Privacy Policy
Effective September 23, 2026 ยท Last updated September 23, 2026
People bring Solstice some of the most personal information in their lives. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It applies to the Solstice website and the Solstice Portal (together, the "Service"). "Solstice," "we," "us" and "our" mean Solstice LLC, a Utah limited liability company, which operates the Service.
1. Information we collect
Information you give us
- Account information: your username and password, a display name if you choose one, your email address once you add it, and whether you signed up as an individual or as an attorney or firm. We store your password only as a one-way hash, which we cannot read back.
- Case information: the documents you upload, your conversations with Solstice, and the clients, cases, notes, tasks and drafts you create. This can include sensitive information, such as details about your family, your children, your finances, your health or your safety. You choose what to share.
- Court-portal logins, if you choose to store one: the username, password and PIN for a court's online portal. These are encrypted, never shown back to you or anyone else, and deleted automatically after 90 days or sooner (see section 6).
- Communications: what you send us when you email us for support, sales or privacy requests.
- Payment information, once paid plans launch: payments will be handled by a payment processor. We will receive the plan, the billing status and limited card details such as the last four digits, never your full card number.
Information collected automatically
- A sign-in cookie in the Portal that keeps you signed in (see section 5).
- Technical information: like most online services, our servers record information such as IP address, browser type, the pages or features requested and the time of each request. We use it to keep the Service secure and working.
- Usage counts: how many documents, scanned pages, answers and drafts your account uses each month, so we can apply your plan's allowances.
We do not buy information about you from data brokers, and we do not combine your information with information from other companies to build a profile of you.
2. How we use information
- To provide the Service: to hold your conversations, read and organize your documents, answer your questions with sources, compute deadlines and prepare drafts.
- To run your account: sign-in, email verification, plan allowances and, once paid plans launch, billing.
- To communicate with you: verification emails, security alerts, responses to your requests, and notices about changes to the Service or these policies. We will not send you marketing email without your permission, and every marketing email will include a way to unsubscribe.
- To keep the Service safe: preventing fraud, abuse and unauthorized access, and enforcing our Terms of Service.
- To maintain and improve the Service, using usage counts, error reports and technical information. We never use your documents or conversations to train AI models.
- To comply with law and respond to lawful requests.
3. How our AI handles your information
Solstice is an AI virtual paralegal. When you talk with Solstice or ask it about your documents, AI models process what you have shared in order to respond. Almost all of that processing runs on computers we operate.
There is one exception. To make your documents searchable by meaning, passages from them are sent to a legal-specialist search-indexing provider, Isaacus, whose published policy is not to retain the text it receives. No other outside AI provider receives your documents or conversations, and no AI provider, including ours, trains on them.
AI can make mistakes. Solstice shows the source behind answers about your documents so you can check them, and nothing it produces is legal advice. See Not legal advice.
4. How we share information
We do not sell your personal information, and we do not share it for targeted advertising. We share information only in these situations:
- Service providers who process it on our behalf, under contracts that limit their use of it to providing their service to us: our search-indexing provider (see section 3), our email-delivery provider (for verification and account emails), and, once paid plans launch, our payment processor.
- Legal requirements. We may disclose information if we believe in good faith that the law requires it, for example in response to a subpoena, court order or other legal process. Where the law allows, we will try to notify you first so you can object. Your conversations with Solstice are not protected by attorney-client privilege, so a court could order them produced.
- Safety. To protect the rights, property or safety of our users, the public or Solstice, including to prevent fraud or an imminent threat of harm.
- A business transfer. If Solstice is involved in a merger, acquisition, financing or sale of assets, information may transfer as part of that transaction, and this policy will continue to apply to it.
- With your direction or consent.
We never share one client's material with another client or account.
5. Cookies and tracking
- This website sets no cookies and uses no analytics, advertising or social-media trackers. Its fonts and images are served from our own servers.
- The Portal sets one strictly necessary cookie,
attorney_session, which keeps you signed in. It cannot be read by scripts on the page, is not shared with anyone else, and expires after 12 hours or when you sign out. Blocking it will stop you from signing in.
Do Not Track and Global Privacy Control. Because we do not track you across other websites or sell or share your information for advertising, there is nothing for these signals to switch off. We honor a Global Privacy Control signal as a request to opt out of any sale or sharing, which we do not do in any case.
6. How long we keep information
| Information | How long we keep it |
|---|---|
| Your account and case information | Until you delete it or close your account. |
| A conversation you delete | Removed immediately, with its transcript. |
| A document you delete | Recoverable for 14 days in case you deleted it by mistake, then permanently destroyed. You can also destroy it permanently right away. |
| Your account, when you delete it | Your account and all of its information are deleted immediately. |
| A stored court-portal login | Deleted after 90 days, after repeated failed sign-ins, or when you remove it, whichever comes first. |
| Technical logs | Only as long as needed for security and troubleshooting. |
Deleted information may remain in routine backups for a limited period until those backups are overwritten. We may also keep information longer where the law requires it, or to resolve a dispute or enforce our agreements.
7. Security
We use administrative, technical and physical safeguards designed to protect your information. Every client matter is separated in the database itself with row-level security, and the Service refuses to start if that separation could be bypassed. Stored court-portal logins are encrypted, and your password is stored only as a one-way hash. An account must verify its email address before it can upload documents.
No system is perfectly secure, and we cannot guarantee the security of information. If we learn of a security breach that affects your personal information, we will notify you as the law requires. Please keep your password private and tell us at privacy@solstice-legal.com if you think your account has been compromised.
8. Children
The Service is for adults. You must be at least 18 years old to create an account, and the Service is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.
Case information you share may include information about your children, such as their names, ages or custody arrangements. We protect it like the rest of your case information, and you can delete it at any time.
9. Your choices and rights
Wherever you live, you can:
- Delete conversations, documents and other case information yourself in the Portal, at any time.
- Delete your account in the Portal with Delete account. This removes your account and all of its information.
- See your account details in the Portal, and change the email address on your account.
- Ask us for a copy of your personal information, to correct it, to delete it, or to explain how we use it, by emailing privacy@solstice-legal.com.
We will verify your request, usually by confirming it through the email address on your account, and respond within 45 days. If we cannot do what you ask, we will explain why, and you can appeal by replying to our answer. If your appeal is denied, you may contact your state attorney general. You may use an authorized agent where your state's law allows. We will never treat you differently for exercising your privacy rights.
10. State-specific notices
- California. We do not sell or share personal information, including for cross-context behavioral advertising, and we do not disclose personal information to third parties for their own direct-marketing purposes. This policy describes the categories of personal information we collect, the categories of third parties we share it with, how we respond to Do Not Track signals, and how to review and correct your information.
- Washington and Nevada. Our Consumer Health Data Privacy Policy explains how we handle health-related information you may share.
- Utah, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws. We extend the rights in section 9 to every user, whether or not a state's law requires it of a company our size.
11. Where information is processed
Solstice is operated from the United States, and your information is stored and processed in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States.
12. Changes to this policy
We may update this policy as the Service changes or the law requires. We will post the updated policy here with a new "last updated" date. If a change materially affects how we use information we already have, we will tell you by email or in the Portal before it takes effect.
13. Contact us
Questions, requests or complaints about privacy: privacy@solstice-legal.com. Enterprise customers can request a full security and data-handling review through sales@solstice-legal.com.