Privacy Policy

Last updated: February 5, 2025

Introduction

FIRACSuite ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Account Information

  • Email address
  • Full name
  • Password (encrypted using bcrypt hashing)
  • Law school name (optional)
  • Expected graduation year (optional)

Content You Create

  • Case briefs you generate
  • Bluebook citations you format
  • Course outlines you build
  • Files you upload (PDFs only)
  • Personal notes and tags

Usage Information

  • Number of briefs, citations, and outlines created
  • Login timestamps and authentication attempts
  • IP addresses for security purposes
  • Browser type and device information

Payment Information

We use Stripe for payment processing. We do NOT store your credit card numbers or payment details on our servers. Stripe handles all payment data securely and is PCI-DSS compliant.

How We Use Your Information

  • To create and manage your account
  • To provide AI-powered case brief generation, citation formatting, and outline building services
  • To process your payments and manage subscriptions
  • To send you important service updates and account notifications
  • To improve our services and develop new features
  • To detect and prevent fraud, abuse, and security incidents
  • To enforce our Terms of Service and legal obligations
  • To respond to customer support inquiries

How We Protect Your Information

  • Encryption: All data transmission uses HTTPS with TLS 1.3 encryption. Passwords are hashed using bcrypt. Sensitive data at rest is encrypted using AES-256.
  • Access Control: Strict user isolation ensures you can only access your own data. Row-level security policies prevent unauthorized access.
  • Authentication: Email verification required. Session timeout after 30 minutes of inactivity. Failed login attempt tracking and account lockout protection.
  • Infrastructure Security: Regular security audits, automated backups, and monitoring for suspicious activity.
  • Rate Limiting: API rate limits prevent abuse (100 requests per minute per user).

Data Sharing and Third Parties

We do NOT sell your personal information to third parties. We may share your information with:

  • OpenAI: Case text you submit is sent to OpenAI's API for AI-powered brief generation. OpenAI processes data according to their Privacy Policy.
  • Stripe: Payment information for subscription processing. Stripe is PCI-DSS Level 1 certified.
  • Email Service Provider: To send transactional emails (account verification, password reset, subscription updates).
  • Law Enforcement: When required by law or to protect our rights and users' safety.

Your Privacy Rights

You have the following rights regarding your personal data:

  • Access: You can view and download all your data from your account settings.
  • Export Data: Use the "Download My Data" feature in Settings to export all your briefs, citations, and outlines.
  • Deletion: Use the "Delete My Account" feature in Settings to permanently delete your account and all associated data.
  • Correction: Update your profile information anytime in account settings.
  • Withdraw Consent: You may stop using our services at any time and delete your account.

GDPR Compliance: If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR).

CCPA Compliance: If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA).

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal compliance, dispute resolution, or to enforce our agreements. Backups are retained for 30 days and then permanently deleted.

Cookies and Tracking

We use essential cookies to maintain your login session and provide core functionality. We do not use third-party tracking cookies or advertising cookies. Session cookies expire after 30 minutes of inactivity or when you log out.

Children's Privacy

FIRACSuite is intended for law students who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of FIRACSuite after changes are posted constitutes your acceptance of the revised policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

FIRACSuite Privacy Team

Email: support@firacsuite.com