Application Privacy Policy
How information is handled in the PlaintiffDesk application and its connected services.
Last updated October 13, 2026Scope and responsibilities
LawAutomated provides PlaintiffDesk. This policy addresses the PlaintiffDesk application, including firm workspaces and optional connected services. The separate Website Privacy Policy covers the public marketing website and demo-request form.
A customer organization decides what records to place in its workspace, why to use them, and which people may access them. PlaintiffDesk processes those records to provide the agreed service and follow authorized instructions. The customer’s agreements, policies, and applicable law govern its relationship with individuals described in those records.
Account and service information
Account information may include a user’s name, work email, organization, role, sign-in details, and preferences. The service also processes technical and security information such as IP addresses, request and event timestamps, device or browser information, authentication events, and operational or error records.
Cookies and browser storage support sign-in, session security, and application preferences. External identity providers process sign-in information under their own notices when an organization uses those providers.
Firm content
Depending on what a firm uses, workspace content may include case and contact information, documents, messages, calendar entries, tasks, signature information, accounting requests, and other firm-configured fields. Records can contain confidential, personal, financial, or health information.
Users should provide only information necessary for the intended workflow and authorized by the firm. A firm’s permission to store a record in PlaintiffDesk does not automatically permit sending it to every optional integration.
QuickBooks information
When an authorized administrator connects a QuickBooks Online company, the service processes the company identifier and OAuth access and refresh tokens needed to maintain that connection. Intuit handles the authorization and password entry.
The integration processes accounting account and class details, customer and vendor names and identifiers, and the accounting requests the firm chooses to send. These can include dates, amounts, selected accounts, and transaction descriptions for supported purchase and deposit workflows. Provider record identifiers and processing status support matching and verification. Available workflows depend on the organization’s configuration.
Information included in a transaction sent to QuickBooks is disclosed to Intuit. Review all descriptions and other fields before sending. Do not include protected health information, privileged documents, or unnecessary case details in accounting transfers.
How information is used
Information is used to authenticate users, enforce firm permissions, provide configured features, carry out authorized transactions, respond to support requests, maintain service reliability, investigate security events, and meet applicable legal obligations.
Jane features can send relevant user instructions and selected or retrieved content to configured AI or document-processing providers to perform the requested workflow. The information involved depends on the feature used. Do not assume that AI processing is confined to the user’s browser.
Recipients and connected services
Information may be processed by providers supporting hosting, storage, communications, authentication, document processing, AI-assisted features, and other contracted operations. Authorized users within a firm, and external recipients selected through sharing or communication workflows, may receive information according to the applicable permissions and instructions.
Optional connections disclose information to the selected provider as necessary for the authorized workflow. Those providers may have separate terms and privacy notices. Information may also be disclosed where required by law, to protect legal rights or service security, or in a business transaction subject to applicable safeguards and obligations.
Storage and safeguards
The application uses Amazon Web Services infrastructure and service-specific access and encryption controls. Additional providers may process information for connected features. Encryption in transit or at rest does not mean that authorized servers or service providers cannot process the information.
Access controls and other administrative and technical safeguards are used to protect information. No service can guarantee absolute security. The applicable agreements and documented service scope, rather than this notice alone, establish any specific security or regulatory commitments.
Retention and disconnection
Retention depends on the type of information, customer instructions, applicable agreements, operational needs, and legal obligations. Production records, security logs, and backups may have different retention periods. This policy does not promise immediate removal of every backup copy.
Revoking the QuickBooks connection stops access under that authorization; it does not automatically delete records already held by either service or cancel a subscription. Contact the firm administrator or the privacy contact for access, correction, export, or deletion requests. Records in Intuit must also be managed through Intuit where applicable.
Requests and policy changes
For records controlled by a customer firm, start with that firm’s designated contact. PlaintiffDesk can help the organization handle requests under its agreements. Requests concerning information PlaintiffDesk controls can be directed to the privacy contact below. Identity and authority may need to be verified before a request is fulfilled.
Applicable privacy rights and exceptions depend on the individual, information, and jurisdiction. Contact us to ask about access, correction, deletion, or other applicable rights. Do not send confidential case records or credentials in an initial request.
Changes will be reflected in the published revision date and communicated as required by applicable agreements and law.
Contact
LawAutomated
Do not include passwords, access tokens, or sensitive client records in an initial email.