This Privacy Policy explains how T-I-L-Group, Benefit Corp ("T-I-L-Group", "IPRights4All", "we", "us" or "our") and its affiliated law practice Technology-Innovation-Law ("T-I-L") collect, use, share and protect personal information when you use the IPRights4All platform and website at iprights4all.com, including Tilly, the IPRights4All Marketplace, Insights and the free Tilly guide, and the Technology Innovation Law website at technology-innovation-law.com (together, the "Services").
If you do not agree with this Privacy Policy, please do not use the Services. Questions are welcome at any time: see How to contact us.
Summary of key points
- Who is responsible. T-I-L-Group is responsible for the IPRights4All platform. T-I-L is responsible for information you send to the law firm through technology-innovation-law.com.
- What we collect. Account and profile details, membership and payment records, the content you create on the platform (such as Tilly conversations, Marketplace connection requests and vendor listings), messages you send us through forms, and limited technical data.
- AI processing. Tilly messages are sent to an AI model provider (currently OpenAI) to generate answers. Voice notes are sent to Deepgram for transcription and are not stored by us.
- Your conversations are private. Tilly conversations are visible to you. Staff do not routinely access them. A conversation becomes visible to others only if you explicitly share it.
- Marketplace connections. When you contact a provider, we share only what you review and approve in the connection form. We never send your Tilly transcript.
- No sale of personal information. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use advertising cookies.
- Your choices. You can review, export and delete your account data from Settings, and you can contact us to exercise your rights.
1. Information we collect
Information you provide
- Account information: your name, email address and password (passwords are handled by our authentication provider and are never visible to us), or the profile details shared by Google if you sign in with Google.
- Profile and preferences: your display name, language, time zone, appearance settings, preferred Tilly mode, the languages you choose for the Marketplace, and the version and date of the Terms of Service you accepted.
- Membership and payments: your membership status, billing periods, offers, pay-what-you-can (PWYC) approvals, suggested and actual contributions, top-up purchases and receipts. Card details are collected and stored by Stripe, not by us.
- Tilly conversations: the messages you send to Tilly, Tilly's answers, conversation titles, the mode used and the usage recorded for each answer.
- Voice input: short audio recordings you choose to make for transcription, and the resulting text.
- Marketplace activity: connection requests, including the message, the matter summary you write and any Tilly-generated summary you approve; the languages you choose for browsing.
- Vendor information: if you apply or are invited to list services, your application, listing content in each language, contact details, location, pricing, professional details (such as practice areas, admissions and bar numbers) and the requests you receive.
- CreatorCoin benefit: if you activate it, the activation date, whether it is linked, your paid-period dates, and the summary counts CreatorCoin reports (registrations used and left, the number of works you have documented and licensed, and how many items await your response there). We never receive the works or messages themselves.
- Forms and surveys: information you send through our contact, consultation, register-interest and early-access forms (such as your name, email, phone number, company, location and message), and answers you give in our surveys.
Information collected automatically
- Technical and log data: IP address, browser and device type, language settings, pages requested, referring URLs, timestamps, and error and security logs, which our hosting and infrastructure providers record to operate and protect the Services.
- Approximate location: we use the country derived from your IP address to suggest a language. Our contact and intake forms also send the visitor's IP-based location record (from ipapi.co) with the submission so that we can route your inquiry.
- Marketplace visits: when you follow a provider's website link, we record the visit for aggregate counts shown to that provider. The provider's site does not receive your identity from us.
- Usage records: the provider-reported token or audio-second usage of each Tilly answer, summary or transcription, so that we can meter your allowance and show you your balance.
Information from others
If you sign in with Google, Google shares your basic profile (name, email address and profile picture). Stripe tells us whether payments succeed, fail, are refunded or disputed. If a provider invites you or you are invited to join as a vendor, we receive the email address the invitation was sent to. If you activate the CreatorCoin benefit, CreatorCoin tells us whether an account with your email address exists there and sends the summary counts described above.
We do not ask for sensitive personal information. Please do not share information about your health, beliefs or other special categories of data with Tilly or in forms unless it is genuinely needed for your question.
2. How we use information
- To create and secure your account, sign you in and keep you signed in.
- To provide the Services you request: Tilly answers and transcriptions, conversation history and sharing, the Marketplace, connection requests, vendor listings and the member library.
- To process memberships, PWYC contributions and top-ups, calculate your included and purchased Tilly usage, and keep accurate financial records.
- To show the Services in your language and time zone and to remember your preferences.
- To respond to your messages and consultation requests, and to send service emails such as verification, receipts, membership notices and connection updates.
- To protect the Services, prevent fraud and abuse, enforce our Terms of Service and comply with legal obligations.
- To understand aggregate use of the Services and improve them. We do not use the content of your Tilly conversations for analytics or marketing.
3. Tilly, AI processing and voice input
Tilly is an educational assistant powered by third-party AI models. When you send a message, we send it to our AI model provider (currently OpenAI) together with the recent history of the same conversation, Tilly's instructions and, for paid members, excerpts of relevant published IPRights4All articles. The provider returns the answer and usage information.
We send these requests with the provider's "do not store" option (OpenAI's store: false setting), which asks the provider not to keep the response available for later retrieval through its API. This is not a zero-retention arrangement: the provider may still retain inputs and outputs for a limited period under its own policies, for example to monitor for abuse. According to OpenAI's published API policies, data sent through its API is not used to train its models by default.
We also use the AI provider, on your request, to draft a short summary of a conversation for a Marketplace connection (which you review and edit before anything is sent), and, for vendors, to draft translations of their listing. We create search indexes from published articles only, never from conversations.
Voice input is optional. When you record a voice note, the audio is sent to Deepgram for transcription in your language and the text is returned to your message box so you can edit it before sending. The audio is processed in memory and is not stored by us; Deepgram processes it under its own terms and policies.
Tilly's answers are generated automatically and may be inaccurate. Tilly does not make decisions about you that produce legal or similarly significant effects.
4. Your conversations and sharing
Your Tilly conversations are saved to your private history so you can return to them, and they are visible only to you. Our staff do not routinely access conversation content; access would occur only if you ask us for help with a specific conversation, or where necessary to investigate abuse, secure the Services or comply with law, and such access is recorded.
You can delete a conversation at any time. If you choose to share a conversation, we create a copy of its text at that moment and give you a link. Anyone who has the link can read the copy until you stop sharing, at which point the copied text is deleted. Opening the share dialog does not share anything on its own.
5. Marketplace connections
Providers in the IPRights4All Marketplace are independent professionals and businesses. When you send a connection request, the connection form shows exactly what will be shared before you send it: your name, your verified email address, your message, and, if you add them, your own matter summary and a Tilly-generated summary that you have reviewed and approved. Only that approved information is stored with the request and delivered to the provider. Your Tilly transcript is never attached.
After the provider receives your request, their use of your information is governed by their own privacy practices. Please review them before sharing more.
If you are a vendor, your published listing is public. Private contact details, bar numbers and similar fields marked as private are used only to manage your listing and deliver requests to you.
7. Legal bases for processing
Where the law of your country requires a legal basis (for example in the European Economic Area, the United Kingdom or Canada), we rely on: performance of our contract with you (to provide the Services you sign up for); our legitimate interests (to secure, maintain and improve the Services, prevent fraud and respond to inquiries), balanced against your rights; your consent (for example, when you choose to record a voice note, share a conversation or send a connection request), which you can withdraw at any time; and compliance with legal obligations (for example, tax and accounting records).
8. How long we keep information
- Account, profile, conversation and Marketplace data: for as long as your account exists, unless you delete it sooner.
- Payment, contribution and usage records: for as long as required for tax, accounting and legal purposes, even after your account is closed.
- Shared conversation copies: until you stop sharing or delete the conversation or your account.
- CreatorCoin benefit link and status: for as long as your account exists. When you delete your account, we tell CreatorCoin the benefit has ended and delete the link. CreatorCoin keeps its own records under its own policy.
- Voice recordings: not stored; transcripts are kept only if you send them as part of a message.
- Form submissions: for as long as needed to respond and maintain our relationship with you.
- Security and audit logs: for a limited period appropriate to their purpose.
When information is no longer needed, we delete or anonymize it. Copies in backups are deleted on the backup schedule.
9. How we protect information
We use organizational and technical measures designed to protect personal information, including encrypted connections, HTTP-only session cookies, server-side access checks on every request, owner-only access rules for conversations, and audit logs for sensitive actions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it confidential.
10. International transfers
We are based in the United States, and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for transfers of personal information out of your country.
11. Children
The Services are not directed to children, and accounts are only for people who are at least 18 years old (or the age of majority where they live). We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us at christopher.bennett@iprights4all.com and we will delete it.
12. Your rights and choices
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, to withdraw consent, and not to be discriminated against for exercising these rights.
- In your account: you can update your profile and preferences, delete conversations, stop sharing, export your data and delete your account from Settings.
- By email: you can contact us at christopher.bennett@iprights4all.com. For information you sent to the law firm, contact christopher.bennett@technology-innovation-law.com.
- Marketing: we do not currently send marketing email. If we start, we will ask for your consent where the law requires it, and every marketing email will include a way to opt out. Service emails (such as verification, receipts and security notices) are part of the Services.
We will verify your request using information associated with your account, and we may ask for additional information where needed. You may use an authorized agent where the law allows; we may ask for proof of authorization. If we decline a request, you may appeal by replying to our decision, and, if you remain unsatisfied, contact your local data protection authority or attorney general.
United States residents
Residents of California, Colorado, Connecticut, Utah, Virginia and other states with consumer privacy laws have the rights described above, subject to the exceptions in those laws. In the past twelve months we have collected identifiers, customer records, commercial information (membership and purchase history), internet or network activity (log data), approximate geolocation, audio (voice notes, processed transiently), professional information (for vendors) and the content of your communications with Tilly and with us, for the purposes and from the sources described in this policy. We disclose these categories to service providers for business purposes only, and, at your direction, identifiers and membership status to CreatorCoin when you activate its benefit. We do not sell or share personal information as those terms are defined in California law, and we do not use or disclose sensitive personal information for purposes that would require offering a right to limit.
California residents may also request, once a year, information about disclosures of personal information to third parties for their own direct marketing purposes ("Shine the Light"); we do not make such disclosures.
14. Third-party websites and services
The Services link to websites and services we do not control, such as Marketplace providers' websites, partner law firms, CreatorCoin and social networks. Their privacy practices are governed by their own policies.
15. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it last changed. If we make material changes, we will notify you in the Services or by email before they take effect.
This Privacy Policy is written in English. If we provide a translation, the English version governs.
16. How to contact us
IPRights4All platform: T-I-L-Group, Benefit Corp, 1440 G St NW, Washington, DC 20005, USA. Email: christopher.bennett@iprights4all.com.
Technology Innovation Law website: Technology-Innovation-Law, 1440 G St NW, Washington, DC 20005, USA. Email: christopher.bennett@technology-innovation-law.com.