Anitarian Privacy Policy

1. Overview

Anitarian Inc. ("Anitarian," "we," "us," or "our") provides a legal matter intelligence platform ("the Service") that helps legal professionals manage matters, retrieve and analyze legal information, and work with documents. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have.

Our core commitment is data sovereignty. Anitarian-hosted LMIS is designed so primary matter data is stored and processed on Canadian-controlled infrastructure. If you explicitly connect a third-party productivity service, such as Google Workspace or Microsoft 365, the live document remains hosted by that provider. Anitarian keeps a Canadian-controlled snapshot or record for matter-gating, audit, and continuity.

2. Information We Collect

2.1 Information you provide

• Account information: name, email address, and profile picture when you sign in.
• Matter and case data: the legal matters, documents, notes, drafts, research, and other content you upload or create in the Service.
• Firm and user information: firm name, roles, permissions, and team membership.

2.2 Information we collect automatically

• Usage data: how you interact with the Service, including pages visited, features used, and timestamps.
• Log and diagnostic data: IP address, browser type, device information, and error logs used to operate and secure the Service.

2.3 Information from connected services

If you choose to connect a third-party productivity service, such as Google Workspace, we access only the documents and metadata you authorize us to create, link, read, export, or snapshot.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate your identity and manage your account.
• Process and analyze legal matters and documents you work with.
• Generate matter briefs, research, summaries, drafts, and other intelligence features.
• Create, link, snapshot, or synchronize connected documents when authorized.
• Improve and secure the Service.
• Communicate with you about the Service, with your consent where required.
• Comply with legal obligations.

4. How We Store and Protect Information

• Location: In Anitarian-hosted deployments, primary Service data is stored on Canadian-controlled infrastructure. We do not intentionally transfer primary matter data outside Canada except as described in Section 5, where required by law, or where a customer separately configures a different deployment or integration.
• Encryption: Data is encrypted in transit using TLS. Data is encrypted at rest where supported by the underlying storage systems.
• Access controls: Access to your data is restricted to authorized users and personnel. Matter data is matter-gated so users can access only matters and documents they are permitted to see.
• Retention: We retain data only as long as needed to provide the Service or as required by law, contract, audit requirements, or customer-configured retention settings.

5. Connected Productivity Services

The Service can integrate with third-party productivity suites, including Google Workspace and Microsoft 365, so that you can create, link, and work with documents in those services.

• What we access: When you connect a productivity service, we access only the documents and metadata you authorize us to create, link, read, export, or snapshot. We do not access unrelated files.
• Where the live document lives: The live, editable copy of a connected document is hosted by the third-party provider, such as Google. That live document is governed by the provider's infrastructure, terms, and privacy policy.
• What Anitarian stores: We keep a read-only snapshot, selected content, export, metadata, or audit record on Canadian-controlled infrastructure for matter-gating, audit, review, and data-sovereignty purposes.
• Third-party terms: Your use of a connected productivity service is also governed by that provider's own terms and privacy policy.
• Revocation: You can disconnect a productivity service at any time, which revokes our future access to it. Existing LMIS snapshots may remain until deleted under your organization's retention settings or an authorized deletion request.

6. Sharing of Information

We do not sell your personal information. We share information only:

• With your consent.
• With your organization or firm administrators, according to workspace permissions.
• With service providers who help us operate the Service, under contracts that require them to protect your data and keep it in Canada where applicable.
• With connected providers, such as Google, when you authorize an integration.
• To comply with law or legal process, or to protect the rights, safety, and security of Anitarian, our users, or the public.
• In connection with a business transfer, such as a merger, acquisition, or sale of assets, with notice where required.

7. Your Choices and Rights

Depending on your jurisdiction and role, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your personal information.
• Restrict or object to certain processing.
• Receive a copy of your data in a structured format.
• Withdraw consent where processing is based on consent.
• Revoke OAuth access through your Google account permissions.

To exercise any of these rights, contact us at the address in Section 9.

8. Data Retention and Deletion

• You may request deletion of your account and associated data at any time.
• We will delete or anonymize your data within a reasonable timeframe, subject to legal, regulatory, contractual, backup, security, and audit requirements.
• Disconnecting a connected productivity service revokes future access. Separately stored LMIS snapshots or records may need to be deleted through LMIS or by request.

9. Contact Us

For privacy questions or requests, contact:

Anitarian Inc.

Kelowna, British Columbia, Canada

Email: privacy@anitarian.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last updated" date above. Your continued use of the Service after changes constitutes acceptance of the updated policy.