Privacy Policy

Privacy.

Plain-English summary first; the formal terms follow below. Last updated May 1, 2026.

Plain-English summary

We will never sell to insurance carriers. Plaintiff-only is the trust contract. We will not sell customer data, model outputs, or anonymized aggregates to carriers, defense firms, or any defense-side operation. Ever.

We only collect what we need. Account email + firm name to provision the trial. Case data you put into Predict to run predictions. Standard web analytics and advertising-conversion tags on the public marketing site so we know which campaigns drive signups.

US data residency by default; EU on request. Customer case data is stored on US infrastructure unless your firm operates under EU residency requirements.

You can export and delete your data. Account cancellation triggers a 90-day grace window followed by deletion. Data export is available at any time in machine-readable formats.

We do not train AI on your case data. The model is trained on the proprietary verdict-and-settlement dataset only; your case inputs are used to produce your predictions and are not used to retrain the model.

1. What we collect

Predict collects the following categories of information:

  • Account information. Email address, firm name, primary jurisdiction, primary case type, and any optional notes you provide at signup.
  • Case data. Case facts you enter into Predict to run a prediction (jurisdiction, case type, severity, liability classification, medical specials, property damage). For the full subscription, this also includes any documents you upload (medical records, police reports, demand letters) for processing.
  • Usage data. Web analytics (Google Analytics) and advertising-conversion tags (Meta, Google Ads, LinkedIn) on the marketing site, loaded via Google Tag Manager. These set cookies and share event data (pageviews, button clicks, conversions) with the respective platforms for measurement and remarketing. In-product event data (login times, prediction counts) is kept internal for billing and quality-of-service monitoring.
  • Billing data. Payment processor (Stripe) handles billing; we receive the last four digits of the card, the billing country, and the subscription status. Full card data never touches our systems.

2. How we use information

We use the information we collect to provision and operate your account, to produce case-valuation predictions, to bill the subscription, to communicate about the service, and to improve the product. We do not use customer case data to train the model. We do not use customer case data to target advertising. We do not share customer information with insurance carriers, defense firms, or any defense-side operation.

3. Sub-processors

Predict uses a limited set of sub-processors to operate the service: AWS (US East) for infrastructure, Stripe for billing, Postmark for transactional email, Google (Tag Manager, Analytics, Ads), Meta (advertising), LinkedIn (advertising), and Twenty (CRM for lead and account records). A complete current list is available on request to privacy@predict.law.

4. Retention and deletion

Account and case data are retained for the duration of your subscription plus a 90-day grace window after cancellation. After the grace window, primary-system data is deleted within 30 days, and backup data is purged within the next backup rotation (typically inside 60 days). Aggregated, anonymized usage statistics may be retained indefinitely for product analytics, but contain no personally identifiable information.

5. Your rights

You have the right to access, export, correct, or delete your account and case data at any time. Email privacy@predict.law with the request. For EU residents, the GDPR rights to data portability and erasure are honored on the standard timelines. For California residents, the CCPA rights to access, deletion, and "do not sell" are honored — we have nothing to "sell" since we do not sell customer information.

6. Security

See the security page for the substantive security posture, the SOC-2 status, and the controls in place.

7. Children's privacy

Predict is a B2B legaltech product for licensed attorneys. The service is not directed at and does not collect information from children under 13 (US) or 16 (EU).

8. Changes to this policy

If we make a material change to this policy, we will notify customers via email at least 30 days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent change.

9. Contact

Privacy questions: privacy@predict.law. Security incident reporting: security@predict.law. For general inquiries the trial signup form is the fastest path.