Privacy Policy

Heartland AI ("Heartland AI," "we," "our," or "us") operates the Heartland AI Legal Platform, an AI-powered legal work platform for contract review, due diligence, document analysis, and legal research. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website and services.

We collect information you provide directly, including:

• Account information (name, email, organization, billing details)
• Documents and files you upload for review, analysis, or storage
• Prompts, queries, chat messages, and workflow inputs you submit to the platform
• Usage data such as feature activity, session metadata, and preferences

If you use Bring Your Own Key (BYOK), your API keys are stored encrypted. We do not store your underlying AI provider account credentials beyond what is required to connect your key.

We use collected information to:

• Provide, operate, and maintain the platform
• Process document analysis, contract review, research, and workflow automation you request
• Authenticate users and enforce account security
• Send service-related communications (security alerts, product updates, support)
• Improve reliability, performance, and user experience

We do not use your uploaded legal documents, contracts, or chat content to train public or shared AI models.

When you run AI features, your prompts and relevant document context may be transmitted to the model provider associated with your account (for example, Anthropic or Google, when using BYOK). Those providers process data under their own terms and privacy policies.

We also use infrastructure providers (such as hosting, database, authentication, and object storage services) to operate the platform. These providers process data only as needed to deliver our services.

We do not sell your personal information. We may share information:

• With your consent or at your direction
• With service providers that help us operate the platform (under contractual confidentiality obligations)
• To comply with law, regulation, legal process, or enforceable governmental request
• To protect the rights, safety, and security of Heartland AI, our users, or others

We implement technical and organizational safeguards, including encryption in transit, encrypted storage for sensitive credentials, access controls, and security monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information and uploaded content for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion subject to applicable law and legitimate business requirements.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact us at legal@heartlandlegalai.com.

We use cookies and similar technologies for authentication, security, and basic usage analytics. You can manage cookies through your browser settings; disabling some cookies may affect platform functionality.

The platform is intended for professional legal use and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated through the platform or by email where appropriate.

Questions about this Privacy Policy? Contact legal@heartlandlegalai.com.