The short version: HERESAI requires a secure account and active subscription for app access. Case records are stored in owner-scoped Supabase tables and a private evidence bucket. We do not sell or use your case data for advertising. HERESAI is not end-to-end encrypted: our hosting and storage providers process data to operate the service.
When you create an account, Clerk stores and secures your login credentials, email verification state, sessions, password reset flows, TOTP setup, and backup codes. HERESAI mirrors non-secret account state such as email verification, subscription status, MFA status, and onboarding progress so the app can enforce access.
Your case details, deadlines, journal notes, witnesses, timeline events, calendar entries, checklist progress, and evidence metadata are stored in Supabase with row-level security scoped to your Clerk user id. Evidence files are stored in a private Supabase Storage bucket. Platform encryption at rest and in transit is provided by our vendors; do not treat this as end-to-end encryption or as a guarantee that a device you share is safe.
Case information may include highly sensitive personal, health, education, child, safety, or legal information. Do not submit more information than is necessary. AI features require a separate in-product choice before sensitive saved categories are included; direct questions you type are sent to Anthropic only to provide the requested response. AI is optional and is not a substitute for a lawyer, advocate, clinician, emergency service, or court.
We process account and case information to provide the service you request, secure accounts and prevent fraud, process billing, respond to support requests, comply with legal obligations, and improve reliability using de-identified operational data where feasible. We do not use case content for targeted advertising.
HERESAI uses Clerk for authentication, Supabase for database and storage, Vercel for hosting, Stripe and/or Clerk Billing for payments, Anthropic for optional AI requests, and Resend for optional waitlist email. These providers process data only as needed to provide their services. Their availability, locations, and privacy terms can change; request the current provider list from admin@heresai.app.
You may delete individual evidence records and case entries in the application. A canceled or lapsed subscription locks ordinary workspace access; it does not automatically delete records. Signed-in users can download a JSON account-data export from Settings. To request account deletion, correction, or another applicable privacy right, use the authenticated Settings request flow or contact us from your account email; do not include case details. We will verify the request before acting.
We retain active account and case data until you delete it or request account deletion, subject to a verified legal, security, fraud-prevention, billing, or dispute-related need. Backups may retain deleted data for a limited rolling period; HERESAI must publish the current backup deletion window before public launch. We will record the reason for any retention exception and will not use retained content for a new purpose.
Depending on where you live, you may have rights to access, correct, delete, obtain a portable copy of, or limit certain processing of personal information, and to appeal a denied request. You may use an authorized agent where law permits. You can complain to your local data-protection authority where applicable. HERESAI will not discriminate against you for exercising privacy rights.
Heresai is for adults navigating legal matters and is not directed to children under 18. Do not create an account for a child or knowingly submit a child’s information except where you are legally authorized and it is necessary for your own case organization.
Questions about this policy: admin@heresai.app.
Heresai is an organizational and educational tool, not a law firm, and does not provide legal advice. See our Terms of Use.