Privacy Policy

1. Introduction

ProvaLens ("we," "us," or "our") is a product of EasyWay IT, LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered document intelligence platform at provalens.ai and app.provalens.ai (the "Service").

By using our Service, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account Information

• Name, email address, phone number
• Law firm name, city, and state
• Practice area and role within the firm
• Billing and payment information (processed securely via Stripe)

Document Data

• Legal documents you upload for processing (medical records, police reports, correspondence, etc.)
• Extracted text, metadata, and AI-generated analysis
• Search queries and research results

Usage Data

• Log data (IP address, browser type, pages visited)
• Platform usage metrics (documents processed, pages analyzed, AI queries)
• Feature usage patterns

3. How We Use Your Information

• Provide, operate, and maintain the document intelligence Service
• Process your documents, generate timelines, and detect contradictions
• Generate embeddings and enable intelligent search across your case files
• Process payments and manage your subscription
• Send transactional communications (confirmations, invoices)
• Provide customer support
• Improve and optimize the Service
• Comply with legal obligations

4. Data Protection & Security

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted using TLS 1.3
• Encryption at Rest: All stored data encrypted using AES-256
• Infrastructure: Hosted on Microsoft Azure with SOC 2 Type II certification
• Access Controls: Role-based access, multi-factor authentication support
• Audit Logging: All access to sensitive data is logged and monitored
• Firm Isolation: Complete data isolation between law firms at the database and vector search level

5. HIPAA Compliance

ProvaLens is designed to be HIPAA compliant for law firms handling Protected Health Information (PHI):

• We offer Business Associate Agreements (BAA) to covered entities
• PHI is encrypted at rest and in transit
• Access to PHI is logged in immutable audit trails
• Documents containing PHI are automatically flagged and protected
• Data retention and deletion policies comply with HIPAA requirements
• Our infrastructure providers (Microsoft Azure, Anthropic) maintain BAAs with us

6. Data Retention

We retain your data as follows:

• Account Data: Retained for the duration of your account, plus 30 days after deletion
• Documents & Embeddings: Retained as long as your account is active; deleted from all storage (database, blob storage, vector database) upon request
• AI Research Results: Retained as long as your account is active
• Audit Logs: Retained for a minimum of 6 years per HIPAA requirements

7. Third-Party Services

We use the following third-party services to operate ProvaLens:

• Microsoft Azure: Cloud infrastructure, document OCR, embedding generation, storage
• Anthropic (Claude): AI-powered document analysis, classification, and research synthesis
• Stripe: Payment processing (we do not store credit card numbers)
• Azure Communication Services: Transactional email delivery

We do not sell, rent, or share your personal information or document data with third parties for marketing purposes.

8. AI Processing

ProvaLens uses artificial intelligence to analyze your documents. Important details about AI processing:

• Your documents are processed by AI models to extract text, classify content, and generate analysis
• Document content is sent to AI providers (Anthropic, Azure OpenAI) for processing but is not used to train their models
• AI-generated results always include citations to source documents for verification
• You retain full ownership of your documents and any AI-generated analysis

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (documents, embeddings, and all associated records)
• Export your documents and research results
• Opt out of non-essential communications

To exercise these rights, contact us at privacy@provalens.ai.

10. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, contact us: