Immigration Copilot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered petition drafting platform.

1. Information We Collect

We collect the following categories of information:

Account data: Name, email address, and law firm name provided during registration via Clerk.
Document content: Client documents (PDFs, Word files, images) uploaded for petition preparation. These are stored encrypted on Amazon S3.
Usage data: Pages visited, features used, and interactions with the platform, collected via Google Analytics 4.
Technical data: IP address, browser type, and device information collected automatically when you use our service.

2. How We Use Your Data

We use your information solely to:

Provide the Immigration Copilot service (document classification, petition drafting)
Authenticate your account and maintain session security
Analyze aggregate usage patterns to improve the platform
Respond to support requests and account inquiries

3. AI Model Training — Critical Disclosure

Client documents, petition drafts, and knowledge bases uploaded or generated through Immigration Copilot are not used to train any AI models, including those provided by third parties. All document content is processed solely for the purpose of providing the service to you.

AI inference is performed via Amazon Bedrock (Claude models). Document content sent to Bedrock for processing is not retained by Amazon for model training purposes under our enterprise agreement.

4. Data Retention

Documents and petitions: Retained for the duration of your subscription plus 90 days after cancellation, then permanently deleted.
Account data: Retained until account deletion is requested.
Analytics data: Aggregated usage data retained for 26 months per GA4 default settings.

5. Data Sharing

We do not sell your personal data. We share data only with:

Amazon Web Services: Infrastructure and AI inference processor. Data processed under AWS Data Processing Agreement.
Clerk: Identity and authentication provider. Account data only.
Google Analytics: Aggregated, anonymized usage analytics. No document content is shared.

6. Cookies

We use the following types of cookies:

Session cookies: Required for authentication. Cannot be disabled without breaking login functionality.
Analytics cookies: Google Analytics 4 cookies to measure site usage. You can opt out by declining the cookie banner or using Google's opt-out tools.

7. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@immigrationcopilot.ai.

EU/EEA residents have additional rights under GDPR including data portability and the right to restrict processing. California residents have additional rights under CCPA.

8. Data Security

All data is encrypted at rest (AES-256) and in transit (TLS 1.2+). We follow SOC2-aligned security practices including access controls, audit logging, and regular security reviews.

9. Contact

Privacy inquiries: privacy@immigrationcopilot.ai

Immigration Copilot
For legal notices: privacy@immigrationcopilot.ai