GavelSight LLC ("GavelSight," "we," "us," or "our") operates the GavelSight judge intelligence platform. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information. GavelSight is currently available to users in the United States. If you are located outside the United States, please contact us before subscribing.
1. Information We Collect
Account Information
When you create an account, we collect: your full name, firm name, work email address, and a hashed password. We do not store plaintext passwords.
Billing Information
Payment processing is handled by Stripe. GavelSight does not store full credit card numbers or CVV codes. We receive and store a Stripe customer ID, subscription ID, subscription status, and billing event records (e.g., payment success, cancellation, plan changes).
Case Information and Case Facts
When you generate an analysis, you may submit case facts, litigation summaries, or other matter-specific information ("case facts"). These case facts are stored in our analyses table in our database, associated with your user account. We use this information to generate and display your requested analysis, to maintain your analysis history, and to allow you to retrieve prior analyses. We do not use your case facts to train machine learning models or to improve GavelSight's analytical outputs in ways that would expose your information to other users.
Transmission to AI providers. Our AI-assisted features (Judge Chat and AI Research — research memos, authority finder, citation checking, document drafting) work by sending the text you enter, including case facts and questions, to a third-party large-language-model provider (currently OpenRouter, Inc. and the underlying model provider Anthropic, PBC) to generate your result. This means the case information you type into an AI feature leaves GavelSight's systems and is processed by that provider under its own terms and data-handling and retention policies, which GavelSight does not control. We send each request individually (no batch processing), and we set a no-training / no-collection flag on the request where the provider exposes one; where it does not, we include a confidentiality instruction in the request but cannot enforce the provider's retention or training behavior. Do not enter privileged, sealed, protective-order, or client-confidential material into AI features if you are not authorized to disclose it to a third-party processor.
Analytics Records
When you run a judge-analytics query, we store the judge identifier, case type, and the generated result in our database associated with your account, so you can retrieve it later. These records describe a judge's published opinions and citation history; they are not predictions of future rulings.
Reports
Generated PDF reports and report metadata are stored in our reports table associated with your account.
Session Data
We use server-side sessions that store a session identifier, your user ID, and a CSRF token to secure authenticated requests. Session data is stored server-side and referenced by a session cookie in your browser.
Usage Logs and Billing Events
We maintain a log of billing events (e.g., account creation, terms acceptance, subscription changes, payment events) in our billing_events table. These are used for account management, support, and compliance purposes.
2. What We Do Not Collect
- We do not collect PACER credentials or any federal court system login information
- We do not collect attorney-client privileged communications beyond what you voluntarily enter as case facts when generating an analysis
- We do not collect device fingerprints, advertising identifiers, or cross-site tracking data
- We do not sell your personal information to third parties
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the GavelSight service
- Process subscription payments and manage your account
- Generate analyses, predictions, and reports based on your inputs
- Send transactional emails (account confirmation, billing receipts, service notices)
- Respond to support requests and enforce these Terms
- Comply with applicable law and legal process
We do not use your information for behavioral advertising or sell your data to data brokers.
4. Third-Party Services
To deliver the service, GavelSight relies on a small number of named third-party sub-processors. We disclose every category below. We do not sell your personal information, and we do not share it with any third party except (a) the sub-processors listed here, each used only to perform the specific function described, (b) as required by law, or (c) with your direction.
AI / large-language-model providers (AI features only): When you use an AI-assisted feature (Judge Chat, AI Research, Practice Intelligence), the text you submit — including any case facts or matter information you choose to enter — and relevant excerpts of the opinion corpus are transmitted to a third-party large-language-model provider to generate your result. The current provider is OpenRouter, Inc., which routes to underlying model providers including Anthropic, PBC. This transmission happens only for AI features and only for the request you initiate. See Section 10 for the data-handling terms, no-training posture, and confidentiality guidance that apply to these features.
Stripe: We use Stripe, Inc. for payment processing. Stripe may collect and process payment card data and related information subject to Stripe's own privacy policy. Stripe is a PCI-DSS compliant payment processor. GavelSight does not store full payment-card numbers.
Resend: We use Resend, Inc. to deliver transactional email (receipts, account, and billing notices). Resend processes the recipient address and message content needed to send that email, subject to Resend's privacy policy.
Public-record judicial data: Judicial data displayed in GavelSight is compiled from public federal-court sources, including govinfo.gov (the U.S. Government Publishing Office's official source for federal court opinions), each state's official court reporter for state opinions, and the Federal Judicial Center biographical directory. We do not use commercial aggregators. This is publicly available information and is not linked to your personal account in any way that the underlying source operators can observe.
Other than the sub-processors named above (and only for the functions described), we do not share your personal information or case facts with any third party, except as required by law. We never sell your data, and we never share it for advertising.
5. Data Retention
We retain your account information and case facts for as long as your account is active. If you close your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or legitimate business necessity (e.g., billing dispute resolution). Aggregated, de-identified usage statistics may be retained indefinitely.
6. Cookies and Tracking
GavelSight uses a single session cookie to maintain your authenticated session. We do not use third-party advertising cookies or cross-site tracking cookies. The service is designed to be VPN-friendly and does not fingerprint your IP address for purposes beyond basic server logging. Server access logs may retain IP addresses for a limited period for security and abuse prevention purposes.
7. Security
GavelSight uses industry-standard security measures including HTTPS/TLS encryption in transit, hashed passwords, CSRF token protection, and access controls. No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@gavelsight.com.
8. Your Rights and Choices
You have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate personal information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Portability: Request an export of your account data and case facts in a machine-readable format
Rights requests are handled manually. To submit a request, email privacy@gavelsight.com from the email address associated with your account. We will respond within 30 days. We may require identity verification before processing your request.
9. California Privacy Rights (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. GavelSight does not sell personal information. To exercise your CCPA rights, contact us at privacy@gavelsight.com.
10. AI Features and Attorney-Client Confidentiality
Important confidentiality notice for attorneys. GavelSight's AI-assisted features transmit the text you enter to a third-party large-language-model provider (see Sections 4 and 10) to generate your result. Before entering client confidences, privileged material, or attorney work product into an AI feature, consider your obligations under ABA Model Rule 1.6(c) and your jurisdiction's equivalent (reasonable efforts to prevent inadvertent or unauthorized disclosure) and Rule 1.1 (technology competence). Transmitting client information to a vendor is permissible for most attorneys when reasonable safeguards and disclosures are in place, but the judgment is yours. You can use every AI feature effectively without entering client-identifying details — phrase questions in terms of legal issues and fact patterns rather than client names. You are responsible for what you submit.
GavelSight's AI-assisted features (including Judge Chat, AI Research, and Practice Intelligence tools) may process case facts and matter-specific information you enter. We take the following steps to protect that information:
- Which providers receive AI inputs. AI requests are served by OpenRouter, Inc., which routes to underlying model providers including Anthropic, PBC. Your inputs are transmitted to whichever provider serves your request, solely to generate your result.
- We do not train on your inputs, and we configure providers not to either. GavelSight does not use your inputs or AI outputs to train any model. We send AI requests under each provider's commercial/API data terms, which (for the providers above, per their published policies) do not use API inputs to train their models and apply limited retention for abuse-monitoring only. Where a provider supports an enhanced no-retention / zero-data-retention setting, we use it. We do not control, and cannot make representations on behalf of, a third-party provider's own infrastructure beyond what that provider's published data policy states.
- Honesty about limitations. We will not claim a protection we cannot deliver. The protection that applies to a given AI request is the published data policy of the provider that served it (linked in our Terms). If a provider changes its policy, our representation changes with it; check the providers' current policies before submitting sensitive material.
- Your data export and deletion rights. You may export all stored queries and AI-generated answers associated with your account, or request their deletion, at any time. See your Account Data page.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the GavelSight application at least 14 days before the changes take effect. Continued use of GavelSight after the effective date of an updated policy constitutes acceptance of the updated policy.
12. Contact
General inquiries: hello@gavelsight.com
Privacy requests: privacy@gavelsight.com
GavelSight LLC | Effective Date: July 26, 2026