Privacy Policy
This Privacy Policy explains how Banah Enterprises, LLC, a Colorado limited liability company that operates the Veritas service (referred to as "Veritas," "we," "us," or "our"), collects, uses, shares, and protects information when you visit our websites, create an account, or use the Veritas citation-verification platform (collectively, the "Service"). It also describes the choices and rights you have. This Policy is incorporated into our Terms of Service.
Veritas understands that the documents lawyers submit are sensitive and often privileged. We have designed the Service to process only what verification requires, to minimize what we retain, and to screen out categories of restricted data at the door. This Policy describes how that works.
When you use the Service on behalf of an organization under an agreement with that organization, the organization controls how it uses the Service, and this Policy describes our practices as the provider. Your organization's own policies may also apply.
1. Information we collect
We collect the following categories of information:
- Account information. Name, email address, organization, role, and the credentials used to authenticate. Authentication is handled through our identity provider.
- Billing information. Plan, seat count, and billing contact. Payment card details are processed by our payment processor and are not stored by Veritas.
- Documents and content you submit. The filings, briefs, motions, memoranda, and citations you submit for review, and the verification results, certificates, and audit records generated from them.
- Usage and log data. Information about how you use the Service, such as actions taken, timestamps, device and browser information, IP address, and diagnostic logs.
- Cookies and similar technologies. Information collected through cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. See the cookies section below.
- Communications. Information you provide when you contact us, request a demonstration, or correspond with our team.
2. How we handle the documents you submit
The documents you submit for verification receive specific handling:
- We process submitted documents to extract citations and propositions, resolve cited authorities against legal source data, evaluate support, and generate verification results and a hashed, time-stamped certificate.
- An input gate screens submitted documents for certain sensitive markers, such as identifiers associated with criminal justice information. When the gate detects such markers, the document is rejected at intake and the rejected content is not stored. The gate is a safeguard, not a guarantee, and you remain responsible for not submitting prohibited data.
- We retain documents and results only as long as needed to provide the Service to you and your organization, to maintain the audit trail you rely on, and as required to meet legal obligations. Retention periods depend on your plan, and certain trial results are retained only briefly.
- We do not sell your documents. We do not use the content of your documents to train our own or third parties' general-purpose models, and we engage artificial intelligence providers under terms that do not permit them to train their models on your content.
3. How we use information
We use information to:
- Provide, operate, secure, and support the Service, including performing verification and generating certificates and audit records.
- Authenticate users, manage accounts and seats, and process billing.
- Maintain the integrity and security of the Service, detect and prevent fraud and abuse, and enforce our Terms.
- Communicate with you about the Service, including service-related notices and, where permitted, information about features and offerings.
- Improve the reliability and performance of the Service using aggregated or de-identified usage information that does not identify you or reveal the content of your documents.
- Comply with legal obligations and respond to lawful requests.
4. Legal bases for processing
Where required by applicable law, we process personal information on the following legal bases: to perform our contract with you or your organization, to pursue our legitimate interests in operating and securing the Service in a manner that does not override your rights, to comply with legal obligations, and with your consent where consent is required.
6. Data retention
We retain personal information and Customer Content for as long as your account is active or as needed to provide the Service, and thereafter as needed to comply with legal obligations, resolve disputes, and enforce our agreements. After termination, we make data available for export for a limited period and then delete or de-identify it in the ordinary course, unless a longer retention period is required by law. Content rejected by the input gate is not retained.
7. Security
We maintain administrative, technical, and physical safeguards designed to protect information, including encryption of data in transit and at rest, access controls, and audit logging. We restrict access to personal information and Customer Content to personnel and providers who need it to operate the Service. No system is completely secure, and we cannot guarantee absolute security, but we work to protect information using measures appropriate to its sensitivity.
8. Your rights and choices
Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, delete, or receive a copy of it, to opt out of certain processing, and to appeal a decision about your request. Residents of Colorado have rights under the Colorado Privacy Act, and residents of other jurisdictions may have similar rights under laws such as the California Consumer Privacy Act and the General Data Protection Regulation.
We do not sell personal information and we do not use it for targeted advertising. To exercise a right, contact us at the address below. We will verify your request as required by law and respond within the time the law requires. Where the Service processes documents on behalf of an organization, we will refer rights requests that concern that organization's content to the organization.
10. Children's privacy
The Service is intended for legal professionals and is not directed to children. We do not knowingly collect personal information from anyone under the age of eighteen. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
11. International users
We operate in the United States, and information we process may be stored and processed in the United States and other countries where we or our providers operate. Those countries may have data-protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers of personal information.
12. Changes to this Policy
We may update this Policy from time to time. When we make a material change, we will post the updated Policy with a new effective date and, where appropriate, provide additional notice. Your continued use of the Service after the update takes effect constitutes acceptance of the updated Policy.
13. Contact us
If you have questions about this Policy or our privacy practices, or if you wish to exercise a privacy right, contact us at andrew@veritaslaw.app. Banah Enterprises, LLC is the entity responsible for the information described in this Policy.