Privacy Policy

This Privacy Policy applies to our websites, marketing pages, account flows, attorney application, case-record workflows, communications capture features, AI features, support communications, VA API-connected workflows where enabled, and related services (collectively, the "Services").

Pete serves attorneys and firms. Veterans may provide information through case-bound document or communication flows that a participating firm shares with them. In those contexts, the firm may also control how information is collected and used for representation, conflict checks, and case work.

We may collect the following categories of information:

• account and contact information, such as name, email address, phone number, firm, role, title, and login details;
• professional information, such as VA accreditation, bar information, firm affiliation, permissions, and team membership;
• veteran and case information, such as service history, conditions, claim history, rating information, deadlines, forms, documents, C-files, medical records, STRs, C&P exams, correspondence, and notes;
• VA API-derived information where a firm enables an approved VA integration, such as claim, appeal, power-of-attorney, form, submission, status, and related case-source metadata;
• communications information, such as emails, SMS messages, phone call metadata, call recordings, video meeting metadata, transcripts, and case communications;
• files and document content uploaded to or generated by the Services;
• billing and commercial information, such as subscription details, invoices, payment status, and firm billing contacts;
• integration information from connected email, calendar, phone, storage, or authentication providers; and
• technical and usage information, such as IP address, device information, browser, pages viewed, referring pages, logs, cookie identifiers, and product usage events.

We collect information directly from users, firms, veterans who use firm-shared flows, connected integrations, service providers, public sources, and automated technologies such as cookies, logs, and analytics events.

If you connect third-party systems to Pete, such as email, calendar, phone, SMS, video, storage, or authentication providers, we process information from those systems as needed to provide the connected functionality.

We use information to:

• provide, operate, secure, and maintain the Services;
• create and maintain case records, case workups, deadlines, communications logs, and case answers;
• authenticate users, manage firm membership, and enforce permissions;
• support phone, SMS, email, meeting, and case-record workflows;
• request, retrieve, submit, sync, or monitor VA-connected case information where an authorized firm user enables an approved integration;
• generate AI-assisted outputs requested by authorized users;
• provide support, respond to inquiries, and communicate about the Services;
• process payments, manage subscriptions, and administer trials or demos;
• monitor reliability, prevent abuse, detect security events, and debug issues;
• improve the Services using aggregated or de-identified information; and
• comply with legal, regulatory, and contractual duties.

AI-assisted features help organize case materials, support attorney review, summarize approved communications, and answer questions from available case materials.

Customer case data, veteran records, and uploaded files are not used to train third-party large language models. Where AI providers process information, provider settings and contractual controls are used to prevent retention or training beyond what is needed to provide the Services.

AI output may be incomplete or inaccurate. Attorneys and authorized firm users should verify output and citations before relying on them in a legal matter.

We may disclose information:

• to the firm, attorneys, representatives, staff, and other authorized users connected to the relevant case or firm;
• to veterans or prospective clients through firm-shared flows when needed to provide document, communication, or case-bound features;
• to service providers that support hosting, storage, authentication, security, analytics, communications, email, calendar, billing, support, AI processing, and operations;
• to third-party integrations you or your firm connect to the Services;
• to comply with law, court orders, subpoenas, professional obligations, government requests, or regulatory requirements;
• to protect the rights, privacy, safety, security, or property of Pete, customers, users, veterans, or others; and
• with appropriate protections when required by law.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising as those terms are used in California privacy law.

Veteran data, VA API-derived data, case records, and Customer Data are not sold, licensed, brokered, or monetized. We use that information only to provide, secure, support, maintain, and improve the Services for authorized customers and their cases, or as required by law.

Sensitive legal and veteran records may include protected health information, VA records, military service information, and information subject to heightened confidentiality obligations. VA API-derived records and VA-connected submission or status data are restricted case data.

Firms remain responsible for determining their own legal, ethical, HIPAA, 38 U.S.C. 5701, 38 U.S.C. 7332, bar-rule, client-consent, and record-retention obligations. Where required, we may enter into a business associate agreement or data processing addendum with a customer.

We use cookies and similar technologies to operate the site, remember preferences, understand usage, improve performance, and protect the Services. You can manage non-essential cookies through the cookie preferences control on our site.

Some browsers offer "Do Not Track" or similar signals. Because there is not a uniform standard for these signals, we do not currently respond to them. If a required standard applies, we will update this Privacy Policy.

We retain information for as long as needed to provide the Services, comply with legal and contractual obligations, resolve disputes, maintain security, enforce agreements, and support legitimate business purposes. VA API-derived case data follows the same case-record retention posture as other restricted case material unless a customer agreement, legal hold, applicable law, or approved deletion workflow requires a different period.

Retention periods may vary depending on the type of data, firm settings, an Order Form, a data processing addendum, legal requirements, case status, backup cycles, and whether deletion would interfere with security, auditability, or legal obligations.

We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include encryption, access controls, tenant isolation, audit logging, vendor review, least-privilege operations, private document storage, short-lived authorized access, and server-only handling of integration credentials.

No method of transmission or storage is completely secure. If you believe your account or information has been compromised, contact us promptly at security@pete.vet.

Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain personal information, or to opt out of certain processing. These rights are not absolute and may be limited by law, firm obligations, case records, security needs, or contractual duties.

To exercise privacy rights, email privacy@pete.vet. We may need to verify your identity and, for requests about firm-controlled case information, coordinate with the relevant firm.

Certain U.S. state privacy laws provide residents with specific rights. In the past twelve months, we may have collected identifiers, professional information, commercial information, internet or network activity, communications, sensitive information, and inferences derived from use of the Services.

We collect this information from the sources described above and use or disclose it for the purposes described in this Privacy Policy. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

California residents may also request information about certain disclosures of personal information for direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Pete, contact us so we can take appropriate steps.

The Services are operated from the United States. If you access the Services from outside the United States, you understand that information may be processed in the United States and other locations where our service providers operate.

We may update this Privacy Policy from time to time. The updated version will be indicated by the updated date above. Material changes may be communicated by posting notice, sending email, or another reasonable method.

Questions about privacy can be sent to privacy@pete.vet.