Privacy Policy
Two groups share this page: the firms that use Iris, and the people who talk to it. Both deserve the plain version.
Last updated · June 30, 2026
What this covers
Oculon Systems builds Iris, an intake agent embedded on law firm websites. This policy covers oculonsystems.com, the Iris widget as it runs on firm sites, and the firm dashboard.
The people involved are the firms that use Iris — our customers — and their prospective clients, who talk to Iris. Conversations belong to the firms. This page describes how we hold them on the firms' behalf, and what we do with the small amount that's ours.
What we collect
Conversation transcripts — what prospective clients tell Iris, including the contact details and case facts they volunteer. Collected on the firm's behalf; encrypted and siloed to that firm.
Firm account information — names, email addresses, roles, and the billing relationship, which runs through Lemon Squeezy.
Usage data — conversation volume, timestamps, and feature use. Enough to run the service and answer when something breaks; not enough to profile anyone.
What we never collect
Payment information. Billing is handled by Lemon Squeezy; card details go there and stop there, and never intersect with conversation data.
Passwords — nothing in an intake conversation calls for one. And we run no advertising cookies, no cross-site trackers, and no data brokers. The full cookie detail is on the cookies page.
How it's used
To run the service: conducting conversations, delivering summaries and alerts, operating the dashboard, sending the follow-ups firms configure. To keep the records firms ask us to keep, for as long as they ask. To secure, maintain, and repair the system.
Not on the list: training models on client conversations, selling data, or sharing it. There is no setting that changes this, because it isn't a setting — it's a commitment. The details are on the confidentiality page.
Where it lives
US-based infrastructure. Everything is encrypted in transit (TLS 1.3) and at rest (AES-256), with each firm's data isolated from every other firm's.
Third parties
A short list, by name: Postmark (email delivery), Amazon Web Services (hosting, US regions), Amazon RDS (database), and Lemon Squeezy (billing — payment data only, no access to conversations).
Each is scoped to its job. If the list ever changes, it changes on the data-handling page first.
How long we keep it
Conversation transcripts default to 90 days, then are removed automatically; the window is configurable per firm. Summaries and lead records are retained until the firm requests deletion. Backups rotate on a 30-day cycle.
Deletion requests complete within 30 days and are permanent. The full timeline is on the retention page.
Your rights
Firms: access, export, correction, and deletion of their data — at any time, from the dashboard or by request.
Prospective clients: the conversation is the firm's record, so the request routes through the firm. Anyone who prefers can also write to us directly at privacy@oculonsystems.com, and we'll point them to the right door.
Cookies
Three kinds: session cookies that keep you signed in, analytics that tell us the site works, and preferences that remember your choices. No advertising cookies, no cross-site trackers.
What each one does, and how to opt out, is on the cookies page.
Changes to this policy
The current version always lives on this page, with its date above. Material changes are emailed to firm admins and summarized here. Continued use of the service after a change means acceptance of the updated policy.
Contact
Privacy questions, requests, and corrections: privacy@oculonsystems.com. A person reads every message.
The operational detail.
This policy is the summary. The trust pages are the working documents — data handling, retention, and confidentiality, with the commitments in full. Questions go to privacy@oculonsystems.com.