Privacy Policy

AIF Of Counsel Last updated: August 10, 2026

Attorney Advertising. Prior results do not guarantee a similar outcome.

AIF Law PLLC d/b/a AIF Of Counsel ("AIF," "we," "us," "our") is an AI-first complex commercial litigation law firm organized under the laws of the State of New York, with its principal office in New York, New York. It is our policy to handle personal information responsibly and in accordance with applicable data protection laws, including the European Union's General Data Protection Regulation ("GDPR"), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").

This Privacy Policy describes how we collect, use, share, and protect information relating to an identifiable individual ("Personal Information") through our website at ofcounsel.law (the "Website"), our proprietary technology systems, and in the course of our legal practice, and how you can exercise your rights under applicable law.

Nothing in this Privacy Policy is intended to, nor will it, establish an attorney-client relationship with any person reading it. Information provided to us in the course of an attorney-client relationship enjoys a special status and may be protected by the attorney-client privilege, the attorney work product doctrine, professional conduct rules governing confidentiality (including Rule 1.6 of the New York Rules of Professional Conduct), and similar protections in the United States and elsewhere. Nothing in this Privacy Policy detracts from, limits, or waives any of those protections. Where our professional obligations of confidentiality impose stricter requirements than applicable data protection law, our professional obligations govern.

1. Our Dual Role: Law Firm and Technology Operator

AIF is both a law firm and the operator of a proprietary AI litigation platform. This Privacy Policy distinguishes between two categories of processing:

AIF as controller. We act as a data controller with respect to Personal Information we collect for our own purposes — for example, information about Website visitors, prospective clients, business contacts, co-counsel, vendors, event participants, and recruits. This Privacy Policy applies in full to that processing.

AIF as counsel and on behalf of clients. In the course of providing legal services, we receive documents, transcripts, filings, communications, and other materials from or on behalf of our clients and co-counsel ("Matter Data"). Matter Data may include Personal Information relating to parties, witnesses, employees, and other individuals. Our handling of Matter Data is governed by our engagement agreements, court orders, protective orders, and our professional obligations — not by the consumer-facing terms of this Privacy Policy. Questions about Matter Data should be directed to the client on whose behalf we hold it, or to us at the contact details in Section 12.

Our technology systems. AIF develops and operates proprietary systems to deliver legal services. These systems process Matter Data solely for the purpose of representing our clients, subject to the confidentiality and security commitments described in Sections 5 and 6 below.

2. Personal Information We Collect

We may collect Personal Information in the course of our business, including through your use of our Website, when you contact or request information from us, when you engage us to provide legal services, when we work alongside you as co-counsel or embedded counsel, or as a result of your relationship with our personnel or clients. This includes:

Basic identifying information, such as your name, preferred form of address, employer, job title or position, and bar admissions;
Contact information, such as postal and email addresses and phone numbers;
Financial information, such as bank account and payment information needed to process invoices and payments;
Engagement and client acceptance information, collected as part of our conflict checks, anti-money-laundering screening, sanctions screening, and general reputational and financial diligence (which may be provided by you or by third parties);
Matter Data, as described in Section 1, provided to us by or on behalf of our clients or generated by us in the course of providing legal services;
Technical and usage information, such as IP address, browser and device information, log data, and information about how you interact with our Website and communications we send (including whether emails are opened), collected through cookies and similar technologies;
Communication information, such as the contents of messages you send us, survey responses, and information you provide in connection with meetings and events, including access and dietary requirements;
Information from third parties and public sources, including publicly available professional information (such as court filings, firm websites, and professional directories) used to maintain accurate contact records, conduct diligence, and inform our business development.

The Personal Information we collect may include special categories of data where relevant to a matter or required by law.

3. How We Collect Personal Information

We collect Personal Information: (a) as part of our client acceptance and engagement procedures; (b) as necessary in the course of providing legal services and collaborating with incumbent counsel and trial teams; (c) from your use of our Website and from monitoring email communications we send; (d) directly from you, for example when you speak with our personnel or register to receive communications; (e) from public sources and third-party vendors; and (f) as part of diligence when contracting with suppliers and vendors.

4. How We Use Personal Information

We use Personal Information to:

Provide legal services to our clients, including through proprietary technologies;
Manage our business and our relationships with clients, co-counsel, suppliers, and vendors;
Conduct conflict checks and comply with client acceptance, ethical, and regulatory obligations;
Market our services, including sending firm announcements, publications, and invitations, and conducting direct outreach to legal and business professionals where permitted by applicable attorney advertising and solicitation rules. You may opt out of marketing communications at any time by emailing us at the address in Section 12 or using the unsubscribe mechanism in any marketing email;
Operate, secure, maintain, and improve our Website and technology systems;
Bill for our services and process payments;
Fulfill legal and regulatory obligations, including in connection with actual or potential proceedings or investigations;
Recruit and evaluate candidates; and
For other purposes in the ordinary course of our business permissible under applicable law.

5. Our AI Systems and Model Training

Because we are an AI-first firm, we want to be explicit about how our technology handles information:

We do not use client confidential information or Matter Data to train, fine-tune, or develop generalized AI models. Matter Data is processed within our systems solely to perform legal services for the client to whom it relates, consistent with our engagement agreements and professional obligations.
Our systems maintain matter-level segregation. Institutional knowledge captured in our systems is subject to confidentiality controls and ethical screens consistent with our conflicts obligations.
Where our systems use third-party foundation models or cloud infrastructure, we do so under contractual terms that prohibit the provider from training on our inputs and outputs and that impose confidentiality and security obligations consistent with our professional duties.
We may use publicly available legal information — such as judicial opinions, statutes, regulations, and public filings — and appropriately de-identified or aggregated data to develop, evaluate, and improve our systems.

6. Sharing Personal Information

Consistent with our of-counsel and co-counsel model, we may share Personal Information with:

Client trial teams and incumbent counsel with whom we are engaged on a matter, and other organizations involved in matters for our clients, including local counsel, experts, consultants, accountants, e-discovery and data room providers, and court reporters;
Service providers and vendors who support our operations, including cloud hosting, AI infrastructure, IT, communications, docket monitoring, legal research, translation, and document services, under contractual confidentiality and data protection obligations;
Professional advisers, including our own counsel, auditors, and insurers;
Courts, tribunals, regulators, and government or law enforcement agencies, where required or permitted by law or in connection with proceedings. Where possible and lawful, we will use reasonable efforts to notify you before such disclosure; and
Successors in a business reorganization, in connection with any merger, acquisition, financing, or transfer of all or substantially all of our assets, subject to our professional obligations regarding client files.

We do not sell Personal Information, and we do not share Personal Information for cross-context behavioral advertising as those terms are defined under the CCPA.

7. Security

We protect Personal Information through technical and organizational measures designed to mitigate the risk of unauthorized access, use, disclosure, alteration, or destruction, appropriate to the sensitivity of the information and consistent with our professional obligations. These measures include encryption in transit and at rest, access controls, matter-level segregation within our systems, event monitoring, and vendor security diligence. We periodically review and update these measures.

8. International Data Transfers

AIF is headquartered in the United States. Personal Information may be transferred to, and processed in, the United States or other countries whose data protection laws differ from those of your country. Where Personal Information originating in the European Economic Area, Switzerland, or the United Kingdom is transferred to a jurisdiction not deemed adequate, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (and their UK and Swiss equivalents), or applicable derogations, such as transfers necessary for the establishment, exercise, or defense of legal claims.

9. Data Retention

We retain Personal Information for as long as necessary for the purposes described in this Privacy Policy, taking into account: (a) our professional obligations regarding the retention of client files and matter records; (b) applicable statutes of limitation and legal and regulatory retention requirements; (c) the terms of our engagement agreements; and (d) our legitimate business needs, including tax, accounting, and audit requirements. Different categories of information are retained for different periods. When we no longer have a legitimate need or legal basis to retain Personal Information, we will delete or anonymize it, or, where that is not practicable, securely store and isolate it until deletion is possible.

10. Legal Bases for Processing (EEA, UK, and Switzerland)

Where the GDPR or UK GDPR applies, we process Personal Information on one or more of the following bases: (a) performance of a contract, including an engagement to provide legal services; (b) legitimate interests, including operating and developing our practice and technology, marketing our services to business contacts, and securing our systems, where those interests are not overridden by your rights; (c) legal obligation, including client acceptance, anti-money-laundering, and regulatory requirements; (d) establishment, exercise, or defense of legal claims; and (e) consent, where required, which you may withdraw at any time without affecting prior processing.

11. Your Rights

Subject to applicable law and certain exceptions — including where information is protected by privilege, the work product doctrine, or our professional confidentiality obligations — you may have the right to: request access to and details of the Personal Information we hold about you; have inaccurate information rectified; request deletion; restrict or object to processing; request portability; withdraw consent; and complain to a supervisory authority.

California residents additionally have the right to know the categories and specific pieces of Personal Information we have collected, the sources, purposes, and categories of third parties with whom it has been shared; the right to request deletion and correction; the right to non-discrimination for exercising these rights; and the right to appeal a denied request. In the preceding twelve months, we have collected the categories of Personal Information described in Section 2, from the sources described in Section 3, for the purposes described in Section 4, and shared them as described in Section 6. We do not use or disclose sensitive Personal Information for purposes other than those permitted under the CCPA and its implementing regulations. You may designate an authorized agent to submit requests on your behalf, subject to verification.

To exercise any of these rights, contact us using the details in Section 12. We may need to verify your identity before responding, and these rights are not absolute — in particular, we may be required or permitted to retain information to comply with our professional and legal obligations or to establish, exercise, or defend legal claims.

12. Minors

Our Website and services are directed to businesses and professionals and are not directed to anyone under the age of 18. We do not knowingly collect Personal Information from minors. If you believe a minor has provided Personal Information to us, please contact us and we will endeavor to delete it.

13. Changes to This Privacy Policy

We review this Privacy Policy regularly and may update it as our services, technology, or legal obligations change. The current version will always be available on our Website, with the "last updated" date shown above. We encourage you to review it periodically; where changes are material, we will take appropriate steps to inform you.

14. How to Contact Us

Questions about this Privacy Policy, our privacy practices, or requests to exercise your rights should be directed to:

AIF Of Counsel Attn: Privacy New York, New York privacy@ofcounsel.law