LEGAL
Privacy Policy
Last updated: April 13, 2026
1. Introduction
This Privacy Policy describes how Valryn Technologies ("Valryn", "we", "us", "our") collects, uses, discloses, and protects information when you visit valryn.io (the "Site") or use the Valryn AI case intelligence platform (the "Service"). By using the Site or Service, you agree to this Policy.
2. Information we collect
We collect the following categories of information: • Information you provide directly: name, email, phone number, firm name, practice area, website, and call volume submitted via demo request and contact forms. • Account and usage data when you use the Service: account credentials, role, firm and office associations, configuration choices, scoring profiles, and audit-log entries. • Customer data processed in the Service on behalf of your firm: client intake call recordings, transcripts, extracted case facts, and case scoring outputs. This data belongs to your firm and is processed under our Terms of Service. • Technical information automatically collected: IP address, browser type and version, operating system, referring URL, pages visited, time and duration of visits, and cookies (see Section 5).
3. How we use information
We use information to: • Provide, operate, and improve the Site and Service. • Respond to demo requests, inquiries, and support tickets. • Authenticate users, enforce role-based access, and prevent abuse. • Generate scoring outputs and benchmark comparisons within your firm's tenant. • Send transactional communications (account, billing, security alerts). • Send marketing communications when you have opted in (and respect opt-out at any time). • Comply with legal obligations and enforce our Terms of Service. We do not use customer data processed in your firm's tenant to train external AI models.
4. Sharing and subprocessors
We share information with the following categories of recipients: • Service providers ("subprocessors") who process data on our behalf, including: Supabase (managed PostgreSQL hosting and authentication), Retell AI (voice AI calling), OpenAI (large language model and embedding APIs), CourtListener (legal verdict data search), and our cloud and email infrastructure providers. • Professional advisors (legal, accounting, compliance) under confidentiality obligations. • Authorities, when required by law, subpoena, or court order. • Successors in interest in the event of merger, acquisition, or asset transfer. We do not sell personal information.
5. Cookies and similar technologies
We use cookies and similar technologies to operate the Site, remember preferences, and analyze traffic. The cookies we use fall into these categories: • Strictly necessary cookies — required for core functionality (authentication, session management). Always active. • Analytics cookies — Google Analytics 4 to understand site usage. Loaded only after you accept cookies via the consent banner. You can manage your cookie choices at any time by clearing your browser's site data for valryn.io and reloading the page.
6. Data retention
We retain information as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. • Demo request data: retained until you request deletion or opt out. • Account data: retained for the duration of your subscription plus a reasonable period afterward (typically 12 months) for billing reconciliation. • Customer data processed in your firm's tenant: call recordings are retained for 5 years across every plan (Basic, Professional, Enterprise) to comply with state bar file-retention rules (CA/PA/TX = 5y, FL = 6y, NY/NJ = 7y — firms in NY/NJ can request a 7-year override). Recordings may be exported, placed on legal hold, or deleted on request. • Technical and analytics data: typically retained up to 26 months.
7. Your rights
Depending on where you reside, you may have rights including: • Access — request a copy of personal information we hold about you. • Correction — request that inaccurate information be corrected. • Deletion — request deletion of personal information, subject to legal exceptions. • Portability — request a machine-readable copy of your data. • Objection or restriction — object to or restrict certain processing. • Withdrawal of consent — where processing relies on consent, withdraw at any time. • Non-discrimination (California residents) — exercise your rights without retaliation. To exercise any of these rights, contact us at the address in Section 12. We may need to verify your identity before responding.
8. Children's privacy
The Site and Service are intended for businesses and professionals and are not directed to children under 18. We do not knowingly collect information from children under 18. If you believe a child has provided information, contact us and we will delete it.
9. Security
We use industry-standard administrative, technical, and physical safeguards to protect information, including TLS 1.3 encryption in transit, AES-256 encryption at rest, row-level security for tenant isolation, and audit logging of sensitive actions. No method of transmission or storage is 100% secure. See our Security page for details.
10. International transfers
Information may be processed in the United States and other countries where our subprocessors operate. Where applicable, we use Standard Contractual Clauses or other lawful transfer mechanisms.
11. Changes to this Policy
We may update this Policy from time to time. The "Last updated" date below reflects the most recent revision. Material changes will be communicated by email or via prominent notice on the Site.
12. Contact us
For privacy questions or to exercise your rights, contact: Valryn Technologies Email: privacy@valryn.io Mail: To be provided upon request For California residents, you may also designate an authorized agent to make requests on your behalf.