Elle Privacy Policy

Effective date: October 9, 2026

This Privacy Policy explains how RMJ Labs, Inc. ("RMJ Labs," "we," "us") collects, uses, shares, and protects personal information through Elle, including our website, apps, and text messaging service (the "Services"). It also explains the choices and rights you have.

The short version:

• What you tell Elle is treated as confidential. Once you accept the Firm's Client Terms, it is client information of a law firm.
• We don't sell your information, and we never use your conversations or documents for advertising.
• We don't use your conversations or documents to train AI models, and we don't let our AI providers do so.
• We share your information with another law firm only with your consent.

1. Who is responsible for your information

Elle is operated by RMJ Labs. Legal services through Elle are provided by an independent law firm (the "Firm"), as described in our Terms of Service.

• Client communications. After you accept the Firm's Client Terms, your messages, documents, recordings, and matter information are the Firm's confidential client information. The Firm decides how they're used, under its duties of confidentiality and attorney-client privilege. RMJ Labs processes them only on the Firm's behalf to operate the Services.
• Everything else. RMJ Labs is responsible for information about website visits, accounts, and how the Services are used.

Where the Firm's professional obligations require more protection than this policy describes, those obligations control.

2. Information we collect

Information you give us

• Contact and account information: name, phone number, email, mailing address, state of residence, and login details.
• Your messages and matter information: questions, facts about your situation, and the messages you exchange with Elle and attorneys.
• Documents, photos, and recordings: leases, contracts, letters, notices, photos, voice memos, and anything else you upload, forward, or copy us on.
• Information about other people: names and details of others involved in your matter, such as a landlord, employer, family member, or opposing party. We use these names to check for conflicts of interest. Please share other people's information only as needed for your matter.
• Agreements and payments: records of terms you accept, agreements you sign, and payment details. Card numbers are handled by our payment processor; we don't store full card numbers.
• Communications with us: support requests, call recordings and transcripts, and feedback.
• Job applications: if you apply to work with us, your resume and related information.

Information collected automatically

• Device and connection information: IP address, device type, operating system, browser, mobile carrier, and general location (city or state) based on IP address.
• Usage information: pages and screens viewed, links clicked, time spent, referring sites, and similar activity on our website and apps, collected with cookies and similar technologies (Section 7).

Information from others

• The Firm and referred lawyers, about matters you've asked them to handle.
• People involved in your matter, such as the other side or their lawyer, when the Firm communicates with them for you.
• Service providers, such as payment processors and e-signature providers.
• Public sources, such as court records or business registries, when relevant to your matter or a conflicts check.

3. Sensitive information

Depending on your situation, information you share may include sensitive information, such as health and injury information, financial account or income details, government ID numbers, immigration status, criminal history, sexual orientation, or information about children. We collect and use sensitive information only to provide the Services you request, check for conflicts, keep the Services secure, and meet legal obligations. We don't use it to profile you or for advertising. Please share sensitive information only when it's needed for your question or matter.

4. How Elle uses artificial intelligence

Elle uses AI models, including models provided by third-party AI companies, to read your messages and documents, transcribe voice memos and calls, and draft responses. Our contracts with AI providers prohibit them from using your information to train their models and limit how long they may keep it. Elle doesn't make decisions with legal effect about you on its own; attorneys make those decisions. We transcribe voice memos and calls to understand them, but we don't create voiceprints or any other biometric identifiers.

5. How we use information

• To provide the Services: answer your questions, review your documents, connect you with attorneys, schedule calls, carry out work you've agreed to, and process payments.
• To check for conflicts of interest, as lawyers are required to do.
• To communicate with you: texts, calls, and emails about your questions, matters, and account, including automated messages.
• To keep the Services safe: verify identity, prevent fraud and misuse, and protect the security of the Services and our users.
• To improve the Services: using usage information and de-identified information. We don't use your conversations or documents to train AI models, and if we use de-identified data, we won't try to re-identify it.
• To meet legal and professional obligations: keep records, respond to lawful requests, and enforce our Terms.
• To consider job applications, if you apply.
• Marketing: we may send you updates about Elle if you agree, and you can opt out anytime. We never use your conversations or documents for marketing.

6. How we share information

We don't sell your personal information or share it for cross-context behavioral advertising, and we never share your conversations or documents for advertising. We share information only as follows:

• With the Firm, to provide legal services you request.
• With service providers that help us operate the Services, such as cloud hosting, AI model providers, text messaging and calling, transcription, e-signature, scheduling, payments, analytics, and customer support. They may use information only to perform services for us and must protect it.
• With other lawyers, only with your consent, such as when you accept a referral.
• With people involved in your matter, when the Firm communicates for you as part of work you've agreed to.
• For legal reasons: to comply with law, a court order, or legal process, or to protect the rights, safety, or property of you, others, or us. Where client communications are involved, the Firm will assert privilege and confidentiality where available and, where permitted, tell you about the request.
• In a business transfer, such as a merger, acquisition, financing, or sale of assets, subject to this policy and to the Firm's professional obligations, which require your consent before your client file goes to another lawyer.
• With professional advisors, such as our lawyers, accountants, and insurers, under confidentiality obligations.
• With your consent or at your direction.

Mobile information. We do not share or sell mobile phone numbers, text messaging opt-in data, or text messaging consent with third parties or affiliates for their marketing or promotional purposes. We share mobile information only with service providers that help us deliver text messages and support, and only for that purpose.

7. Cookies, analytics, and advertising

Our website and apps use cookies, pixels, and similar technologies to keep you signed in, remember preferences, keep the Services secure, and understand how people use them. We may use analytics providers, such as Google Analytics, and may use advertising or measurement tools on our public website pages to understand which marketing works. These tools are never used inside Elle conversations or on pages that display your matter information.

You can block or delete cookies in your browser settings, though some features may not work without them. You can opt out of Google Analytics with Google's browser add-on. Where we use advertising cookies, you can opt out through our cookie settings or with a Global Privacy Control signal, which we honor. Our website does not respond to "Do Not Track" signals.

8. How long we keep information

We keep client files for at least seven years after a matter closes, or longer if required by law, professional rules, or a legal hold, and then delete them securely. If you use Elle only for general information, we keep your conversations for as long as your account is active and for up to [two] years after your last activity, unless you ask us to delete them sooner and no obligation requires us to keep them. We keep other information only as long as needed for the purposes in this policy.

9. Security

We protect information with encryption in transit and at rest, access limited to people who need it, multi-factor authentication for staff, logging of access to client files, and security reviews of our service providers. No system is perfectly secure, and we can't guarantee absolute security. Protect your phone and account, and tell us right away at support@useandco.com if you think they've been compromised. If a breach affects your information, we'll notify you as required by law.

10. Your privacy rights

You can ask us to:

• Access the personal information we have about you, and receive a copy in a portable format;
• Correct inaccurate information;
• Delete your information;
• Opt out of any sale, sharing for targeted advertising, or profiling (we don't do these with your conversations or documents, but you can opt out of website advertising cookies); and
• Withdraw consent where we rely on it.

We offer these rights to all users, whatever state you live in. Some state laws give you these rights by law, and you can also appeal our decision (below). We won't discriminate against you for using your rights.

Limits. We may need to keep some information to meet legal and professional obligations. For example, the Firm must keep client files and conflicts records, and can't delete them on request while those obligations apply. If we can't fully honor a request, we'll explain why.

How to make a request. Email support@useandco.com or text Elle "privacy request." We'll verify your identity, usually by confirming your phone number or email, before acting. You may use an authorized agent; we'll ask for proof of their authority and may verify your identity directly. We'll respond within 45 days and tell you if we need more time.

Appeals. If we deny your request, you can appeal by emailing support@useandco.com with "Appeal" in the subject line. We'll respond within 60 days. If you're not satisfied, you can contact your state attorney general.

11. Additional notice for California residents

In the past 12 months, we have collected the categories of personal information below for the purposes in Section 5, from the sources in Section 2, and disclosed them for business purposes as described in Section 6. We have not sold personal information or shared it for cross-context behavioral advertising, except that website identifiers and usage information may be shared with advertising providers through cookies on our public website pages. We don't knowingly sell or share the information of anyone under 18.

We use sensitive personal information only for purposes permitted by California law, such as providing the Services you request, so we don't offer a right to limit its use. California residents may also ask, once a year, for information about any disclosures of personal information to third parties for their direct marketing purposes. We don't make such disclosures.

12. Consumer health data notice (Washington, Nevada, and similar laws)

This section applies to "consumer health data" under Washington's My Health My Data Act, Nevada's consumer health data law, and similar laws: information that identifies your past, present, or future physical or mental health, such as injuries, conditions, symptoms, treatment, or medications.

• What we collect: health information you choose to share about your matter, such as injuries from an accident, medical records, treatment, or disability information.
• Sources: you, the Firm, and people or providers you direct to send us information, such as your doctors.
• Why: only to provide the Services you request, such as answering your questions, evaluating your matter, and providing legal services, and as otherwise allowed by law. We collect it only with your consent, which you give by choosing to share it.
• Sharing: with the Firm and service providers that process it for us; with another law firm only with your separate written consent; and as required by law. We never sell consumer health data and never use it for advertising.
• Your rights: to confirm whether we collect or share your consumer health data, access it and get a list of third parties it was shared with, delete it, and withdraw consent. Make requests and appeals as described in Section 10. If an appeal is denied, you may contact the Washington or Nevada Attorney General.

13. Children

The Services are for adults 18 and older. We don't knowingly collect personal information from children under 18 except as provided by a parent or guardian about their own child's legal matter. If you believe a child has given us information, contact support@useandco.com and we'll delete it.

14. Other websites

The Services may link to websites and services we don't control. This policy doesn't apply to them; please review their privacy policies.

15. United States only

The Services are intended for use in the United States, and your information is stored and processed in the United States.

16. Changes to this policy

We may update this policy. We'll post the updated version with a new effective date and, for material changes, notify you by text, email, or in the Services before they take effect.

17. Contact us

RMJ Labs, Inc.
Email: support@useandco.com