Privacy Policy

About this policy

M.Ross connects your assistant to legal research tools and source APIs. Your conversation lives in your assistant. M.Ross does not create a separate chat history or save completed drafting documents. The current service stores optional profile preferences and drafting identity when supplied, account and connection records, consent records, daily usage counters, and cached research-provider responses. It is not a zero-storage service.

M.Ross ("we") is a legal research service based in Washington State and offered only to people in the United States. This policy covers our website, account setup, and connections to ChatGPT, Claude, Cursor, and other compatible assistants. For privacy questions or requests, email info@evergreenintelligence.work.

Information we collect

• Account information: your email, sign-in identifier, account label, and invitation information where an invitation is used.
• Research inputs: the questions, search terms, citations, case details, and other information your assistant sends to M.Ross tools. We do not receive your entire chat automatically. Cached provider responses may include search terms echoed by the provider, public case details, and party information.
• Access and consent records: connected application details, token hashes, permissions, acceptance dates, terms version, email, and sign-in and account-setup information. Website consent records can include your IP address and browser details.
• Operational information: account-linked daily counts of tool calls and research-source requests. Hosting and sign-in providers also process request, device, security, and error information. We do not claim that their logs are free of personal information.
• Optional profile information: jurisdiction, role, preferred detail level, time zone, legal-aid preference, and drafting identity such as name, mailing address, phone, and contact email when supplied through profile tools. Your assistant may retrieve these details for later requests. Do not use profile fields to save private case facts.
• Support information: your email and the content you choose to send when contacting us.

We use this information to provide research and drafting tools, maintain your account, authenticate connections, record agreements, apply service limits, manage membership where offered, troubleshoot failures, and prevent misuse.

Your assistant and research providers

Your assistant sends tool inputs to M.Ross and receives the results. Drafting tools return templates with placeholders for your assistant to fill from the current conversation. Where you have supplied an optional drafting identity, tools can retrieve it from your profile. Your assistant provider handles your conversations, memories, and any use for model training under its own policies and your settings. Disconnecting M.Ross does not delete those conversations.

Research tools send the statute references or other lookup terms needed to retrieve material from the relevant official legal source. Where case-law and docket research is enabled, queries, public case citations and docket identifiers also go to CourtListener, operated by Free Law Project. Disabled research features do not send requests to that provider. Information included in a lookup can therefore reach the source. We do not send your sign-in email as a separate research field. Use short, de-identified topics and keep private case details, medical information, government IDs, payment details and sign-in secrets out of M.Ross tool requests. Do not rely on the service to detect and remove sensitive information for you.

We do not maintain a saved case file or full conversation transcript. CourtListener responses are cached in the application database for reuse. Cache keys are derived from the upstream lookup rather than a user identifier, but cached content can still contain personal information or search terms. A hashed key does not anonymize the response.

Service providers

We use Clerk for sign-in and verification email, Vercel for hosting, and Neon for the application database. Where we send invitation or reconnection email, we use Resend. These services process the information needed to perform those functions. Our service operators can access information as needed for support, security, and account administration.

Customer payments and subscriptions are not enabled in this service. Never enter payment details in an assistant conversation.

We may disclose information when legally required or to address fraud, security incidents, or threats to people's rights. Although M.Ross is offered only in the US, our providers may process information in other countries under their own arrangements. US-only availability is not a guarantee of US-only data storage.

Cookies, advertising, and training

We use cookies and related browser storage for sign-in, sessions, and account setup. Sign-in and payment providers may also use cookies and device checks for security and their hosted services. Blocking them can prevent sign-in or checkout from working.

M.Ross does not sell personal information, share it for cross-context behavioral advertising, or add advertising trackers. We do not use research inputs to train our own AI models or send marketing email. We do not currently change site behavior in response to a browser Do Not Track signal. Our operational counters do not store tool inputs or results.

How long information remains

• Account, invitation, and consent records remain stored unless removed through account administration or a verified privacy request. There is currently no fixed automatic deletion period for these records.
• Daily usage counters and optional profiles have no fixed automatic deletion period in the current service. Cached search responses are reused for up to 24 hours; opinion and citation responses for up to seven days. Cache expiration stops reuse, but does not erase the database row. Removal requires separate cleanup.
• Connection authorization codes expire after 10 minutes, access tokens after one hour, and refresh tokens after 30 days from issue. Refreshing issues a new token. Expiration or revocation stops access but does not automatically erase the stored token-hash record.
• Records from earlier versions can remain until separately reviewed and removed. Signing out, revoking a connection, or reaching a cache expiry date does not itself delete stored account, profile, cache, or consent records.

Contact us to request deletion or ask about a specific record. Any information we retain after a request must have a lawful reason, such as an unresolved payment dispute or a recordkeeping requirement; we will explain applicable limits. Our providers' logs, backups, and independent records have their own retention arrangements. We do not promise that account closure immediately removes those copies.

Your choices and privacy requests

Keep private case facts in your assistant conversation. Profile tools can update optional saved preferences and drafting identity. You can request a copy, correction, or deletion of a saved profile by email. You can revoke M.Ross connections on the Connect page or disconnect through your assistant's settings. Signing out of the website alone is not a request to erase your account.

Email info@evergreenintelligence.work to request access, correction, a copy, deletion, or review of a privacy decision. We may need to verify your account before acting. Do not email passwords, sign-in codes, identity documents, or private case records. We will respond under applicable legal requirements, including any available appeal or complaint rights, without penalizing you for exercising those rights.

We cannot erase public court records or information held independently by your assistant or a research provider; those requests must also be directed to the relevant provider.

Sensitive information and children

Use general or de-identified facts for research. Do not submit medical records, personal health details, Social Security or other government identification numbers, passwords, sign-in codes, or full payment details to M.Ross tools. A legal research question can still reveal sensitive information, including information about other people. There is no attorney-client relationship or promise of legal privilege.

We do not ask you to supply personal health information or build health profiles. If information you send reveals a condition, symptoms, treatment, disability, or other health details, receiving and processing it can still be a collection of that information, even without saving a research record. It comes from what you send through your assistant or support messages. Processing follows the purposes and provider disclosures above; a research lookup can disclose included details to its source. Do not include personal health details in tool requests.

To stop sending information, stop using the tools and revoke your connection. To request access to or deletion of health-related information we hold, withdraw any applicable consent, or appeal our response, use the privacy-request email above. We will verify the request and address relevant service-provider records and applicable response, deletion, and appeal requirements. This does not delete information independently held by your assistant or a public source.

M.Ross is not directed to children under 13. If you believe a child under 13 supplied personal information, contact us so we can investigate and address it.

Security and policy changes

We use authenticated access and HTTPS on the public service. Connection secrets are stored as hashes in our application database. These measures reduce risk but cannot guarantee complete security. Keep credentials out of chats and support messages.

We will post policy changes here with an updated date and provide additional notice or obtain consent where required by law. For account, connection, or privacy help, visit Support.