Effective date: June 2026 · Probative
Probative (probative.app) is an AI-powered evidentiary analysis platform ("we", "us", "our").
We understand that documents uploaded to Probative are subject to legal professional privilege and may contain highly sensitive client information. Our data architecture has been designed with this in mind.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
For privacy enquiries: email@probative.app
| Information | How collected | Why |
|---|---|---|
| Firm name and email address | Entered by you when creating an account | To authenticate your firm and manage your account |
| Password | Entered by you when creating an account | Stored as a one-way cryptographic hash only — we cannot read it |
| Billing records and matter details | Generated automatically when a report is produced | We record the firm name, the name and email of the person who ran the report, the file name as uploaded, the matter name and matter number you enter, the amount charged, and the date. We do not record the text or contents of your documents. |
| Payment information | Via Stripe when you set up billing | To process payments. Probative does not store card details — these are handled exclusively by Stripe under PCI-DSS compliance. |
| Correspondence | If you contact us by email or via the website | To respond to your enquiry and maintain a record of our communications |
| Website usage data | Automatically when you visit the website | Using our own first-party analytics, we record the pages visited, your IP address, approximate location (the city and region derived from your IP address), browser type, and the site that referred you, to understand traffic and improve the service. See section 11. |
When you upload a document, its content passes through our systems for the purpose of analysis. Specifically:
At no point in this process is your document's text or content written to any database or persistent storage we operate, and it is not retained after the analysis is complete.
We do retain billing-record details — the file name as uploaded, the matter name and matter number you enter, and the name and email of the person who ran the report — as part of your billing record (see section 2). These never include the text or contents of your document.
Documents are transmitted to Anthropic's AI API for processing. The content is not retained in any database, file, or storage system we operate. Analysis results are returned to your browser, held in temporary session storage on your device only, and permanently deleted when you close your browser tab.
Our hosting infrastructure providers (Vercel and Render) may create transient system logs as part of normal operation. These logs do not contain document content and are subject to those providers' own retention and deletion policies.
When you upload an affidavit for analysis:
We use the following providers to operate Probative. Each processes data only as necessary for the services they provide. The following statements are taken from or based on each provider's own published policies, linked below.
| Provider | Purpose | Data processed | Their policy statement |
|---|---|---|---|
| Anthropic, Inc. privacy.anthropic.com |
AI analysis engine | Document text during analysis only | "By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models." API inputs and outputs are automatically deleted by Anthropic (within 30 days at the time of writing; this period is set by Anthropic and may change — verify at privacy.anthropic.com). |
| Vercel, Inc. vercel.com/legal/privacy-policy |
Website and API hosting | Transient request logs only. No document content stored. | "Vercel personnel are prohibited from viewing Customer Content, except when instructed by you, as necessary to resolve Customer support issues, or for security, Services integrity, or legal purposes." On Pro plan (which Probative uses): opted out of AI model training by default. |
| Render, Inc. render.com/privacy |
Document text extraction microservice | Document content processed transiently, not stored. | Render is a compute hosting platform. Document content passes through transiently during Word document parsing and is not persisted; any temporary file created during extraction is deleted immediately afterwards. |
| Supabase, Inc. supabase.com/privacy |
Database (ap-southeast-2, Australia) | Account data and billing records only. No document content. | Supabase stores only what Probative writes to it. Probative writes firm name, amount charged, and date only. No document content is ever written to Supabase. |
| Stripe, Inc. stripe.com/au/privacy |
Payment processing | Payment card data, transaction records, and the charge description (which includes the matter or file name you enter) | Payment card data is handled exclusively by Stripe under PCI-DSS compliance. Probative does not store card numbers or CVV codes. |
| Resend, Inc. resend.com/legal/privacy-policy |
Transactional email | Email address and email content (password resets, receipts) | Resend processes email addresses and message content solely for the purpose of delivering transactional emails. |
Where we disclose information to overseas recipients, we take reasonable steps to ensure those recipients handle your information consistently with the APPs.
We acknowledge that documents uploaded to Probative are likely to be subject to legal professional privilege. We have designed our service to minimise exposure of privileged content:
We use your account information to authenticate your firm, manage billing, and communicate with you about your account. We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not use document content for any purpose other than providing the analysis.
By creating an account you consent to receiving electronic communications from us, including account information, billing notices, and product updates. Each commercial electronic message we send includes an unsubscribe link. You may unsubscribe at any time by clicking that link. Unsubscribing will remove you from product and marketing communications only — transactional emails such as password resets and billing notices will continue to be sent as they are necessary for the operation of your account.
We comply with the Spam Act 2003 (Cth) in relation to all commercial electronic messages.
We implement the following security measures:
In the event of a data breach affecting your personal information, we will notify you in accordance with our obligations under the Privacy Act 1988 (Cth).
We retain account data for the duration of your account and for a reasonable period after closure for billing and dispute resolution purposes. Billing records are retained for 7 years in accordance with applicable Australian financial record-keeping requirements. The text and contents of your documents are never retained. Website usage data (see section 11) is retained for traffic analysis. Correspondence is retained for the period necessary to manage the relationship and deleted on reasonable request.
Under the Australian Privacy Principles, you have the right to:
To exercise any of these rights, contact us at email@probative.app. We will respond within 30 days.
The platform uses session tokens for authentication. We also operate our own first-party analytics: when you visit the website we record the page visited, your IP address, approximate location (the city and region derived from your IP address), browser type, and the site that referred you, so we can understand traffic and improve the service. This data is held in our own database and is not shared with third-party advertising or analytics networks.
We do not use advertising cookies, cross-site tracking cookies, or third-party analytics services. You can disable cookies in your browser settings, though this may affect platform functionality.
If you have a complaint about our handling of your personal information, please contact us first at email@probative.app. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We may update this Privacy Statement from time to time. The effective date at the top of this page reflects the most recent revision. Material changes will be communicated by email to account holders. Continued use of the platform after updates are posted constitutes acceptance of the updated statement.
For questions or requests relating to this Privacy Statement or your personal information, contact us at email@probative.app.