What you tell Iris stays with your firm.

A prospective client's conversation is the firm's work product from the first message. Oculon holds it on the firm's behalf, under commitments that have no settings, no exceptions, and no fine print.

On this pageThe pledgePrivilegeThird partiesDeletion

The pledge.

Four commitments. Written the way we'd say them on a call, because that's how they operate.

TrainingNever. Client conversations are not used to train models. There is no setting that changes this.
OwnershipThe firm's. Conversations are held on the firm's behalf and belong to it, from the first message.
SharingNone. Conversation data is not sold, not shared, and not used for any purpose beyond serving the firm.
DeletionAny time, on request. Full deletion is permanent and completed within 30 days.

What this means for privilege.

Iris conversations are not legal advice, and Iris says so at the start of every conversation: it is the firm's intake agent, not an attorney. Attorney-client privilege generally does not attach to a conversation that precedes an attorney engagement.

That is the point of the design. Iris collects information rather than counsel. What those conversations are, what they aren't, and how the disclosure template works is written out on the privilege page. For your own intake flow, your ethics counsel is the right reader.

The privilege analysis, in plain terms

Third parties, by name.

Oculon does not sell or share conversation data. The companies involved in running the service are a short list, and here it is, complete.

Email deliveryPostmark delivers attorney summaries and alerts to firm inboxes.
Cloud hostingAmazon Web Services, US regions. Compute, storage, and encrypted backups.
DatabaseAmazon RDS (PostgreSQL), encrypted at rest, per-firm isolation.

If this list changes, it changes on the data-handling page first.

Gone means gone.

Any firm can request full deletion of its data at any time, the whole record, or specific conversations. Deletion is permanent, completed within 30 days of the request.

Encrypted backups age out on a 30-day rotation and are purged with them. What's gone stays gone.

No fine print.

Everything collected, why, and for how long, the operational detail behind these commitments, is documented in one place.