Effective date: June 24, 2026
Last updated: June 24, 2026
The Inner Firm ("The Inner Firm," "we," "us," or "our") provides a software platform that helps benefits and commercial attorneys review legal documents, spot issues, and organize legal work. This Privacy Policy explains what information we collect when you use our platform at app.theinnerfirm.com (the "Service"), how we use it, and the choices you have.
The Inner Firm is operated by The Inner Firm, LLC, a New York limited liability company. The Service is operated in the United States. If you have questions about this policy, contact us at support@theinnerfirm.com.
The Service is a professional tool intended for use by attorneys and other benefits and legal professionals. It is not directed to consumers or to children, and it is not intended for anyone under 18.
Account and identity information. When you are invited to and access the Service, we collect your name and email address, and authentication information needed to sign you in. Sign-in is handled through our authentication provider, WorkOS, and — if you choose "Continue with Google" — through Google. We do not see or store your password; it is managed by the authentication provider.
Google user data (only if you sign in with Google). If you choose "Continue with Google," Google shares a limited set of profile information with us — your name, email address, and basic profile identifiers (the openid, email, and profile scopes). We use this information solely to create and authenticate your account. We do not request access to your Gmail, Google Drive, contacts, calendar, or any other Google data, and we do not use Google user data for advertising.
Content you submit. When you use the Service, you may enter or upload text and documents relating to legal matters (for example, intake descriptions, plan documents, agreements, and correspondence). We process this content to provide the analysis and outputs you request.
Usage and activity information. We keep a record of activity on the Service — for example, when an analysis is run and basic event metadata — so we can operate, secure, and improve the Service.
Technical information. We collect standard technical data such as IP address, browser type, and timestamps through normal operation of the Service and its hosting infrastructure.
We use the information we collect to:
The Service uses Anthropic's large language models to perform text extraction and to generate analysis and drafting outputs. If you use the Service's optional voice feature, audio is processed through OpenAI's real-time voice API to enable that interaction; OpenAI is not otherwise used to process your content. Content you submit (and, for the voice feature, audio) may be transmitted to these providers solely to produce the output you request. We do not use your content to train AI models, and we do not permit these providers to use content submitted through our API integrations to train their models. The core legal determinations the Service produces are generated by our own deterministic logic; these providers are used for parsing, drafting, and voice interaction, not to make decisions on your behalf.
We do not sell your personal information, and we do not share it for advertising. We share information only as follows:
We understand that content submitted to the Service may be sensitive and may relate to privileged or confidential legal matters. Each customer's matter content is handled within the scope of providing the Service and is not disclosed to other customers. You are responsible for ensuring you have the right to submit any content you provide, and for handling client information consistent with your own professional obligations.
We retain account and matter information for as long as your account is active or as needed to provide the Service. You may request deletion at any time; on account closure, matter content is deleted or de-identified within a reasonable period unless longer retention is required by law. You may request deletion of your information as described below.
We use reasonable administrative and technical safeguards designed to protect information against unauthorized access, loss, or misuse, and we operate the Service in a controlled-access model in which only invited, authenticated users can access it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You may:
To exercise any of these, email support@theinnerfirm.com. Depending on where you are located, you may have additional rights under applicable privacy laws.
The Service is not directed to children and is not intended for anyone under 18. We do not knowingly collect personal information from children.
The Service is operated in the United States, and information is processed and stored in the United States and in other locations where our service providers operate. If you access the Service from outside the United States, you understand that your information will be processed in the United States.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.
Questions about this Privacy Policy or our data practices can be sent to:
The Inner Firm, LLC support@theinnerfirm.com