Privacy policy: Stintwell for Law Firms
Effective September 27, 2026
Stintwell LLC ("Stintwell," "we") operates Stintwell for Law Firms, a plugin for Claude that works on the business side of a law firm. This policy covers the plugin, its sign-in pages and the server that serves its instructions.
What we collect
- Email address. Used to sign up and sign in with a one-time code. Accounts generally have no password; accounts we create for platform review may have one.
- Account record. Sign-up date, plan, and the date and version of the terms you accepted.
- Fetch record. For each instruction fetch: your account, the skill and step name, whether it was served, the version and the time. We also record when your account downloads the plugin from our site.
- Technical data. Our hosting receives your IP address and browser details with each request. A session cookie keeps you signed in. Rate limiting holds your email and IP address for about ten minutes. Error monitoring records technical details of errors, not the contents of your requests.
What we don't collect
We never receive your conversations with Claude. Our server receives only skill and step names, never your firm's numbers, client names or matter facts. We do not use analytics or advertising cookies or record sessions on these pages. We do not sell personal information or share it for advertising.
How we use it
To give you access and send sign-in codes; to secure the service and prevent abuse; to fix errors; to see which parts of the plugin are used so we can improve it; and to send service emails about your account, these policies, or pricing changes before any paid plan. We do not send marketing email without your consent.
Who handles it
| Provider | Role | Data | Privacy policy | |---|---|---|---| | Supabase | Database, sign-in | Email, account and fetch records | https://supabase.com/privacy | | Vercel | Hosting | IP address, request logs | https://vercel.com/legal/privacy-policy | | Resend | Sign-in email | Email | https://resend.com/legal/privacy-policy | | Sentry | Error monitoring | Technical error data | https://sentry.io/privacy/ | | Upstash | Rate limiting | Email, IP address (~10 min) | https://upstash.com/trust/privacy.pdf |
Anthropic is not our service provider. Your conversations are between you and Anthropic under Anthropic's terms and privacy policy (https://www.anthropic.com/legal/privacy). We may disclose information if the law requires it, to protect rights or safety, or in a merger or sale of the business, in which case this policy continues to apply.
Storage and security
Data is stored in the United States: our database with Amazon Web Services in Oregon, and our hosting in the eastern US. It is encrypted in transit, and access is limited by role and row-level security. No system is perfectly secure.
How long we keep it
We keep your account and fetch record while your account exists. We delete them within 30 days of a request or account closure, except records we must keep for security or legal reasons. Rate-limit data is kept about ten minutes. Hosting logs, error records and backups are kept for up to 30 days under our providers' settings.
Your choices
Email us to access, correct, export or delete your data. We respond within 30 days and will honor any additional rights your state gives you.
Do Not Track. We do not track you across sites, so we do not respond differently to Do Not Track signals.
Who this is for. The plugin is intended for lawyers and law-firm staff in the US who are 18 or older. It is not directed to children. If you use it from outside the US, your data is processed in the US.
Changes. We will update the effective date and email you before material changes take effect.
Contact. help@stintwell.com · Stintwell LLC