What we collect, why, and how long we keep it.

The complete picture of data in an Iris deployment, including the part most policies bury: what never reaches us at all.

On this pageWhat callers giveWhat we storeWhat never touches usSubprocessorsRights

What a conversation produces.

Five things. Everything on this list is encrypted in transit and at rest, and belongs to the firm.

From the callerName, contact details, and the case facts they choose to share. Iris works with what a person offers. It doesn't pull anything from anywhere else.
The transcriptThe full conversation, stored encrypted (AES-256) and siloed to the firm. Defaults to a 90-day retention window.
The summaryThe structured one-page brief the attorney receives. Facts, score, urgency, recommended next step.
The scoreThe qualification result against the firm's threshold, and the reasons behind it.
TimestampsWhen the conversation started and ended, when the summary was delivered, when follow-up was sent.

Two categories of data that never enter Oculon's systems at all.

What never touches us.

Payment information

Never

Never. Billing runs through Lemon Squeezy. Card details go there and stop there. They never touch Oculon systems, and never intersect with conversation data.

Passwords

Never

Never asked, never stored. Nothing in an intake conversation calls for one, and nothing in our systems keeps one in readable form.

Everyone involved, by name.

Four companies, one list. If it ever changes, it changes here first.

PostmarkEmail delivery, attorney summaries and alerts to firm inboxes.
Amazon Web ServicesCloud hosting, US regions. Compute, storage, encrypted backups.
Amazon RDS (PostgreSQL)Database, encrypted at rest, per-firm isolation.
Lemon SqueezyBilling, payment data only. No access to conversation data, ever.

How long, and who can ask.

Transcripts default to 90 days; summaries stay until the firm asks for deletion; every window is configurable. The retention timeline, in full.

A firm can request deletion of anything, at any time, the whole record or a single conversation. A caller exercises the same right through the firm, since the conversation belongs to it. Either way, deletion is permanent and completes within 30 days.

Requests and questions go to privacy@oculonsystems.com. A person reads it.

The related pages.

The commitments behind this page, the retention detail, and the formal privacy policy. Three doors, one standard.

ConfidentialityData retentionPrivacy policy