Privacy Policy

Last updated: May 2026

Our Core Commitment

Citations.law is designed for lawyers and to support their confidentiality, privilege, and professional-responsibility obligations. Whether privilege or work-product protection applies remains a legal determination for the lawyer.

Document Processing

Documents are processed on Citations.law servers for citation extraction and verification. OCR, when needed, is sent to the service operator's configured Ollama endpoint. The standard deployment is intended to use service-controlled infrastructure, but configuration must be verified before relying on that deployment assumption. Raw uploaded documents are not retained after processing unless explicit raw-document retention applies in a separate documented workflow. Verification report HTML and audit metadata may be retained in the file cabinet when service-level report saving is enabled. Account or matter settings do not currently control /verify report saving.

What happens when you upload a document

• Your document is processed on Citations.law servers for citation extraction and verification.
• Raw uploaded documents are not retained after processing unless explicit raw-document retention applies in a separate documented workflow.
• OCR content, when needed, is sent to the service operator's configured Ollama endpoint; the actual endpoint configuration must be verified.
• Document content is not used for model training.

OCR processing for scanned documents

When a scanned PDF requires optical character recognition (OCR), that processing is sent to the service operator's configured Ollama endpoint. The standard deployment is intended to use service-controlled infrastructure, but configuration must be verified; this policy does not promise that every configured endpoint is local or excludes third parties.

Why this matters

Our data-minimizing approach is designed to reduce exposure and support lawyers' confidentiality obligations:

• Raw-document retention is limited as described in this policy
• OCR endpoint configuration must be verified before relying on infrastructure-location or third-party assumptions
• Legal process and security risk cannot be eliminated entirely
• Lawyers remain responsible for privilege and work-product determinations

Account Information

When you create an account, we collect:

• Email address — for account login, verification, and essential communications
• Name — for account identification
• Password — stored using industry-standard bcrypt hashing; we never store plaintext passwords

We do not sell, share, or disclose your account information to third parties except as required by law.

Verification Results

Citation verification reports are delivered to your browser after processing. Verification report HTML and audit metadata may also be retained in the file cabinet when service-level report saving is enabled. Account or matter settings do not currently control /verify report saving.

Cookies and Sessions

We use a single session cookie to maintain your login state. We do not use tracking cookies, advertising cookies, or analytics that monitor your behavior on the site.

Data Security

All connections to Citations.law are encrypted via HTTPS/TLS. Account passwords are hashed using bcrypt. Access to our servers is restricted and monitored.

Data Retention

• Raw uploaded documents: Not retained after processing unless explicit raw-document retention applies in a separate documented workflow.
• Verification reports: Report HTML and audit metadata may be retained in the file cabinet when service-level report saving is enabled; account or matter settings do not currently control /verify report saving.
• Account information: Retained while your account is active. Deleted upon account deletion request.

Your Rights

You may at any time:

• Request deletion of your account and all associated data
• Request a copy of the personal information we hold about you
• Correct inaccurate account information

To exercise these rights, contact info@citations.law.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email.

Contact

Privacy questions? Contact us at info@citations.law.