Privacy Policy

Coaray is committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, contact us, create an account, or use Coaray products and services.

When a law firm uses Coaray to manage client or matter information, that firm is generally responsible for deciding why the information is processed. Coaray processes that information on the firm's instructions and under the applicable service agreement.

Depending on how you interact with Coaray, we may collect:

• contact, account, firm, and billing information;
• messages, support requests, form submissions, and meeting details;
• workflow instructions, matter records, documents, and connected-tool data that you choose to provide;
• consent records and privacy-request information; and
• device, browser, security, diagnostic, and product-usage information.

We use personal information to:

• provide, secure, operate, maintain, and improve Coaray;
• configure and run the workflows, agents, and integrations you request;
• authenticate users, manage accounts, and prevent fraud or misuse;
• respond to enquiries, provide support, and communicate service updates;
• meet legal, regulatory, contractual, and record-keeping obligations; and
• understand product performance using aggregated or de-identified information where appropriate.

Coaray connects to third-party tools only when an authorized user enables that connection. The third party's own terms and privacy policy apply to information it processes. You can remove a connection from the applicable product controls.

We may use vetted service providers for hosting, security, communications, analytics, payments, and support. They may process information only to provide services to Coaray and must protect it under contractual obligations.

We do not sell personal information. We may disclose information to authorized account users, instructed connected services, service providers, professional advisers, or a successor involved in a corporate transaction. We may also disclose information when required by law or when reasonably necessary to protect rights, safety, and security.

Coaray and its service providers may process information in countries other than the one where it was collected. Where required, we use contractual and organizational safeguards designed to protect information transferred across borders.

We retain information only for as long as reasonably necessary for the purposes described in this policy, including to provide the service, maintain security and audit history, resolve disputes, and meet legal obligations. Retention periods vary by information type, account configuration, contractual instruction, and applicable law.

We use administrative, technical, and organizational measures designed to protect personal information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Account owners are responsible for managing user access, credentials, and the services they connect to Coaray.

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal information, and to withdraw consent where processing relies on consent. You may also have the right to complain to a privacy regulator.

To make a request, email hello@coaray.com. We may need to verify your identity and authority before completing the request. If a law firm controls the relevant information, we may direct your request to that firm.

Coaray is a business service and is not directed to children. We may update this policy as our services or legal obligations change. The date at the top of this page shows the most recent revision.

Questions about this policy or Coaray's privacy practices can be sent to hello@coaray.com.