Privacy Policy
1. Data Sovereignty & Minimization
GhostCite is built on a "Zero-Retention" philosophy. We do not store, own, or claim any rights to the documents you upload for citation verification. Document text is processed in-memory and is purged immediately upon completion of the extraction process.
2. Global Citation Index (Shared Repository)
To ensure maximum performance and minimize load on the Free Law Project's servers, GhostCite maintains a permanent, global index of verified public legal citations (e.g., 329 U.S. 495). When a citation is verified, its mapping to the official court record is stored in our shared repository to benefit all future users. This repository is strictly anonymized: it contains only public citation strings and their official metadata. It is never linked to your user identity, your uploaded documents, or the context of your legal research.
3. Information We Collect
Account Identity: We collect your first name, last name, and professional email address via Google OAuth or Magic Link.
Encrypted Tokens: If you choose to provide a personal CourtListener API token, it is stored using AES-256 encryption. We never use your personal token for other users or for system-wide queries.
Metadata: We log the timestamp and number of citations processed to manage rate limits and system health.
4. No AI Training
Rule26 AI, Inc. does not use your uploaded documents, search history, or personal data to train, tune, or improve any Artificial Intelligence, Machine Learning models, or Large Language Models (LLMs).
5. Data Security & Texas Breach Notification
We employ industry-standard encryption for data at rest and in transit. In accordance with Texas Business & Commerce Code ยง 521.053, in the event of a known data breach involving your personal information, we will notify you as quickly as possible and no later than 60 days after determining a breach occurred.
6. Your Rights
You may update your profile or permanently delete your account at any time through your Account Settings. Deletion results in the immediate and permanent purging of your name, email, and encrypted API keys from our database.