Privacy Policy

Effective: July 18, 2026

This Privacy Policy explains how Supreme Mind AI, Inc. ("Supreme Mind," "we," "us," or "our") collects, uses, and protects information in connection with the Supreme Mind platform and websites (the "Service"). Supreme Mind provides the Service to law firms and legal professionals. For matter content processed on behalf of a Firm, the Firm is the controller and Supreme Mind acts as its processor/service provider, handling that content only to provide the Service.

1. Information we collect

  • Account information: name, email address, job title, firm affiliation, role (for example, firm administrator), and sign-in and session records.
  • Matter content: the case information and documents you submit, and the outputs generated for you (collectively, "Matter Content").
  • Usage and device data: metadata about how the Service is used, such as feature and model-call events (who, when, which task, which model and region), credit usage, log and security data, and standard technical data (for example, IP address and browser type).
  • Cookies and local storage: we use minimal cookies and browser local storage necessary to keep you signed in and to remember workspace preferences. Demo sessions store matters only in your browser's local storage; nothing from a demo session is stored on our servers.

2. How we use information

  • To provide the Service, including generating outputs by sending the necessary content to our AI model provider (Anthropic) for processing;
  • To authenticate users, secure the Service, prevent abuse, and enforce rate limits;
  • To bill and administer accounts;
  • To maintain metadata-only audit records of model calls (privileged content is not written to these logs);
  • To evaluate and improve the Service using aggregated or de-identified data (usage and operational metadata, public-record material, and de-identified records of outputs, their settings, and how they compare to public outcomes), excluding the confidential content of matters and any privileged material;
  • To support you and communicate about the Service; and
  • To comply with law and protect rights and safety.

We do not sell personal information, and we do not use Matter Content to train third-party foundation models.

3. How the Service processes content (confidentiality posture)

  • The AI model runs server-side. The browser never holds an API key.
  • Model calls are pinned to US inference geography and routed only through Zero-Data-Retention-eligible endpoints; features that are not Zero-Data-Retention eligible are not used on Matter Content.
  • Firm Matter Content (matters, generated briefs, and grounding results) is stored in a US-region PostgreSQL database with per-firm isolation; uploaded documents are stored in a US-region file store. Serverless compute is pinned to a US region.
  • Each model call writes a metadata-only audit record. Privileged content is not written to logs.

4. Subprocessors

We use the following subprocessors to provide the Service:

  • Anthropic (AI model processing)
  • Vercel (application hosting and serverless compute)
  • Neon (PostgreSQL database hosting)
  • Resend (transactional email, such as sign-in links)

We may update this list; where required, we will provide notice of changes. Under a pilot or enterprise agreement, a signed data processing addendum (DPA) and Zero-Data-Retention addendum are available.

5. Data retention and deletion

  • Deleting a matter hides it immediately and permanently deletes it (database rows and stored documents) after a 30-day recovery window. Individual documents delete immediately.
  • Demo-session data lives only in your browser and is not retained by us.
  • We retain account and limited metadata for as long as needed to provide the Service and for legitimate business, legal, and security purposes, after which it is deleted or de-identified.
  • On termination, Firm Matter Content is deleted as described above or per your agreement with us.

6. Security

We use administrative, technical, and physical safeguards designed to protect information, including US-region storage, per-firm data isolation, encryption in transit, restricted access, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights and choices

Because Matter Content is processed on behalf of the Firm, requests concerning Matter Content should be directed to the Firm; we will assist the Firm as its processor. Depending on your jurisdiction, you may have rights to access, correct, delete, or port certain personal information, or to object to or restrict certain processing. To exercise rights regarding personal information we control, contact [email protected]. Firm administrators can manage users and can delete matters and documents directly in the Service.

8. International users

The Service is operated from and stores data in the United States. If you access the Service from outside the United States, you understand that information will be processed in the United States.

9. Children

The Service is intended for professional use by adults and is not directed to children under 16, and we do not knowingly collect information from them.

10. Changes to this Policy

We may update this Policy; material changes will be notified through the Service or by email, and the effective date above will change.

11. Contact

Supreme Mind AI, Inc. Privacy questions: [email protected].

This Policy is provided for general information and does not constitute legal advice.