litco.ai
Sign in Request early access

LitCo Privacy Notice

Effective date: 2026-11-06

LitCo AI LLC, a Delaware limited liability company ("LitCo"), publishes this notice to explain what information LitCo collects when law firms and their people use LitCo, how LitCo uses that information, who else receives it, and how long LitCo keeps that information. This notice covers the LitCo website at litco.ai, the LitCo application at app.litco.ai, the LitCo iOS app, and Ana. Ana is the assistant built into LitCo. Your team asks Ana questions about a matter and gives Ana tasks, and Ana responds using the documents and records in that matter.

LitCo's mailing address is P.O. Box 66742, Scotts Valley, California 95067.

LitCo processes matter data for your firm

Your firm is LitCo's customer. The firm decides which matters to open, which files to load, which people may see them, and which integrations to turn on. LitCo processes that material to provide the features the firm has enabled, and for the purposes this notice describes.

If your information appears in a firm's matter files because you are a client, a witness, an opposing party, or anyone else involved in a matter, the firm controls that information. Please direct questions about that information to the firm. LitCo refers such requests to the firm.

Information LitCo collects

Account information. When your firm creates your account, LitCo records your name, your work email address, your firm, and your role. When you accept the Terms of Use, LitCo records the version you accepted, the IP address of your device, and details about that device. An IP address is the network address a device uses on the internet. LitCo sends one-time codes to your email address for sign-in verification and password resets.

Matter files and their text. LitCo stores each file your firm loads into a matter. LitCo extracts the text from each file, reads scanned pages so that their text becomes searchable, and builds a search index from that text. The index lets your team find passages across the matter's documents.

Conversations with Ana and records of Ana's work. LitCo stores your conversations with Ana and a step-by-step record of each task Ana performs. Ana performs some tasks in an agent workspace, a separate computing environment that LitCo runs for a matter. For each agent workspace, LitCo stores Ana's conversation history and working files for the matter, including text taken from the matter's documents.

Dictation and recordings. When you dictate into LitCo, or ask LitCo to transcribe a recording, LitCo converts the audio to text on servers LitCo runs. LitCo keeps the text. LitCo does not keep dictation audio after transcription. A recording your firm loads into a matter as a file stays in the matter like any other file.

Billing information. LitCo bills firms through a payment processor. The processor receives the firm's billing contact and the payment information needed to charge the firm. The invoice lines LitCo sends to the processor can name the matter a charge relates to. LitCo keeps the firm's plan, invoices, and payment status. Firms enter payment card details on the payment processor's hosted pages, and LitCo does not receive or store card numbers.

Support requests. When you open a support request from Help & Support in the app, LitCo receives the text of your request, any screenshots you attach, the diagnostic information you choose to include, and your name and email address. LitCo's software also opens support records on its own when it reports a problem to LitCo's support team. Support records, including the ones LitCo's software opens, can contain limited details about a matter.

Website visits. When you visit litco.ai or app.litco.ai, LitCo's servers record the requests they receive, including the network address of your device, the browser you use, and the pages you request. The litco.ai website also runs a web analytics tool on servers LitCo runs. That tool records visits to the website's pages and does not use cookies. The LitCo application at app.litco.ai does not run the analytics tool. The application uses its own cookies to keep you signed in, to remember layout and navigation choices, and to let a recipient open files shared through a passcode-protected link.

Activity records. LitCo keeps a log of activity in each matter and of each import into a matter. LitCo also keeps audit records of actions taken in LitCo, including the tasks people give Ana. Those audit records can contain limited details about a matter. When your firm shares files through a link, LitCo records each file the recipient opens. LitCo's servers also keep service logs, which are records of the servers' own operation. Service logs can keep short excerpts of messages. LitCo's separate log of AI model requests stores a fingerprint of each request and response, and does not store their text. A fingerprint is a short code computed from the text, and the text cannot be recovered from the code.

How LitCo uses AI model providers

LitCo's AI gateway is the part of LitCo's software that sends requests to AI model providers. An AI model provider is an outside company that runs the AI models LitCo uses to draft, summarize, and respond to questions about a matter. A request to a provider can include your instructions, passages from the matter's documents, and your conversation with Ana.

LitCo's AI gateway requires zero data retention on every request it sends to an AI model provider. LitCo checks for that requirement on each request just before sending it, and a request without it does not go out. Zero data retention means the provider does not keep the request or its response after answering, apart from a temporary cache, and does not use them to train models.

Review & Tag, LitCo's document review feature, can run an optional first-pass review, in which an AI model provider responds to yes-or-no questions about each document. The person who starts a review run can turn the first-pass review off. When the first-pass review runs, LitCo sends each document's text, file name, and beginning Bates number, and the review's criteria, to that provider directly, not through LitCo's AI gateway. That provider has enabled zero data retention as a setting on LitCo's account.

LitCo does not train, fine-tune, or otherwise use your firm's documents or other matter data to develop AI models. Section 3(b) of LitCo's Terms of Use makes that commitment to your firm.

Some work stays on LitCo's servers

LitCo reads scanned pages, builds the search index for your documents, and transcribes dictation and recordings on servers LitCo runs. LitCo does not send that work to an AI model provider.

Who else receives information

LitCo uses service providers to run the service. Those providers fall into these categories:

  • hosting and database infrastructure, including the servers for Ana's agent workspaces and the backups and snapshots of those servers;
  • AI model providers, as described above;
  • payment processing;
  • email delivery, for sign-in codes, invitations, notifications, and Ana's mailbox when your firm turns it on;
  • a support issue tracker, which receives the titles of support records, including any limited matter details a title contains; and
  • the mobile platform's push notification service, which delivers notifications to the LitCo iOS app.

A push notification contains a short title and identifiers that tell the LitCo app which screen to open. For most notifications, the title is a fixed phrase, such as "Ana finished a task." For a mention, a reply, or a post, the title names the person who posted and, for a post in a channel, the channel. For a reply to a calendar invitation, the title names the person who replied. A push notification does not contain message text or document contents.

LitCo makes a list of these service providers available to its customers on request. LitCo does not publish the list.

LitCo does not sell personal information.

How LitCo stores and keeps information

LitCo stores the files your firm loads, the text LitCo extracts from them, the search index, your conversations with Ana, the record of each task Ana performs, and the conversation history and working files in Ana's agent workspaces. LitCo holds this data at its hosting providers, on servers LitCo runs and in LitCo's file storage. LitCo keeps this data until your firm asks LitCo to delete it. Closing your firm's account ends sign-in and access and does not by itself delete data.

Some deletions in the app hide data from view and leave the data in place. LitCo also keeps backups of its database and of the servers that host Ana's agent workspaces. After LitCo deletes data, those backups keep copies for a limited period.

Some records, such as audit and activity logs, support tickets, and backups, are kept longer for security, legal, and operational purposes. When LitCo deletes a matter at your firm's request, LitCo keeps those records, including any limited matter details they contain.

LitCo keeps less of two kinds of information. LitCo does not keep dictation audio after transcription. LitCo's log of AI model requests holds a fingerprint of each request and response in place of their text.

You can delete your account in the LitCo app. Your firm's administrator can delete your account. You can also ask LitCo to delete your account by email at the address below. Deleting your account closes the account. After the account closes, you can no longer sign in, and LitCo ends your sessions. When the account closes, LitCo deletes your profile photo, your preferences, and your push notification tokens. LitCo keeps the following records: the information that identifies you, such as your name and work email address; your Terms of Use acceptance records, including the IP address and device details; billing records; and records of your activity in LitCo. LitCo keeps those records to handle legal claims, billing, and security, for as long as needed for those purposes.

Integrations your firm turns on, such as a team messaging service or email, send content to those services under their own terms. When your firm connects a mailbox, turns on Ana's mailbox, or mirrors a matter's posts to a channel in a team messaging service, the email and messaging services involved keep the content they receive under their own terms. The retention practices in this section do not govern that content.

How LitCo protects information

LitCo encrypts the files your firm loads into each matter, as LitCo holds them in its file storage, with AES-256-GCM, a widely used encryption standard. Each matter has its own data key, the key used to encrypt that matter's files. LitCo encrypts that data key with a second key held in a managed key service run by a cloud provider or in a hardware security module, a dedicated device built to hold keys. LitCo's servers ask that service or device to lock and unlock each matter's data key and never hold the second key themselves. A production deployment refuses to use a key file on local disk. The key for one matter does not open files in another.

The database that holds extracted text, the search index, and conversations with Ana does not use per-matter keys. The servers for Ana's agent workspaces, which hold Ana's working files and text taken from the matter's documents, do not use per-matter keys either. LitCo's production database is stored on block storage that LitCo's hosting provider encrypts at rest. The database enforces row-level security on the tables that hold matter data. Row-level security is a database rule that limits each request to the rows of the matter the request names, and the application connects to the database as a role that cannot bypass the rule. The database returns zero rows from those tables to a request that does not name its matter.

LitCo limits what each person and Ana can reach by the person's account, role, and matter membership. LitCo also enforces ethical walls, the restrictions a firm sets to keep particular people away from a matter, both when people read documents and when they share documents. The database makes the matter activity log and import history append-only, so that entries cannot be edited or deleted after the fact.

Every night, LitCo makes a backup copy of its production database. LitCo encrypts each nightly database backup on the server before uploading that backup to off-site storage. That encryption step applies to the nightly database backups only. The backups and snapshots of the servers that host Ana's agent workspaces are outside that step.

Children

LitCo is built for law firms and the people who work with those firms. LitCo does not knowingly collect information from children under 13. If you believe a child has provided information to LitCo, contact LitCo at the address below.

Changes to this notice

LitCo will post any revised notice at this address with a new effective date.

Contact

Email LitCo at hello@litco.ai or write to LitCo AI LLC, P.O. Box 66742, Scotts Valley, California 95067.