Privacy Policy

Arami Tech LLC operates ProxiLegal, a browser-based practice-management service for law firms. This draft describes our website, firm workspaces, external collaborator portal and platform administration service.

We use account and service information to operate ProxiLegal. A law firm decides which client, matter and staff information it puts into its workspace and who may use it. For that workspace information, we generally process information on the firm's instructions; the firm remains responsible for its own client notices, permissions and professional obligations. Our responsibilities for account administration, security and support may be different.

This page is an initial policy draft for review. It does not replace a signed customer agreement or data-processing agreement.

Workspace content may include personal or confidential information about people who do not have a ProxiLegal account. Firms should only upload information they are authorized to process and should avoid including unnecessary sensitive information.

Authentication is handled by Supabase. Where an authorized platform operator uses Google sign-in, Google and Supabase process the sign-in information needed for that login. Passwords should never be sent to our support team.

• Provide accounts, firm workspaces, document tools and the external submission portal.
• Check membership and permissions, manage invitations and process access requests.
• Maintain trial and service status, send account messages and provide support.
• Investigate errors, maintain operational records, protect the service and prevent misuse.
• Meet applicable legal requirements and respond to properly authorized requests.

Optional getting-started or follow-up messages are separate from essential account communications. We do not use firm matter content to run advertising campaigns.

Your firm: authorized members can access workspace information according to their roles. Firm administrators manage invitations and permissions. External collaborators use a separate portal with access to the submissions made available to them.

ProxiLegal operations: authorized personnel may process account, service and support information when needed to operate the service, investigate a problem or respond to an authorized request. Platform administration access is separate from firm membership; support staff do not automatically become members of a firm's workspace.

Service providers: the providers described below process information needed for hosting, authentication, storage, email and requested AI functions. We may also disclose information where required by law or where reasonably necessary to protect accounts, the service or other people's rights. We do not sell workspace content.

The primary application database is hosted on Supabase in Singapore. That does not mean every part of the service or every copy of information is processed only in Singapore.

Some browser libraries, fonts and icons are downloaded from third-party content-delivery services, including jsDelivr, cdnjs, esm.sh and Google Fonts. These services receive the connection information required to deliver those resources.

The current AI relay is configured for a United States region. Other providers may process information in countries where they or their service providers operate. Provider terms, processing arrangements and any required transfer safeguards must be reviewed as part of the final customer and privacy documentation.

When you use an AI wording or bill-description function, the text supplied to that function is sent for external processing. The request may pass through our Vercel relay to Anthropic. The selected text can contain names, descriptions or other confidential information if you include them.

Use these features only where your firm permits that processing. Remove unnecessary client, matter and sensitive details before submitting text. AI output needs human review; the feature is not a substitute for professional judgment.

This draft does not promise zero provider retention or that every AI request stays in the database's hosting region. We will finalize the provider-specific retention and processing disclosures before representing those terms as settled.

After your email has been verified, ProxiLegal may check whether its domain is associated with an existing firm. Common shared email providers are excluded from company-domain matching. A domain match does not automatically add you to a firm.

If you choose to request access, your name and verified email address are shared with the relevant firm's administrators so they can review the request. You are asked to agree to this before submitting it. You can review or withdraw a pending request. A rejected or expired request does not by itself delete your account.

Firm owners who enable direct domain-based requests must verify control of that domain. Public DNS checks are used for this purpose. Keep private invitation links and join codes confidential.

We use Resend to deliver authentication and application emails. Supabase Auth sends verification and recovery messages through the configured Resend SMTP service. The email provider processes the address, message and delivery metadata. If you submit a support message, its content and relevant account or firm context may be sent by email to the support recipient.

Verification, password recovery, security events, requested invitations and necessary account or billing updates are separate from optional promotional or getting-started messages. Optional onboarding and trial follow-up emails should only be sent where permitted and with an appropriate opt-out facility.

In-app notification preferences currently include a control for optional getting-started and follow-up emails. New automated notification email delivery is not yet enabled while templates and delivery controls are being prepared. The proposed no-login unsubscribe link is not yet a live feature. Contact us if you want to stop optional messages in the meantime.

Unsubscribing from optional email does not delete your account or remove required security and account communications. We do not ask you to send passwords or confidential case details in an email reply.

ProxiLegal uses browser storage for sign-in sessions and preferences such as language and the selected firm. Platform management and firm workspace sessions are stored separately. Clearing browser storage may sign you out or reset local preferences; it does not delete server-side account or firm information.

Hosting, authentication and other providers may use cookies or similar technologies and keep request, error and security records to provide their services. The current ProxiLegal application does not include an advertising SDK. This draft does not treat operational logging as anonymous or promise that providers collect no technical information.

We keep information needed to operate accounts and workspaces, maintain security and audit records, respond to support requests and meet applicable obligations. Retention periods depend on the type of information and the firm's relationship with the service. A fixed retention schedule has not yet been finalized.

Leaving a firm, removing a member, ending a trial or clearing a browser does not automatically erase the firm's records. Some information may remain in audit records, backups or records that must be retained for legal or professional reasons.

Self-service account deletion is not yet available. Contact us about access, correction, export or deletion requests. We may need to verify your identity and the firm's instructions. If the information belongs to a law firm's workspace, contact the firm first so that requests can be assessed against its responsibilities and other people's rights.

You can update available profile details, review firm access, use supported export features and manage notification preferences from the application. A firm administrator controls access to the firm's workspace.

Depending on your location and the laws that apply, you may have rights to request access, correction, deletion, a copy of information, or restriction of or objection to certain processing. Where processing relies on consent, you may be able to withdraw it. These rights may be subject to exceptions and verification.

Contact Arami Tech LLC at [email protected] with the account email and a description of your request. Please do not include passwords or unnecessary client documents. You may also raise a concern with the relevant privacy authority, such as Hong Kong's Privacy Commissioner for Personal Data where applicable.

ProxiLegal uses encrypted web connections, authenticated access, firm-membership permissions and database access rules. These measures reduce risk but cannot guarantee that every transmission, account or system is secure. Keep credentials and invitation links private, use individual accounts and remove access when a colleague no longer needs it.

ProxiLegal is a professional service for firms and their authorized users. It is not designed for children to create accounts. Firm records may nevertheless contain information about children or other individuals where a firm has a lawful and appropriate reason to process it.

We will revise this draft as the product, provider arrangements and retention policy are finalized. A final published policy will identify its effective date. Material changes should be communicated through the website, application or an appropriate account notice.

Arami Tech LLC
Privacy contact: [email protected]

For product support, contact [email protected]. A public business mailing address and final customer documentation are still to be confirmed.