We do not sell your personal information
We do not sell it, and we do not share it for cross-context behavioural advertising. There is no "do not sell" toggle on this page because there is nothing to switch off.
There is no advertising in the product, no advertising network embedded in it, and no analytics tracker.
What you can ask for
To know what is held about you and where it came from.
To correct something that is wrong. This is the one people need most: a date of entry recorded a year out, a name spelled from a document rather than from the person.
To delete. Subject to the limits below, which are real.
To take it with you, in a machine-readable form.
To object to a particular use, and to withdraw consent where consent was what permitted it.
Where to ask
If you are a client of a law firm using aiylum, ask the firm. They decide what is held about you and why; we hold it on their instruction. Your portal has a way to message them, and they can act on any of the above.
We do not act on a client's data without the firm, and that is not us avoiding the request – acting unilaterally on a record inside somebody's legal matter is exactly what a processor must not do.
If you work at a firm using aiylum, or you have dealt with us directly, write to privacy@aiylum.com.
The limits on deletion, stated plainly
A live legal matter. While a case is running, the file is what the work rests on. Deleting a client's record mid-matter would destroy the evidence of what was done for them, which is usually against the interests of the person asking.
A legal hold. If a matter is under a hold, deletion stops until the hold lifts. This overrides everything else and it is not discretionary.
Professional retention obligations. A firm has its own duties about how long a file is kept, and those run against the firm rather than against us.
The audit ledger. The record that something happened is kept, without the content. A ledger that could be edited to remove an entry would not be a ledger.
Where something cannot be deleted, you will be told which of these is the reason.
How deletion actually works
Encrypted fields are made unrecoverable by destroying the key material for that subject. It is not a flag on a row that hides it from a screen; the ciphertext remains and nothing can read it, including us.
How long we take
Within thirty days, and sooner in practice. If something will take longer we say so and why, before the thirty days is up.
We do not charge for this, and we do not ask for more identification than is needed to be sure we are answering the right person.
---
*This page describes how the product is built and is written by the people who built it. It has not been reviewed by outside counsel.*