Privacy Policy

Last updated: July 8, 2026

Albatross is a product of Raccoon Labs, LLC. This Privacy Policy explains how Raccoon Labs, LLC (“Raccoon Labs,” “we,” “us”) collects, uses, and protects information when you use our website, applications, and services (the “Service”). Because the Service is built for criminal defense, much of what you entrust to it is sensitive and may be privileged. We treat it accordingly.

1. Information we collect

  • Account and firm information — your name, email, role, and the firm or organization workspace you create or join.
  • Your Content — the case files, documents, media, and other material you upload, and the messages and questions you submit to the AI assistant.
  • Usage data — logs and analytics about how the Service is used, used to operate, secure, and improve it.
  • Billing information — handled by our payment processor; we receive subscription and usage details, not your full card number.

2. How we use information

We use information to provide and operate the Service — including indexing, searching, and analyzing your files and generating AI responses at your direction — and to handle billing, provide support, maintain security, and improve the Service. We use your information to deliver the Service to you; we do not sell it.

3. AI features, voice dictation, and the providers behind them

To deliver AI features, we share the content needed for a given task with a small set of trusted providers that process it on our behalf, under contracts that require them to protect it and use it only to provide their service to us:

  • AI assistant and drafting — OpenRouter. When you chat with the assistant or ask it to analyze or draft, your prompts and the case content they reference are sent through OpenRouter, an AI gateway that routes each request to an underlying language model (such as Anthropic's Claude, Google's Gemini, or a comparable model) to produce a response. We restrict this routing to zero-data-retention endpoints: providers that do not store your prompts or the model's output after your request is served and do not use them to train any models. See OpenRouter's privacy and data-retention documentation.
  • Voice dictation — Amazon Transcribe. When you dictate, your microphone audio is streamed to Amazon Transcribe to convert your speech to text. You receive the transcript; we do not retain the audio. See the AWS Service Terms.
  • Evidence & media analysis — AWS Bedrock. Images, audio, and video you upload are analyzed to generate searchable representations (embeddings) and, where you request it, natural-language descriptions of what they contain. This processing runs within Amazon Bedrock using specialized media models (including Amazon's own models and third-party media models offered through Bedrock). Bedrock does not store your media after a request is served and does not use it to train any models. Your original files remain in encrypted storage in our AWS account; only the analysis needed for a given task is sent to the model.
  • Search index — Pinecone. The representations used for search and retrieval are stored in Pinecone, partitioned so each organization's data stays isolated.

We do not use Your Content to train third-party foundation models. These providers act as our processors — they may use your data only to provide their service to us, never for their own purposes.

4. Confidential and privileged material

You decide what to upload. You are responsible for ensuring you have the right to submit Your Content and for handling client confidences and privileged material in accordance with your professional obligations. We apply access controls and encryption to help protect this information, but you remain responsible for who you invite into a workspace and what you share there.

5. How information is shared

We share information only with service providers (“subprocessors”) who help us run the Service, under contracts that require them to protect it and use it only on our instructions. Alongside the AI providers described in Section 3, these include:

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service. We do not sell your information or share it for advertising.

6. Data retention

We retain Your Content for as long as your workspace keeps it and as long as needed to provide the Service. You can delete files and content within the Service, and your organization administrators can remove data from a workspace. After deletion or account closure, residual copies may persist briefly in backups before being overwritten.

7. Security

We use technical and organizational measures — including encryption in transit and at rest, access controls, and tenant isolation between organizations — to protect information. No method of transmission or storage is perfectly secure, but we work to safeguard your data and to respond promptly to any incident.

8. Your rights and choices

Depending on where you are, you may have rights to access, correct, export, or delete personal information we hold about you. You can manage much of your data directly in the Service, or contact us to make a request. If your data is held within a firm workspace, that organization may also control access to it.

9. Cookies

We use a small number of cookies that are necessary to sign you in and keep the Service working, along with limited analytics to understand and improve usage. We do not use advertising cookies.

10. Children

The Service is intended for legal professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

12. Contact

Questions about this policy or your data? Contact us at hello@albatross.legal.