Privacy Policy

Scope and roles

This policy covers two kinds of information:

• Account and website information about the people who visit our site, contact us or use the Service. For this information, Felican AI Inc decides how it is used.
• Customer Data: the case files, documents, messages and client information a law firm puts into InjuryMcGee. The firm controls that data and decides why it is processed; we process it on the firm's behalf and under its instructions, as described in our Terms of Service. If you are a client of a firm that uses InjuryMcGee, please contact the firm about your information.

What we collect

Information you give us

• Account details: name, work email, firm name, role, and sign-in credentials (passwords are stored only as salted hashes).
• Contact form and support messages, including anything you choose to write.
• Billing details, handled by our payment processor; we do not store full card numbers.

Customer Data

• Case information and documents your users upload or create, which may include protected health information handled under our Business Associate Agreement.
• Mail, attachments and calendar data from Google accounts your firm connects, limited to what the features you enable need.

Information collected automatically

• Service logs: IP address, browser type, pages requested, timestamps, request IDs and errors, used for security and troubleshooting.
• Audit records of actions taken in the Service, such as sign-ins, approvals, sends and exports.
• Strictly necessary cookies, described in our Cookie notice. We do not use advertising cookies or third-party trackers.

How we use it

• To provide the Service: authenticate users, store and display case files, run the features your firm turns on, and deliver approved messages.
• To secure the Service: detect abuse, prevent unauthorized access, rate-limit requests and investigate incidents.
• To support you: answer questions and fix problems you report.
• To bill you and keep business records.
• To improve the Service using aggregated, de-identified usage measures that do not identify you, your users or your clients.
• To comply with law and enforce our terms.

We do not sell personal information, share it for cross-context behavioral advertising, or use Customer Data for marketing.

AI processing

Some features send portions of Customer Data to AI models hosted in our Microsoft Azure account to classify, extract, summarize or draft. Each request includes only the part of the case the task needs. We do not use Customer Data to train models, and our model provider does not use it to train theirs. By default we log the size and cost of each model request, not its content. More detail is in our AI use disclosure.

How we share it

• With subprocessors that help us run the Service, listed below, under contracts that limit their use of the data.
• With recipients your firm approves, when your users approve an outbound message.
• With services your firm connects, such as Google, as needed to operate the connection.
• When required by law. If we receive a legal demand for Customer Data, we will notify the firm before responding unless we are legally prohibited from doing so.
• In a merger, acquisition or sale of assets, subject to this policy, with notice to customers.

Subprocessors

We use the following subprocessors. We will update this list and notify workspace owners before adding a subprocessor that handles Customer Data.

Payment processing, when paid plans begin, is handled by a PCI-compliant payment processor that does not receive Customer Data.

Google user data

If your firm connects a Google account, InjuryMcGee accesses Gmail and Google Calendar data only to provide the features you turn on: reading and filing incoming mail, sending messages your users approve, and publishing confirmed deadlines. We do not use Google user data for advertising, do not sell it, do not use it to train AI models, and do not allow people to read it except with your permission, for security, or as required by law. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect at any time in Settings or in your Google account.

Mobile numbers and text messages

If you opt in to text messages at injurymcgee.com/sms or through your law firm, we collect your name, mobile number, and a record of your consent (the time, your IP address and browser, and the exact consent wording you agreed to). We use this only to send the case-related messages you agreed to and to keep proof of consent. We do not sell, rent, or share your mobile phone number or SMS opt-in information with any third parties or affiliates for their own marketing purposes. Mobile numbers and SMS consent are shared only with the law firm handling your case and with the service providers that deliver the messages for us. Reply STOP to any message to opt out; we keep a record of the opt-out so you are not texted again.

Retention and deletion

• Customer Data is kept while your workspace is active, according to the retention settings your firm chooses.
• After a workspace is closed, Customer Data remains available for export for 30 days, is then deleted from the active Service, and is removed from encrypted backups as they expire, normally within 35 days, with monthly archives kept no longer than 12 months.
• Audit records may be kept longer where needed to resolve disputes or meet legal obligations.
• Service logs are kept for up to 90 days unless needed to investigate a security incident.
• Contact form messages are kept as long as needed to respond and follow up, and no longer than 24 months.

Security

We protect information with encryption in transit and at rest, per-firm isolation, role-based access, rate limiting, private file storage with short-lived links, an append-only audit log and secret management outside our code. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires. See our Security page.

Your choices and rights

• Users can update their profile in Settings, and firm owners can export or delete their firm's data.
• Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your personal information, or to object to certain uses. Email [email protected] and we will respond within the time the law requires. We will not discriminate against you for exercising these rights.
• If your information is in a law firm's workspace, we will refer your request to that firm and help it respond.

Where data is processed

We are based in the United States. The application servers run in a European Union data center. Documents, medical records and AI processing are on Microsoft Azure in the United States. We protect data the same way wherever it is processed.

Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from children through our site.

Changes

We will post updates on this page and change the effective date. For material changes, we will notify workspace owners by email or in the app before they take effect.

Contact

Questions or requests: [email protected]. Felican AI Inc, operator of InjuryMcGee, 1001 South Main, Suite 700, Kalispell, MT 59901, (561) 264-7166.