Privacy Policy
Last updated: August 5, 2026
1. Overview
This Privacy Policy describes how One Click Immigration (“Ellis,” “we,” or “us”) collects, uses, shares, and protects information in connection with our website, the Ellis platform, and the client portal (together, the “Service”). Ellis is a legal technology platform used by law firms; it is not a law firm, and nothing in the Service creates an attorney–client relationship with us.
2. Our Two Roles
We handle information in two distinct capacities, and your rights depend on which applies:
- As a business (controller) — for information about website visitors, demo requests, and the business contact details of attorneys and firm staff who use the platform. This Policy governs that information directly.
- As a service provider (processor) — for matter files, client documents, and other case information (“Matter Data”) that a law firm submits to its own environment or invites its clients to submit through the portal. We process Matter Data only on the firm’s instructions. The firm is the controller of Matter Data; if you are a client of a firm that uses Ellis, requests about your information should be directed to your firm, and we will support the firm in honoring them.
3. Information We Collect
- Contact and demo requests — name, email, firm, and the contents of your message when you contact us or book a demo.
- Account information — name, work email, role, and authentication details for authorized firm users.
- Usage and log data — actions taken in the Service, timestamps, device and browser information, and IP addresses, used for security, auditability, and support. Actions in the platform are attributed to named users by design.
- Matter Data — documents and information submitted by a firm or by its invited clients for a matter, processed on the firm’s instructions as described in Section 2.
We do not collect information from data brokers, and we do not use advertising trackers on the Service.
4. How We Use Information
- to provide, operate, secure, and support the Service;
- to maintain audit trails of platform activity for the firm’s professional-responsibility and security needs;
- to communicate with you about the Service, including service and security notices;
- to comply with law and enforce our agreements.
We do not sell personal information, and we do not use it for third-party advertising.
5. AI Processing
The Service uses large language models to read documents, assess records, and prepare drafts under attorney supervision. Model inference is routed through providers configured for zero data retention: content sent for inference is not retained by the model providers and is not used to train their models. We do not train AI models on customer content. AI output in the Service is drafting assistance reviewed by the responsible firm’s attorneys; no legal decision about an individual is made solely by automated means.
6. How We Share Information
We share information only with service providers that help us operate the Service, under contracts that limit their use of it to providing services to us:
- cloud infrastructure and storage (Amazon Web Services, United States);
- AI model inference providers, routed with zero-data-retention configurations;
- transactional email delivery;
- professional advisers, or authorities where required by law, with notice to the affected firm where lawful.
A current subprocessor list is available on request. We do not sell or “share” personal information for cross-context behavioral advertising as those terms are defined under California law.
7. Cookies
The Service uses only essential cookies and similar technologies: session and authentication cookies, security protections, and interface preferences (such as theme). We do not use third-party advertising or cross-site tracking cookies.
8. Security
Each firm runs in its own isolated, single-tenant environment with its own database and encrypted document store. Data is encrypted in transit and at rest. Inside a firm, matters are siloed per attorney, access is limited to authorized users, and every action is attributed and logged. We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of legal matter information, and we notify affected firms without undue delay in the event of a personal-data breach affecting their environment.
9. Retention and Deletion
We retain account and business records for as long as needed for the purposes described in this Policy and to meet legal obligations. Matter Data is retained according to the controlling firm’s instructions and retention settings; when an engagement ends, we make data available for export and then delete it, and firms may request confirmation of deletion.
10. Your Rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. California residents have the rights provided by the CCPA/CPRA, including the right to know, delete, correct, and not be discriminated against for exercising rights; we do not sell or share personal information, so no opt-out is required. To exercise rights over information we control, contact us at privacy@oneclickimmigration.com; we will verify your request and respond within the time required by law. For Matter Data, contact the law firm that handles your matter (see Section 2).
11. International Users
The Service is operated from the United States and information is processed there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States. Where required, we use appropriate safeguards for cross-border transfers.
12. Children
The Service is for professional use and for clients of law firms. It is not directed to children under 16, and we do not knowingly collect personal information from them except as contained in Matter Data processed on a firm’s instructions (for example, family members named in an immigration petition).
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be announced through the Service or by email, and the “Last updated” date above will reflect the current version. Continued use of the Service after the effective date constitutes acceptance.
14. Contact
One Click Immigration — privacy@oneclickimmigration.com
