Privacy Policy

WorkplexAI LLC ("Workplex", "we", "us", or "our") provides software that helps law firms review case files and produce cited case records for attorney review. This Privacy Policy explains what information we collect through our website (workplex.ai) and the Workplex application (together, the "Services"), how we use and protect it, and the choices available to you.

Workplex is a software provider, not a law firm, and does not provide legal advice. When a firm uses the Services, the firm controls the case files it uploads and the client information they contain; Workplex processes that content on the firm's behalf and under its instructions.

1. Information we collect

Information you provide

When you request a demo or contact us, we collect your name, work email address, firm name, firm size, and any details you include. When your firm becomes a customer, we collect account and contact information for authorized users.

Firm content you upload

The Services process case files that your firm submits — including medical records, legal filings, correspondence, and related documents. These files routinely contain personal information, and often protected health information (PHI), about the firm's clients and other third parties. Workplex handles this content only to provide the Services to the submitting firm.

Usage and device data

We collect standard log and device data (such as IP address, browser type, and pages viewed) and use cookies and similar technologies to operate, secure, and measure basic usage of the website and application.

2. How we use information

• To provide the Services — ingesting, classifying, and extracting information from firm-uploaded files and returning organized, cited case records for attorney review.
• To create and manage firm accounts and authenticate authorized users.
• To respond to demo requests, support inquiries, and other communications.
• To secure, monitor, debug, maintain, and improve the Services.
• To comply with legal obligations and enforce our agreements.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use firm-uploaded content to train foundation models.

3. Firm content, PHI, and our role

As between Workplex and a customer firm, the firm owns its case files and the records generated from them. Workplex acts as a service provider and processor: we handle firm content solely to deliver the Services, under the firm's instructions, protected by row-level access controls so that a firm's users see only that firm's data.

Because firm content may include PHI, Workplex maintains administrative, technical, and physical safeguards appropriate to that data and enters Business Associate Agreements (BAAs) where required — both with customer firms and with the service providers that support the platform. Every output is intended to be reviewed and signed by a licensed attorney; the Services do not replace professional judgment.

4. Sub-processors

We rely on a limited set of vetted providers to operate the platform, each bound by contract to protect information consistent with this policy:

• Supabase — application database, authentication, and file storage.
• Vercel — website and application hosting.
• Google Cloud (Vertex AI) — AI model processing, performed under a Business Associate Agreement and enterprise terms that prohibit using inputs to train models.
• Resend — transactional and notification email.

Where we use AI model providers, we do so under enterprise agreements that keep customer content confidential and prohibit training on it. A current list of sub-processors is available to customers on request.

5. Data retention

We retain firm content and personal information for as long as needed to provide the Services and to meet legal, tax, and compliance obligations. We delete or return firm content on the firm's request or at the end of the engagement, subject to any legal retention requirements.

6. Security

We protect information using industry-standard measures, including encryption in transit and at rest, row-level access controls, least-privilege access for personnel, and audit logging. Workplex staff access to firm content is contractual, logged, and limited to support you request or to maintain the Services. No system is perfectly secure, but we work continuously to safeguard your information.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to appeal a decision about a request. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct, and the right not to be discriminated against for exercising those rights. Because firm-uploaded client content is controlled by the firm that submitted it, we will direct requests concerning that content to the firm as the responsible party. To exercise a right, use the contact form on this page.

8. Cookies

We use strictly necessary cookies to operate and secure the site, and limited analytics to understand usage. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

9. Children

The Services are intended for business use by law firms and are not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a revised "last updated" date and, where appropriate, communicated to customers.

11. Contact

WorkplexAI LLC For privacy questions or to exercise a right, use the contact form on this page.