Effective date: June 17, 2026
This Privacy Policy explains how LawToolBox ("LawToolBox," "we," "us") collects, uses, stores, and shares information when you use the LawToolBox connector for AI assistants (the "Connector") to access LawToolBox and your connected Microsoft 365 services through a third‑party AI assistant.
This policy supplements the main LawToolBox Privacy Policy, which governs the LawToolBox service generally. Where this policy is silent, the main policy applies.
Information we collect
When you use the Connector, we process:
- Account and identity information — your work email/username and the LawToolbox firm and user the connector resolves you to when you sign in. We do not receive or store your password.
- Content you act on — the matters, deadlines, appointments, notes, tags, reports, and related case data you create, read, or modify through the Connector.
- Microsoft 365 data you choose to access — when you use a Microsoft 365 tool, the Connector reads or writes the specific Outlook, OneDrive, SharePoint, or group resources you direct it to, on your behalf.
- Operational logs — records of requests to the Connector (such as time, endpoint, and status) used to operate, secure, and troubleshoot the service. We log a summary of your access token's properties for security diagnostics; we do not log the token itself.
The Connector accesses only the data your own account is already authorized to use. It does not access other users' or other firms' data, and it does not read your AI assistant's chat history, memory, or unrelated files.
How we use information
We use this information to:
- Authenticate you and carry out the actions you request through your AI assistant.
- Calculate deadlines and return the matter, calendar, and document information you ask for.
- Operate, maintain, secure, and improve the Connector.
- Detect, prevent, and respond to fraud, abuse, or security incidents.
- Comply with legal obligations.
We do not sell your information, and we do not use the content of your matters for advertising.
How information is shared
- Your AI assistant provider. To fulfill your requests, the information you submit and the results returned by the Connector are processed by the third‑party AI assistant you connect (for example, the provider operating your assistant). That provider's handling of your data is governed by its own terms and privacy policy. Only connect assistants you trust.
- Service providers. We use trusted infrastructure and processing providers (such as cloud hosting and, where applicable, payment processors) under appropriate confidentiality and data‑protection terms.
- Microsoft 365. When you use a Microsoft 365 tool, requests are made to Microsoft Graph using your delegated permission to act on your own resources.
- Legal and protective disclosures. We may disclose information where required by law or to protect the rights, safety, and security of LawToolbox, our users, or the public.
We do not give, rent, lend, or sell user information to third parties for their own marketing.
Data storage, security, and retention
- Storage. Account and matter data is stored in dedicated SQL databases on LawToolbox servers. Data in transit is protected with encrypted HTTPS.
- Security. Passwords (where applicable to the underlying LawToolbox account) are hashed using PBKDF2 with HMAC‑SHA256. LawToolbox personnel are subject to background checks and confidentiality agreements.
- Retention. Matter and account data is retained for as long as your LawToolbox account is active or as needed to provide the service and meet legal, accounting, or reporting obligations. Operational logs are retained for a limited period for security and troubleshooting and then rotated. You can request deletion as described below.
Your rights and choices
Depending on your location and account type, you may request to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your information.
- Opt out of marketing communications.
- Disconnect the Connector at any time from your AI assistant's settings, which revokes its access.
We respond to validated requests within 30 days.
Contact us
For privacy questions or to exercise your rights:
- Data Protection: DPO@lawtoolbox.com
- Support: support@lawtoolbox.com
- Phone: 1‑888‑958‑6657
- Mail: LawToolbox, PO Box 1766, Denver, CO 80217‑0666
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, through additional notice.