Privacy

Privacy Policy

Last updated August 21, 2026

The short version

This site is used both to describe my work and to intake legal research engagements. Depending on how you interact with it, you may send me a contact-form message, or — through a private link I share directly with clients — your name, contact details, a description of what you need researched, and documents related to your matter. I use Anthropic's Claude API to accelerate research, and personally verify all of it against primary sources before anything is delivered. I don't sell your information, and I don't add you to any mailing list.

What the contact form collects

The form at /contact collects the name, email address, subject, and message you enter. When you submit it, that data is sent over HTTPS to a Google Cloud Function I operate and is delivered to me as an email at ss@stephenscott.us, with your address set as the reply-to so I can respond.

Submissions through this form specifically are not written to any database — they exist as email in my inbox. (Client intake submissions, described below, are handled differently.) I use them to reply to you and, if we end up working together, as part of our ongoing correspondence. I do not sell them, and I do not add you to any mailing list.

The form includes two spam defenses: a hidden field that real visitors never fill in, and a check that the form was open for at least a few seconds before submission. Neither tracks you or persists anything.

The client intake form

Attorneys I'm actively working with can submit a research request through a private, unlisted intake link. It collects your name, email, phone (optional), a description of the matter, and any documents you choose to upload (up to 50MB). That data is written to a private database record and a private cloud storage folder — not written to a public location, and not accessible through any public or client-side path. I've confirmed this directly against the live security rules: there is no rule granting outside read or write access to this data; only server-side access (functionally, only me) can reach it. I'm notified by email of each submission.

How AI is used in research

Case descriptions and documents submitted for a research engagement may be processed using Anthropic's Claude API to accelerate research. Per Anthropic's own commercial terms (verified August 2026): API inputs and outputs are never used to train Anthropic's models, and are automatically deleted from Anthropic's backend within 30 days by default. Every citation and holding AI touches is personally verified by me against primary sources before it reaches you — that verification step, not the AI itself, is what the final research product relies on.

How long I keep this information

Client intake records and documents are kept indefinitely, as part of your ongoing case file and for reference on any future matters. I'll delete a specific client's records on request — email ss@stephenscott.us and I will action it.

Analytics and cookies

This site loads Google Analytics 4 (property G-CSBMH9D41J) on every page. It sets cookies and reports pages viewed, approximate location, referring site, device and browser type, and your IP address to Google. I use it only in aggregate, to see which pages people read. I do not attempt to identify individual visitors, and I have not enabled advertising or remarketing features.

To opt out entirely, use Google's browser opt-out add-on, your browser's Do Not Track or tracking-protection setting, or any content blocker. The site works normally without analytics.

Third parties this site talks to

  • Google Fonts — typefaces are fetched from fonts.googleapis.com and fonts.gstatic.com, so Google receives your IP address when a page loads.
  • Firebase Hosting (Google) — serves this site and keeps standard server request logs.
  • Google Cloud Functions — receives contact form and client intake form submissions, as described above.
  • Google Cloud Storage (Firebase) — stores client intake documents, privately, as described above.
  • Anthropic — processes case descriptions and documents via the Claude API for research, as described above.
  • Google Analytics — as described above.

Outbound links to Amazon, LinkedIn, Instagram, and client sites are ordinary links. Once you follow one, that site's privacy policy governs, not this one.

Affiliate disclosure

Some links to AI for Network Marketers on the books page and in the field-guide article are Amazon Associates links carrying the tag teambuildpro-20. If you buy through one, I may earn a commission at no additional cost to you. It does not change the price you pay, and it does not change what I recommend.

Your choices

You can ask what information of yours I hold, ask me to correct it, or ask me to delete it, at any time. Email ss@stephenscott.us and I will action it. A mutual NDA is available before any specifics are discussed, if you'd like one signed.

For analytics data, Google is the controller of what it collects — the opt-out options above are the effective route, and Google's own privacy policy covers its handling.

Children

This site is aimed at businesses and professionals. It is not directed at children under 13, and I do not knowingly collect information from them.

Changes

If what this site collects changes, I will update this page and the date at the top. Questions about any of it: ss@stephenscott.us.