Privacy Policy

This Privacy Policy describes how Telcloud, LLC, a South Carolina limited liability company, doing business as KeaneAdvisors.AI ("KeaneAdvisors.AI," "we," "us," or "our") collects, uses, shares, and protects personal information. Capitalized terms not defined here have the meanings given in our Terms & Conditions of Service.

This Privacy Policy applies to:

• •Website: Our marketing website at keaneadvisors.ai and related subdomains.
• •Platform: The AI Governance Phase 0™ Assessment for Law Firms at app.keaneadvisors.ai and related subdomains.
• •Other interactions: Including lead-capture forms, business development outreach, and email correspondence.

Together, the Website and Platform are the "Services." This Privacy Policy does not apply to the websites or services of third parties to which we may link.

If you are a customer using the Platform on behalf of a law firm or other organization, this Privacy Policy describes how we handle personal information about you and your firm's personnel. Our role with respect to your firm's data is set forth in the Terms and the Data Processing Addendum at Appendix A of the Terms.

We use the personal information we collect for the following purposes:

• •Provide the Services: Create and manage accounts, deliver assessment functionality, generate Defensibility Scores and reports, maintain the Platform, and provide customer support.
• •Billing and payments: Process subscription fees, prevent billing fraud, send invoices and receipts, and manage renewals and cancellations.
• •Communicate with you: Send transactional communications, respond to inquiries, and provide customer support.
• •Marketing communications: Send newsletters, product updates, and educational content. You can opt out of marketing emails at any time by following the unsubscribe link or emailing support@keaneadvisors.ai.
• •Improve the Services: Understand how the Services are used, diagnose technical issues, develop new features, and conduct product analytics using aggregated and de-identified data.
• •Security and integrity: Detect, prevent, and respond to fraud, unauthorized access, abuse, and security incidents; enforce our Terms and Acceptable Use Policy.
• •Legal compliance: Comply with applicable laws, regulations, court orders, and lawful requests from government authorities.
• •Business operations: Conduct internal recordkeeping, accounting, audits, and corporate governance.

We share personal information only as described below.

These commitments apply to all individuals and are stated in the strict sense of "sale," "share," and related terms as defined under California, Colorado, Connecticut, Virginia, and other applicable state privacy laws.

We and our service providers use cookies and similar technologies (such as pixel tags and local storage) for the following limited purposes:

• •Strictly necessary: Session management, authentication, security (including CSRF protection), and load balancing. These are required for the Services to function and cannot be disabled.
• •Functional: Remembering preferences such as language or display settings.
• •Analytics: Understanding how visitors use the Website and Platform, as described in Section 7. We use first-party analytics provided through Squarespace's built-in analytics on the Website and our own server-side logs on the Platform.

We do not use third-party advertising cookies, social-media tracking pixels, or cross-site tracking technologies. You can control cookies through your browser settings; disabling strictly necessary cookies may impair functionality of the Services.

We use first-party analytics tools to understand aggregate usage patterns. On the Website, we rely on Squarespace's built-in analytics, which collects information such as page views, traffic sources, device type, and approximate geographic region. On the Platform, we use our own server-side logging.

We do not use Google Analytics, Meta Pixel, LinkedIn Insight Tag, or other third-party advertising-analytics tools. If we add such tools in the future, we will update this Privacy Policy and provide appropriate notice and opt-out mechanisms before doing so.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, alteration, or disclosure. These include encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent), role-based access controls, multi-factor authentication for administrative accounts, logging and monitoring, secure software-development practices, and incident-response procedures. A fuller description of our security measures is provided in Section A.6 of the Data Processing Addendum.

No system can be guaranteed to be completely secure. We encourage you to use a strong, unique password for your account, enable available security features, and notify us promptly at support@keaneadvisors.ai of any suspected unauthorized access.

In the event of a confirmed security incident affecting your personal information, we will notify you without unreasonable delay and in any event no later than seventy-two (72) hours after confirmation, consistent with S.C. Code §39-1-90 and applicable federal and state breach-notification laws.

We retain personal information for as long as needed to provide the Services and to comply with our legal obligations, resolve disputes, and enforce our agreements.

• •Account and assessment data: Retained for the duration of your subscription. Following termination, retained for 30 days for export, then deleted from active systems within 30 additional days.
• •Lead-capture and contact-form submissions: Retained for up to 24 months after last contact, unless a business relationship is established.
• •Billing records: Retained for the period required by applicable tax, accounting, and corporate-records laws, typically 7 years.
• •Communications and support records: Retained for up to 36 months after resolution.
• •Server and security logs: Retained for not less than 90 days and up to 13 months.
• •Aggregated and de-identified data: May be retained indefinitely.

You may request deletion of your personal information at any time, subject to limited exceptions.

Depending on your state of residence, you may have some or all of the following rights with respect to your personal information:

• •Right to know / access. Request confirmation of whether we process your personal information and a copy of that information.
• •Right to correct. Request correction of inaccurate personal information.
• •Right to delete. Request deletion of personal information we have collected from you, subject to exceptions permitted by law.
• •Right to data portability. Request a copy of your personal information in a portable, machine-readable format.
• •Right to opt out of sale, sharing, or targeted advertising. As stated in Section 5, we do not engage in any of these activities. This right is preserved by default.
• •Right to non-discrimination. We will not discriminate against you for exercising any of these rights.
• •Right to appeal. If we decline a request, you may appeal as described below.

This section provides additional information for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA").

The Services are not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under thirteen. If we learn that we have inadvertently collected personal information from a child under thirteen, we will delete it promptly. If you believe a child has provided personal information through the Services, please contact support@keaneadvisors.ai.

The Services are intended for use by adult professionals in connection with the practice of law and law firm administration.

Most modern web browsers offer a "Do Not Track" setting and several offer a "Global Privacy Control" (GPC) signal. Because we do not engage in cross-context behavioral advertising or sell personal information, our practices do not change based on a Do Not Track signal. We honor GPC signals as an opt-out request to the extent any opt-out applies to our processing — although, as stated in Section 5, no opt-out is needed under our current practices.

The Services are operated from the United States and are intended for use by U.S.-based law firms and their personnel. If you access the Services from outside the United States, you do so on your own initiative and are responsible for compliance with local laws. Personal information collected through the Services will be processed and stored in the United States.

We do not market or actively offer the Services to individuals in the European Union, the United Kingdom, or other jurisdictions with comprehensive cross-border data protection regimes. If you are located in one of those jurisdictions, please do not provide personal information through the Services.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Effective Date" at the top of this Privacy Policy will be updated to reflect the date of the change. For material changes, we will provide additional notice by email to registered users or through a prominent notice on the Services at least thirty (30) days before the change takes effect.

Your continued use of the Services after the effective date of a revised Privacy Policy constitutes acceptance of the revised terms.

For questions about this Privacy Policy, to exercise your privacy rights, to report a privacy concern, or to request a copy of our current sub-processor list:

If you are not satisfied with our response, you may contact the attorney general of your state of residence to submit a complaint.