Privacy Policy

1. Who this applies to

This policy applies to law firms and their staff who use Embido (“you”), and to visitors who interact with a firm’s client intake agent. Embido (“we”, “us”) acts as a service provider that processes your data on your behalf.

2. Information we collect

• Account information, your name, email, firm name, and authentication details when you sign up.
• Firm content you provide, your website content, documents you upload to the internal assistant, your configuration (practice areas, templates), and conversations handled by your assistants.
• Prospect information, contact details and matter information that visitors share with your client intake agent.
• Usage data, logs and metrics needed to operate, secure, and improve the service.
• Billing information, processed by our payment provider (Stripe); we do not store full card numbers.

3. How we use information

We use the information above to:

• operate your assistants (answering questions, capturing leads, booking consultations);
• provide support, billing, and account management;
• secure the service and prevent abuse;
• maintain an audit trail of internal assistant activity for your firm’s compliance.

We do not use your firm’s content, documents, or conversations to train AI models. Your data is used to answer your firm’s own questions and run your firm’s assistants, nothing else.

4. Service providers (subprocessors)

We rely on vetted third parties to deliver the service, including cloud infrastructure, AI model providers, email delivery, and payment processing. They process data only to perform services for us, under contract, and are not permitted to use your firm’s content to train their models where that option is available to us. We do not sell your data.

5. How we share information

We share information only with the service providers above, when you direct us to (for example, syncing a lead to your CRM or calendar), or where required by law. The internal legal assistant is private to your firm and is never publicly accessible.

6. Security

We protect your data with encryption at rest, access controls, and matter-level access restrictions for the internal assistant. Learn more on our security page.

7. Data retention & deletion

We retain your data while your account is active and as needed to provide the service. You can export your data, and you can request deletion of your account and associated content at any time, subject to limited legal retention requirements.

8. Your choices

You can access, correct, export, or delete your information, and you can object to or restrict certain processing. Contact us using the details below to exercise these rights.

9. Cookies

We use essential cookies to keep you signed in and to operate the service, and a minimal amount of privacy-respecting analytics to understand product usage. We do not use advertising trackers.

10. Changes to this policy

We may update this policy as the service evolves. We will revise the “last updated” date above and, for material changes, provide additional notice.

11. Contact

Questions about privacy? Email privacy@embido.com.