Privacy Policy

Nothing you share with Concaso is disclosed to any third party — including member lawyers — without your consent, except where the law requires it. That covers your assessment answers, your identifying details, the counterparty’s identity, and any documents you upload.

Your brief is never shared with any lawyer without your consent. When you opt in to being matched, we create an anonymized brief from your assessment: the category, jurisdiction, timeline, amount at stake, document availability, and the factors our assessment flagged. Your name, contact details, and the counterparty’s identity are withheld until you accept a specific lawyer’s interest.

Identifying details and uploaded documents are only ever released to a lawyer after you give a separate, explicit consent for that sharing, which you can decline or withdraw.

If you instead choose to browse lawyers yourself, no brief is created and no lawyer receives anything about your matter.

By requesting outreach, you opt in to Concaso using your anonymous brief and case metadata to match you with lawyers whose parameters fit your matter.

• Assessment content — the narrative, category, location, counterparty details, dates, amounts, and any documents you attach. This includes anything you type into the “What happened?” box on our home page, which is the start of the same assessment.
• Account details — email address, name if you provide one, and authentication data handled by our identity provider. We never see your password.
• Lawyer application data — for members: name, firm, contact details, licence number, regulator, jurisdiction, and practice and matched categories.
• Billing data — subscription status, plan, and period dates. Card numbers are handled entirely by our payment processor; we never receive or store them.
• Technical data — basic log and device information needed to operate and secure the service.

• To generate your assessment report automatically — no person reads your answers or documents to produce it — and to let you return to it later;
• To match you with member lawyers when you choose to be matched;
• To verify lawyer licences and operate memberships and billing;
• To secure the service, prevent abuse, and meet legal obligations;
• To improve the product using aggregated, de-identified patterns.

Automated sorting when you start. When you describe your situation on our home page, that description is sent to our automated processing provider straight away, so we can work out what kind of dispute it is and ask you the right questions. This happens before we ask for any contact details, and you never have to give us an email address to use it. The result only decides which questions you see. It is not a legal opinion, not a conclusion about your matter, and not legal advice.

Filling in answers you have already given. The same description is also used to pre-fill answers to the questions that follow, so you are not asked twice for facts you have already written down. Every pre-filled answer is shown to you, labelled, with the words it came from, and you can change or clear any of it before your assessment is produced. Nothing is guessed or assumed on your behalf.

We do not sell your personal information, and we do not use your dispute details for advertising.

We use a small set of service providers, each bound to process data only on our instructions:

• Cloud hosting, database, authentication, and file storage;
• Payment processing for memberships;
• Automated processing to sort, structure, and summarise assessment content. Your content is sent to this provider only to produce your own result; it is not used to train third-party models;
• Transactional email delivery.

Some providers process data outside your province or country. Where that happens, the information remains subject to this policy and to contractual protections with the provider.

We keep usage measurements deliberately thin. We never record the words you write, your documents, or any other substantive detail of your dispute in our analytics. What we do record is limited to non-identifying facts about how the service is used: the dispute category and matter type, the jurisdiction, whether an assessment was started or completed, whether a lawyer connection was requested, and how you arrived at the site (such as the referring site or a campaign tag in the link you followed).

We use this to understand which parts of the service work and where people get stuck. It is not used to build a profile of you or for advertising.

Access to your data is restricted by row-level database rules so that you can read your own assessments, lawyers can read only the briefs routed to them, and administrators can access records only for verification and support. Data is encrypted in transit and at rest by our infrastructure providers. No system is perfectly secure, so please avoid uploading documents you do not need us to see.

Documents are held in private storage. There is no public link to any file, and files cannot be browsed or guessed from the internet. Uploading requires a Concaso account, and only the account that uploaded a document can open it.

When you open one of your own documents we create a temporary link that stops working after 60 seconds. While that link is valid, anyone who has the link can use it, so please do not share it.

Every upload is checked before it is usable: we confirm the file really is the type it claims to be, reject macros, embedded programs and archives, and send the file to a third-party malware scanning service. That scanner processes the file in memory to return a verdict and does not retain it. If a file cannot be verified, it is removed rather than kept.

Where files are stored. For now, documents are stored on our infrastructure provider’s servers in the United States. We are telling you this plainly rather than burying it: if you are outside the United States, your documents leave your country. We may move document storage to Canada in future, and we will update this policy if we do.

We do not use your documents to train models. They are not sold, not shared with other users, and not provided to lawyers. Lawyers receive only the anonymized brief described above, never your files.

Administrator access. Concaso staff cannot open your documents by default. Without a specific grant, an administrator can see only technical details: the file type, size, safety-check result and upload date. They cannot see file names or contents. Opening a document requires a time-limited grant of no more than 24 hours with a written reason, which is recorded and shown to you in your document activity log. We may also access documents where we are legally required to, or to investigate a genuine security incident.

Your control. You can delete any document at any time. Deleting removes the file itself immediately; a record that the file existed and was deleted is kept for 30 days. Security and access logs are retained for 12 months.

How documents affect your assessment. Attaching a file does not by itself change your assessment. A document only influences the assessment once its contents have actually been read and contain enough usable information. To read a scan or a photograph we use automated text recognition, which transcribes the visible text and nothing more; your documents are never used to train any model. Where a document could not be read, your report says so and the document is not counted.

Assessments and reports are kept while your account is active so you can return to them. Billing records are retained as long as required for tax and accounting purposes. You can ask us to delete your assessments or your entire account at any time by emailing privacy@concaso.com; we action deletion requests within 30 days, except where we must retain a record by law.

Report links are token-based and stop working once the underlying assessment is deleted.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to withdraw consent, and to complain to a privacy regulator (in Canada, the Office of the Privacy Commissioner or your provincial equivalent). Contact us and we will respond within the time your law requires.

We use only the cookies and local storage needed to keep you signed in, preserve an in-progress assessment, and secure the service. We do not run third-party advertising trackers.

Concaso is not intended for anyone under the age of majority in their jurisdiction, and we do not knowingly collect their information.

We will post any changes to this policy on this page with a new date. Questions, access requests, or deletion requests: privacy@concaso.com. See also our Terms of Service.

Last updated July 29, 2026.