fraud or misuse.

Where legal documents or User Content are processed through AI Systems, retention of data by such providers is governed by their respective data protection terms and operational practices. We require such AI Systems to process data pursuant to contractual data protection obligations; however, their internal retention policies may apply independently.

We may retain system logs, security records, and operational data for administrative, security, and compliance purposes in accordance with Our infrastructure providers’ standard retention practices.

17. Complaints

If You have any questions, concerns, or complaints regarding Our collection, use, or handling of Personal Information, You may contact Us using the contact details provided in this Privacy Policy. We request that complaints be submitted in writing and include sufficient detail to allow Us to understand and investigate the matter.

Upon receipt of a complaint, We will review the concern, conduct appropriate internal inquiries, and respond within a reasonable timeframe. We may contact You to request additional information necessary to evaluate or resolve the issue.

18. Modifications to the Policy

We may update or modify this Policy from time to time to reflect changes in Our Services, legal obligations, operational practices, or data processing activities. When We make material changes, We will update the “Last Updated” date at the top of this Privacy Policy and, where appropriate, provide additional notice through the Platform or by other reasonable means. Your continued access to or use of the Services after the effective date of any revised Privacy Policy constitutes acknowledgment of the updated terms. If You do not agree with the changes, You should discontinue use of the Services and may request deletion of Your Account in accordance with this Policy.

We encourage You to review this Privacy Policy periodically to remain informed about how We collect, use, and protect Personal Information.

19. Contact Us

If You have any questions about this Privacy Policy, the Services, or Our data handling practices, or if You wish to exercise any of Your rights described in this Privacy Policy, You may contact Us using the information below: Mailing Address:

When contacting Us regarding a privacy-related request, please provide sufficient information to allow Us to verify Your identity and understand the nature of Your request. We may request additional information where necessary to process or respond to Your inquiry. We will respond to privacy-related inquiries within a reasonable timeframe and in accordance with applicable law.