Privacy Policy

Effective Date: April 7, 2026

Last Updated: April 7, 2026

Effective Date: April 7, 2026

1. Introduction

Verifore Technologies LLC, a Louisiana limited liability company ("Company," "we," "us," or "our"), operates Attested, a secure evidence sharing platform available at attested.legal (the "Service"). This Privacy Policy explains what data we collect, how we use it, how long we retain it, and your rights regarding your personal information.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Name (if provided or obtained via Google or Microsoft OAuth)
Email address (required for registration)
Firm name (if provided)
Billing address (for paid Subscribers)
Supabase Auth user ID (a unique identifier for your account)
Authentication method (email/password, Google OAuth, or Microsoft OAuth)

2.2 Uploaded Evidence Files

When you upload files to the Service, we store:

Files (videos, images, audio, documents) in encrypted Supabase Storage buckets
File metadata: name, size, MIME type, upload timestamp
SHA-256 hash (cryptographic fingerprint for integrity verification)
Thumbnail previews for visual identification
Expiration dates (Temporary Access files expire automatically; Preserved Evidence files are retained until released)

2.3 Document Review Submissions

When a Subscriber uses the Document Review feature, the content of submitted files is transmitted to Anthropic, PBC ("Anthropic") for automated analysis. The Service retains an audit log of when Document Review was invoked, by whom, and against which file. See Section 4 (AI Processing) for details.

2.4 Counsel AI Conversation Data

When any visitor interacts with Counsel AI on the public website, the conversation content is transmitted to Anthropic for processing. Counsel AI conversations are stored in browser session storage only and are not persisted to Verifore Technologies LLC's databases.

2.5 Usage Data

To support chain of custody documentation for legal evidence, we collect:

IP address (for every file access event)
Browser type and device information (user agent)
Timestamp of every access event
Login times and session duration
Feature usage (pages visited, actions taken within the platform)
Share activity (share link creation, viewer access events)

This usage data is essential for access audit trail documentation. It is used to generate access logs and FRE 902(13) Certificates for legal proceedings.

2.6 Payment Information

Payment processing is handled by Stripe, Inc. ("Stripe"). We do not store credit card numbers on our servers. We only store:

Stripe customer ID (links your account to Stripe)
Subscription plan (Essential, Professional, or Enterprise)
Subscription status (active, past_due, canceled, etc.)

For information on how Stripe handles your payment data, see Stripe's Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

Provide the Service: Authentication, file storage, sharing, and watermarking
Chain of Custody: Log access events with IP address, timestamp, and user agent for legal compliance
Viewer Identity Watermarking: Embed viewer email address in media playback for identity attribution
Generate Certificates: Compile FRE 902(13) self-authenticating evidence Certificates
AI Processing: Transmit Subscriber Content to Anthropic for Document Review analysis and Counsel AI conversations
Billing: Manage subscriptions and overage charges via Stripe
Communication: Send service announcements, security notifications, and billing updates via Resend
Platform Improvement: Analyze usage patterns to improve the Service (aggregated, anonymized data only)

We do NOT sell, rent, or share your personal information with third parties for marketing purposes.

4. AI Processing and Third-Party Sub-Processors

4.1 Document Review

When a Subscriber uses the Document Review feature, the content of submitted files is transmitted to Anthropic, PBC ("Anthropic") for processing via Anthropic's commercial API. Anthropic acts as a sub-processor and processes such content under Anthropic's commercial data terms, which prohibit the use of customer content for model training. Verifore Technologies LLC retains an audit log of when Document Review was invoked, by whom, and against which file, but does not retain a separate copy of the AI-generated output beyond what is integrated into the relevant Federal Rule of Evidence 902(13) authentication Certificate.

4.2 Counsel AI

When any visitor interacts with Counsel AI on the public website, the conversation content is transmitted to Anthropic for processing under the same commercial terms. Counsel AI conversations are stored in browser session storage only and are not persisted to Verifore Technologies LLC's databases.

5. Data Storage and Security

5.1 Infrastructure Providers:

Supabase serves as the primary data processor for storage, authentication, and database services. Files are stored in private Supabase Storage buckets with encryption at rest. The database is protected by Row Level Security (RLS) policies.
Vercel serves as the hosting provider for the web application and content delivery.
Stripe serves as the payment processor for all subscription and overage billing.
Resend serves as the transactional email provider for access notifications and service communications.
Anthropic serves as the AI processing sub-processor for Document Review and Counsel AI features.

All data is transmitted over HTTPS/TLS. SHA-256 hashing verifies file integrity.

5.2 Access Controls: Your files and data are accessible only to you and individuals you explicitly share with via share links. Verifore Technologies LLC staff do not access your files except when legally required (e.g., law enforcement requests with valid warrants) or to provide technical support at your request.

5.3 Security Measures: While we implement industry-standard security measures, no system is 100% secure. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you believe your account has been compromised.

6. Data Retention

6.1 Account Data:

Retained for the life of the account plus thirty (30) days after termination
Permanently deleted after the 30-day grace period, except for access logs and Certificates

6.2 Evidence Files:

Retained according to the Subscriber's tier storage allowance and selected expiration settings
Temporary Access files are automatically deleted after expiration (24 hours, 48 hours, or 7 days)
Preserved Evidence files are retained until the Subscriber releases the preservation hold or closes the account

6.3 Audit Logs:

Retained for seven (7) years to support evidence authentication chain of custody
Include viewer identity, timestamp, IP address, user agent
Cannot be deleted even if you delete your account (legal retention requirement)

6.4 Counsel AI Conversations:

Not retained server-side
Stored only in browser session storage during the active session

6.5 Document Review Outputs:

Retained as part of authentication Certificates indefinitely
No separate copy of the raw AI-generated output is retained beyond the Certificate

6.6 Certificates:

Retained for seven (7) years after generation
Available for download even after the original file is deleted

6.7 Stripe Billing Records: Retained per Stripe's data retention policies. We do not control Stripe's retention practices.

7. Your Rights

Under applicable law, you have the following rights regarding your personal data:

Access: Request a copy of your personal data by emailing anthony@attested.legal
Correction: Update your account information at any time in your dashboard settings
Deletion: Request account deletion (subject to legal retention requirements for access logs and Certificates)
Portability: Request an export of your personal data in a commonly used format
Export: Download your files and Certificates at any time from the dashboard
Opt-Out: Unsubscribe from marketing emails (service emails cannot be opted out of while your account is active)

Requests to delete data subject to legal hold or audit trail requirements may be limited. We will inform you of any limitations at the time of your request.

To exercise any of these rights, contact anthony@attested.legal. We will respond within thirty (30) days.

8. Third-Party Services

The Service uses the following third-party services:

Supabase (authentication, database, storage): Privacy Policy
Stripe (payment processing): Privacy Policy
Vercel (hosting and content delivery): Privacy Policy
Resend (transactional email delivery): Privacy Policy
Anthropic (AI processing for Document Review and Counsel AI): Privacy Policy

We do NOT use:

Advertising networks
Analytics tracking pixels (beyond basic server logs)
Social media tracking pixels
Third-party cookies for tracking

9. Cookies

The Service uses cookies for essential functionality only:

Supabase Auth session cookies (required for authentication)
Session cookies (required for maintaining your login state)

We do NOT use third-party tracking cookies, advertising cookies, or analytics cookies beyond essential server logs.

10. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you are under 18, you may not create an account or use the Service.

If you believe we have inadvertently collected information from a minor, please contact us immediately at anthony@attested.legal and we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email with 30 days advance notice.

The "Last Updated" date at the top of this page indicates when this policy was last revised. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Information

Verifore Technologies LLC
Metairie, Louisiana

For privacy questions or to exercise your rights, contact:
anthony@attested.legal

Verifore Technologies LLC is not a law firm and does not provide legal advice. The Attested Service is a software platform that assists legal professionals in managing and authenticating evidence. Use of the Service does not create an attorney-client relationship. Subscribers are responsible for compliance with all applicable rules of professional conduct, evidence rules, and jurisdictional requirements.

attested.