Legal
Short version: CounselCue does not store your audio or session transcripts. Audio is relayed through CounselCue's server to Deepgram for real-time transcription and is never stored or retained. Transcript segments are processed in memory to generate research results and discarded immediately. We collect only what is necessary to operate the service.
CounselCue ("CounselCue," "we," "us," or "our") is a legal technology product that provides real-time research assistance during attorney calls, depositions, and meetings via a web application and Chrome browser extension. Our website is located at counsel-cue.com. For privacy-related questions, contact us at [email protected].
Account information. When you create a CounselCue account, we collect your name and email address. If you register via Google SSO or Microsoft SSO, we receive your name and email from those providers through their OAuth authentication flow. We do not receive or store your Google or Microsoft passwords. Authentication tokens are used only to verify your identity and are not retained after login.
Feedback. If you submit feedback through the application, we store your feedback message, your user ID, and your IP address in our audit log for product improvement purposes.
Usage data. We collect information about how the extension and web application are used, including session start and end times, the number of research results generated, and your selected subscription tier. This data is used to enforce usage limits and improve the product.
Website analytics. We use Plausible Analytics, a privacy-focused analytics service, to understand how visitors use our website. Plausible does not use cookies, does not collect personal data, and does not track individuals across sites. All data is aggregated and no personally identifiable information is stored. Plausible is compliant with GDPR, CCPA, and PECR. For more information, see plausible.io/data-policy.
Payment information. Payments are processed by Stripe. CounselCue does not store credit card numbers or payment credentials. Stripe's privacy policy governs the handling of payment data.
Communications. If you contact us by email, we retain your message to respond to it.
Audio is never stored by CounselCue. When you start a session, audio is relayed through CounselCue's WebSocket proxy to Deepgram, Inc. for transcription. Audio bytes are forwarded in real time and are not stored, logged, or retained by CounselCue in any form.
Tab capture mode. When using tab capture, the browser's screen-sharing API (getDisplayMedia) is used to access tab audio. This API requires a video track, which CounselCue immediately discards. No screen content, video frames, or visual data is captured, transmitted, or stored.
Transcripts are not stored. Session transcripts are not stored on CounselCue servers. Transcript segments are transmitted to CounselCue's server during a session solely to generate real-time research results via AI providers. These segments are processed in memory and are not logged, indexed, or retained after processing. When your session ends, no transcript data remains on our servers.
Deepgram. Deepgram, Inc. is a SOC 2 Type II certified speech recognition provider. Audio streamed to Deepgram is subject to Deepgram's privacy policy and data processing terms. We encourage you to review Deepgram's privacy practices at deepgram.com/privacy.
Administrators may upload documents to a custom knowledge base for use during sessions. These documents are stored on CounselCue's servers. You should not upload documents containing client-identifying information, confidential communications, or privileged materials. CounselCue is not responsible for the content of documents you upload.
We do not sell your personal information. We do not use your data to train AI models. We do not use session content for advertising.
We share your information only with the following third parties, and only as necessary to operate the service:
We do not share your information with law firms, employers, bar associations, courts, or any other legal or governmental authority except as required by applicable law.
CounselCue is designed with attorney confidentiality obligations in mind. The no-retention architecture for audio and transcripts is specifically intended to support attorneys' duties under ABA Model Rule 1.6 and applicable state equivalents. However, attorneys are responsible for their own professional conduct and for determining whether use of CounselCue is consistent with their obligations in any given jurisdiction or matter.
We retain account information for as long as your account is active. If you delete your account, we delete your personal information within 30 days, except where retention is required by law. Usage metadata may be retained in anonymized form.
We use HTTPS for all data in transit. Account passwords are hashed and salted. We do not store plaintext credentials. Authentication uses httpOnly, Secure cookies with SameSite protection. Integration tokens (such as Clio OAuth tokens) are encrypted at rest. All administrative actions require CSRF token verification. File uploads are validated by content type and file signature. Security headers are applied to all server responses. Access to production systems is restricted to authorized personnel.
You may request access to, correction of, or deletion of your personal information at any time by emailing [email protected]. We will respond within 30 days.
CounselCue is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the website. Your continued use of CounselCue after changes become effective constitutes your acceptance of the updated policy.
For privacy-related questions or requests, contact us at [email protected].