Privacy policy

Belleverite Technologies, LLC, for the VOIRdirect™ website and product

Effective Date: November 12, 2026 · Last Updated: November 12, 2026

This Privacy Policy explains how Belleverite Technologies, LLC handles personal information collected through the VOIRdirect website at voirdirect.ai (the “Site”) and, in summary form, how the VOIRdirect product (the “Product”) handles information that customers submit to it. Part A covers the Site. Part B covers the Product. Part C covers your rights and everything else.

1. Who we are

Belleverite Technologies, LLC (“Belleverite,” “we,” “us,” or “our”) is a Colorado limited liability company. We operate the Site and develop and provide the Product. We are the party responsible for the personal information this policy describes. Our affiliates do not operate the Site or the Product and do not receive information you submit to either.

VOIRdirect is litigation intelligence software sold to law firms, corporate legal departments, and other organizations that act through licensed attorneys. It is not offered to consumers or to people representing themselves in a legal matter. Belleverite is not a law firm. Nothing you submit to us creates an attorney-client relationship with Belleverite.

Part A. The Site

2. Information we collect on the Site

Information you give us. If you use the request-access form, we collect your name, firm or organization, role, practice focus, firm size, email address, anything you write in the free-text field, and a record that you checked the consent box and when. If you email us, we receive your email address and whatever your message contains.

Information collected automatically. Our hosting provider receives the technical information any web server receives, such as your IP address, browser type, the pages you request, and the time of each request, and keeps it in server logs used for security and operations.

What not to send us. Do not submit client confidences, privileged information, matter documents, pleadings, court orders, scheduling orders, discovery material, docket records, or sensitive personal information through the Site or by email to the addresses on this page. The Site is not a matter intake channel. If we receive that material through the Site, we delete it without reviewing or retaining it.

3. How we use Site information

We use Site information to respond to your request and contact you about access to VOIRdirect, to plan our launch, to send you product updates you have asked for, to operate and secure the Site, and to comply with law and protect our rights.

We do not use Site information to train any artificial intelligence model and we do not send it to any AI provider. We keep it in systems separate from the Product environment. We do not make decisions about you by automated means and we do not build behavioral profiles from your use of the Site.

If we send you product updates, each one will identify us, include our postal address, and include a working unsubscribe link. We honor unsubscribe requests within 10 business days.

4. Cookies and similar technologies

The Site does not set cookies of its own. Our hosting provider, Cloudflare, may set a cookie that is strictly necessary to protect the Site and its forms from abuse. We do not use advertising cookies, cross-site tracking, social media pixels, or third-party advertising or analytics tags. Because any such cookie is necessary to protect the Site, we do not offer a setting to turn it off; you can block cookies in your browser, and parts of the Site may then not work.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

We disclose Site information only to service providers that host the Site or help us run the request-access process and email, under terms that limit their use of it to providing that service to us; when required by law or valid legal process, or where reasonably necessary to protect our rights, property, or safety or that of others; and to a successor in a merger, acquisition, financing, or sale of assets, subject to confidentiality protections and this policy.

6. How long we keep Site information

We keep request-access information for as long as we need it to respond to you and manage early access, and no longer than 24 months after our last contact with you, unless you ask us to delete it sooner or the law requires us to keep it longer. Server logs are kept under our hosting provider’s standard log retention. You can ask us to delete your Site information at any time (Section 13). We delete it from active systems promptly, and from backups as they cycle.

Part B. The Product

7. Our role for customer data

When a law firm or legal department (“Customer”) uses VOIRdirect, the information it submits or connects, including matter content and personal information about parties, witnesses, jurors, counsel, and other case participants (“Customer Data”), is processed on the Customer’s behalf and under its instructions. For Customer Data we act as the Customer’s service provider and processor, and the Customer decides what is submitted and why. The Customer’s subscription agreement and Data Processing Addendum (“DPA”) govern Customer Data and control over anything in this summary. If you are an individual whose information appears in a Customer’s matter, please direct requests about it to that Customer, and we will assist the Customer in responding as our agreement requires.

We act on our own behalf for limited account and business information: the names, work email addresses, and roles of a Customer’s authorized users, sign-in and security events, billing contacts, and support correspondence. We use that information to provide, secure, bill for, and support the Product.

Some Product features draw on public court records and other public sources. We use those sources to provide the Product’s analysis to Customers and for no other purpose.

8. How the Product is built to handle Customer Data

The commitments below describe the Product’s design and our contractual posture. The DPA states them in binding form.

United States only. Customer Data is stored and processed in the United States. We pin our infrastructure to United States regions and do not intentionally store Customer Data outside the United States.
Matter and tenant isolation. Each Customer’s data is separated from every other Customer’s data at the data layer, not only in application code, and each matter is isolated within a Customer’s environment.
Encryption. Customer Data is encrypted in transit and at rest.
Audit record. Access to Customer Data and administrative actions are recorded in a tamper-evident, append-only activity log.
No training on Customer Data. We do not use Customer Data to train or improve any artificial intelligence model, ours or anyone else’s.
AI providers under contract first. Where a feature sends content to a large language model provider, Customer Data does not reach that provider until it is bound by terms that prohibit training on the data and limit how long the provider may keep it, together with the flow-down obligations in the DPA. Those terms limit retention; they do not reduce it to zero, and a provider may keep content it flags for safety review for the period its terms state. We list every such provider before it receives Customer Data.
Subprocessors. We publish a list of the subprocessors that process Customer Data, currently our cloud infrastructure provider, our AI model provider, and an encrypted-backup provider that stores only data we encrypt before it leaves our control. Customers receive at least 30 days’ notice before a new subprocessor processes their data and may object. The list is available on request at the address in Section 13.
Retention and return. Customer Data is kept for the term of the Customer’s subscription and then returned or disposed of as the Customer’s agreement provides, subject to any legal hold the Customer places or the law requires. While a subscription is active, the Customer controls what is retained in its matters.
No sale. We do not sell Customer Data or share it for advertising.

9. Information for lawyers evaluating VOIRdirect

ABA Formal Opinion 512 (July 29, 2024) asks lawyers who use generative AI tools to understand how a tool uses the information put into it, including whether it learns from that information, before entering client confidences. Section 8 is written to answer those questions directly. The duties under Model Rules 1.1, 1.6, and 5.3 remain the lawyer’s, and Customers may request our security documentation under a confidentiality agreement.

Part C. Your rights and other terms

10. Your privacy rights

You may ask us to tell you what personal information we hold about you, give you a copy of it, correct it, or delete it, and you may opt out of marketing email at any time. We extend these rights to everyone, wherever they live, and we do not treat you differently for using them.

California. The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California residents the rights above, plus the right to know the categories of personal information collected and disclosed, and the right to limit use of sensitive personal information. In the past 12 months we have collected identifiers (such as name and email address), professional information (such as firm, role, and practice focus), and internet activity limited to server logs, from you and from your browser, for the purposes in Section 3. We disclose these only to the service providers described in Section 5. We do not sell or share personal information, we do not use or disclose sensitive personal information for purposes that would give rise to a right to limit, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We treat a Global Privacy Control signal as a valid request to opt out of sale and sharing, although we do neither. You may use an authorized agent to make a request; we will ask the agent for proof of authority and may ask you to confirm your identity.

Colorado. The Colorado Privacy Act gives Colorado residents the rights to access, correct, and delete personal data, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not engage in targeted advertising, sales, or profiling. If we decline a request, you may appeal by replying to our decision with the word “Appeal.” We will respond to an appeal within 45 days and, if we deny it, tell you how to contact the Colorado Attorney General.

Other states. Residents of other states with comparable laws may make the same requests the same way.

How we respond. We confirm receipt within 10 business days and respond within 45 days, which we may extend once by 45 more days where reasonably necessary, telling you why. We verify your identity by matching information we already hold, usually your email address, before we act on a request.

11. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and the authorities as the law requires.

12. Children, other websites, location, and changes

The Site and Product are for legal professionals and are not directed to children. We do not knowingly collect personal information from anyone under 16, and we delete it if we learn we have.

The Site may link to other websites. Their own privacy policies govern them.

We operate from the United States and the Site and Product are intended for users in the United States. If you access them from elsewhere, your information is processed in the United States.

We may update this policy. We will post the updated version with a new “Last Updated” date, identify material changes, and not apply a material change to information we already hold without notice to you.

13. Contact us

Belleverite Technologies, LLC 1675 Broadway, Floor 28 Denver, Colorado 80202 Email: [email protected]

Use this address for privacy requests, appeals, subprocessor-list requests, and questions about this policy.