Privacy policy

Effective date: To be completed: the date this policy takes effect

LILA (Litigation Lawyer) is a workspace that law firms use for their cases, documents, tasks and deadlines. This page explains what information LILA handles, where it is kept and who can see it, as the software works today.

LILA is operated by To be completed: the name of the firm or company that operates LILA. Each firm’s workspace holds that firm’s information, and the firm decides who has access to it.

Signing in and your account

• You sign in with a Google account, through Google’s Firebase Authentication. LILA receives your name, email address and Google account identifier, and checks that your email address is verified.
• You can open a workspace only when one of your firm’s admins has added your email address as a member. Your member record holds your name, email address, role (admin or member), job title and whether your account is active. A phone number and date of birth can be added; only you and your firm’s admins can see them.
• LILA saves a few personal settings with your account: your recent cases, how you arranged some lists, your workspace colour, and which new or updated documents you have opened.
• Firebase Authentication keeps you signed in on the browser you use until you log out.

Workspace records

• Cases, tasks, notes, events, document records (names, versions, reviews, comments and history), activity records and notifications are stored in Google’s Cloud Firestore, separately for each firm.
• Members see the cases they are on; a firm’s admins see their firm’s cases. LILA’s server and its database security rules check this on every request.
• Deleting an item moves it to the Recycle Bin, where people with access can restore it. LILA does not empty the Recycle Bin automatically. Removing a member deactivates their account; their past work stays in the workspace.
• How long a firm’s information is kept after the firm stops using LILA, and how a firm can ask for it to be deleted:To be completed: your retention and deletion policy

Document files

• When a firm has connected Google Drive, the files people upload are stored in that firm’s own Google Drive, inside a “Litigation Lawyer” folder. LILA never shares them by link: people open them through LILA, which first checks that they are on the case.
• Without a connected Google Drive, files are stored in the workspace’s Firebase storage (Google Cloud Storage, or the Firestore database).

Google Drive

• The firm’s connection. One of the firm’s admins connects a Google account the firm controls. LILA asks Google only for access to the files it creates and the files someone chooses for it in Google’s file picker (the drive.file permission). It can’t see anything else in that Drive. Read-only access to the whole Drive (drive.readonly) is asked for only when someone explicitly allows folder imports.
• Importing from your own Google account. A member can connect their own Google account to import files. LILA only reads the files and folders they choose or link, and copies them into the firm’s Drive only after they confirm the import. The originals are never changed, moved or deleted.
• Keeping Drive and LILA in step. LILA keeps its folders and documents matched with the firm’s LILA folder in Drive: renames, moves, and moving items to or from the Drive Trash and LILA’s Recycle Bin. It only changes items it created or was given in that folder, and never permanently deletes anything. Google deletes items left in the Drive Trash after 30 days.
• Access tokens. The permissions Google grants are stored encrypted, on LILA’s server only; they are never sent to your browser. Disconnecting stops LILA’s access, and LILA also asks Google to revoke it unless the same Google account is still connected to LILA elsewhere.

Google Calendar

• Connecting Google Calendar is optional, and each person connects their own account. LILA asks only to create and manage its own calendars and events (the calendar.app.created permission), plus your email address to show which account is connected. It can’t read or change your other calendars or events.
• LILA creates a “LILA” calendar in your account and keeps copies of your incomplete tasks with due dates and of your cases’ hearings, meetings and filings there. It never reads anything back from your calendar.
• When you disconnect, you can have LILA remove the events it created first; LILA then stops its access and asks Google to revoke it.

Reminder emails

LILA can send its own reminder emails for tasks and events, through the email provider Resend. A reminder goes to the person assigned to the item and includes the item’s name, its case and when it is due. This is switched off until it is set up; until then, Google Calendar sends its own reminders for LILA’s calendar copies.

AI features

• LILA’s AI features use Anthropic’s Claude models through Anthropic’s API. Information is sent to Anthropic only when someone uses one of these features, and only from records that person can access:
  • LILA Assistant: your messages, and the case records needed to answer them. LILA doesn’t save the conversation; it stays in the assistant panel in your browser.
  • Drafting and document summaries: the case’s title, summary and notes, your instructions, and the content of the document being summarised.
  • Suggestions when importing cases (optional): the content of the documents you choose to have analysed.
  • Precedent research: searches of the public web, made through Anthropic’s search tools.
• How Anthropic handles and keeps this information: To be completed: the terms of your Anthropic account (data use and retention)

Cookies and browser storage

LILA has no analytics or advertising trackers. Your browser keeps your sign-in (Firebase Authentication), and LILA stores a few small items there for itself: whether its opening animation has been shown in this tab, and a file link waiting while Google asks for permission during an import.

Service providers

• Google: Firebase Authentication, Cloud Firestore, Cloud Storage, Google Drive, Google Calendar and Google Picker.
• Anthropic: the AI features.
• Resend: reminder emails, once set up.
• Hosting: To be completed: your hosting provider (for example Netlify or Cloudflare)
• Where the data is stored: To be completed: your Firebase project’s region

Your choices

• You can disconnect your Google Calendar, or your own Google account used for importing, at any time in LILA. A firm’s admins can disconnect the firm’s Google Drive in Workspace settings.
• For questions about your firm’s information, contact your firm’s LILA admin.
• Privacy questions or requests to LILA’s operator: To be completed: a contact email or address

Changes to this policy

To be completed: how you will tell people about changes to this policy