Not a law firm
EvidenceKeeper™ is not a law firm and does not provide legal advice. It is a documentation tool that helps you preserve, organize, and export your own records. Justice™, our AI assistant, helps separate facts from interpretation but does not give legal opinions. Always consult a qualified attorney for legal matters.
Our commitment
EvidenceKeeper is built to protect sensitive documentation. We collect only what is needed to run the service. We do not sell your personal data, and we do not share it with third parties for their own purposes. Your evidence belongs to you.
What we collect
• Account information — your name, email address, and an encrypted password hash.
• Case & evidence data — matters, incidents, timeline entries, calendar events, financial records, communication logs, court-order records, notes, and any photos, PDFs, documents, or voice recordings you upload.
• Derived data — SHA-256 integrity hashes, extracted metadata/text, and AI-assisted extractions generated only when you enable AI processing.
• Usage data — an audit trail of key actions (uploads, unlocks, exports, share activity) and limited technical data needed to keep the service secure.
How evidence files & case data are stored and protected
Every uploaded file is encrypted at rest with AES-256-GCM before storage and carries a SHA-256 integrity hash so you can verify the original has not changed. Originals are never overwritten. A separate 6-digit Vault PIN protects your Evidence Vault and authorizes report exports. All data in transit uses encrypted (TLS) connections.
AI processing & consent
Uploading evidence does not automatically enable AI analysis. Vault storage and AI processing are separate choices. When you enable AI processing, only the specific text, image, or audio you submit is sent to our AI/transcription provider to perform that request. You can preserve evidence and use manual, non-AI features without enabling AI. We do not use your private records to train third-party models beyond the request you initiate.
Third-party processors
We rely on a small number of trusted providers strictly to deliver the service, each processing data only as needed to perform its function: payment processing (Stripe; RevenueCat for mobile purchases), transactional email delivery, and AI/transcription for the specific content you submit. We do not sell or rent your data to advertisers or data brokers.
Support & administrative access
Access to user evidence follows a least-privilege model. Support staff do not casually browse your evidence; where administrative access to a file is genuinely necessary (for example, to resolve a support issue you raise), it is restricted and logged.
Data retention & deletion
Your data is retained while your account is active. You can permanently delete your account and all associated records at any time from More → Account & Data → Delete account (or at /delete-account). Deletion removes your evidence, records, generated reports, audit trail, and revokes active Secure Professional Review™ links. A web-based deletion request page is also available at herrellinteractive.com for store compliance. Limited billing records may be retained only where required by law.
Contact
Questions about privacy or your data? Contact us at support@herrellinteractive.com or visit herrellinteractive.com.