Privacy Policy

Nothing you share with Concaso is disclosed to any third party — including member lawyers — without your consent, except where the law requires it. That covers your assessment answers, your identifying details, the counterparty’s identity, and any documents you upload.

Your brief is never shared with any lawyer without your consent. When you opt in to being matched, we create an anonymized brief from your assessment: the category, jurisdiction, timeline, amount at stake, document availability, and the factors our assessment flagged. Your name, contact details, and the counterparty’s identity are withheld until you accept a specific lawyer’s interest.

Identifying details and uploaded documents are only ever released to a lawyer after you give a separate, explicit consent for that sharing, which you can decline or withdraw.

If you instead choose to browse lawyers yourself, no brief is created and no lawyer receives anything about your matter.

By requesting outreach, you opt in to Concaso using your anonymous brief and case metadata to match you with lawyers whose parameters fit your matter.

• Assessment content — the narrative, category, location, counterparty details, dates, amounts, and any documents you attach.
• Account details — email address, name if you provide one, and authentication data handled by our identity provider. We never see your password.
• Lawyer application data — for members: name, firm, contact details, licence number, regulator, jurisdiction, and practice and matched categories.
• Billing data — subscription status, plan, and period dates. Card numbers are handled entirely by our payment processor; we never receive or store them.
• Technical data — basic log and device information needed to operate and secure the service.

• To generate your assessment report automatically — no person reads your answers or documents to produce it — and to let you return to it later;
• To match you with member lawyers when you choose to be matched;
• To verify lawyer licences and operate memberships and billing;
• To secure the service, prevent abuse, and meet legal obligations;
• To improve the product using aggregated, de-identified patterns.

We do not sell your personal information, and we do not use your dispute details for advertising.

We use a small set of service providers, each bound to process data only on our instructions:

• Cloud hosting, database, authentication, and file storage;
• Payment processing for memberships;
• Automated processing to structure and summarise assessment content;
• Transactional email delivery.

Some providers process data outside your province or country. Where that happens, the information remains subject to this policy and to contractual protections with the provider.

Access to your data is restricted by row-level database rules so that you can read your own assessments, lawyers can read only the briefs routed to them, and administrators can access records only for verification and support. Data is encrypted in transit and at rest by our infrastructure providers. No system is perfectly secure, so please avoid uploading documents you do not need us to see.

Documents are held in private storage. There is no public link to any file, and files cannot be browsed or guessed from the internet. Uploading requires a Concaso account, and only the account that uploaded a document can open it.

When you open one of your own documents we create a temporary link that stops working after 60 seconds. While that link is valid, anyone who has the link can use it, so please do not share it.

Every upload is checked before it is usable: we confirm the file really is the type it claims to be, reject macros, embedded programs and archives, and send the file to a third-party malware scanning service. That scanner processes the file in memory to return a verdict and does not retain it. If a file cannot be verified, it is removed rather than kept.

Where files are stored. For now, documents are stored on our infrastructure provider’s servers in the United States. We are telling you this plainly rather than burying it: if you are outside the United States, your documents leave your country. We may move document storage to Canada in future, and we will update this policy if we do.

We do not use your documents to train models. They are not sold, not shared with other users, and not provided to lawyers. Lawyers receive only the anonymized brief described above, never your files.

Administrator access. Concaso staff cannot open your documents by default. Without a specific grant, an administrator can see only technical details: the file type, size, safety-check result and upload date. They cannot see file names or contents. Opening a document requires a time-limited grant of no more than 24 hours with a written reason, which is recorded and shown to you in your document activity log. We may also access documents where we are legally required to, or to investigate a genuine security incident.

Your control. You can delete any document at any time. Deleting removes the file itself immediately; a record that the file existed and was deleted is kept for 30 days. Security and access logs are retained for 12 months.

How documents affect your assessment. Attaching a file does not by itself change your score. A document only influences the assessment once its contents have actually been read and contain enough usable information. To read a scan or a photograph we use automated text recognition, which transcribes the visible text and nothing more; your documents are never used to train any model. Where a document could not be read, your report says so and the document is not counted.

Assessments and reports are kept while your account is active so you can return to them. Billing records are retained as long as required for tax and accounting purposes. You can ask us to delete your assessments or your entire account at any time by emailing privacy@concaso.com; we action deletion requests within 30 days, except where we must retain a record by law.

Report links are token-based and stop working once the underlying assessment is deleted.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to withdraw consent, and to complain to a privacy regulator (in Canada, the Office of the Privacy Commissioner or your provincial equivalent). Contact us and we will respond within the time your law requires.

We use only the cookies and local storage needed to keep you signed in, preserve an in-progress assessment, and secure the service. We do not run third-party advertising trackers.

Concaso is not intended for anyone under the age of majority in their jurisdiction, and we do not knowingly collect their information.

We will post any changes to this policy on this page with a new date. Questions, access requests, or deletion requests: privacy@concaso.com. See also our Terms of Service.

Last updated July 29, 2026.