Privacy

The law firm using Stubborn Fact is responsible for its own client information.Stubborn Factis the software that stores and organises it on the firm’s behalf. Stubborn Fact is operated by John Barlow.

Client names and contact details, dates of birth and addresses; cases, charges, court dates and case notes; documents uploaded, generated or scanned; tasks and calendar entries; and the account details of the people who sign in.

Documents scanned with a phone camera are stored exactly like any other document. The camera is used only when the scan button is pressed, and only the pages deliberately filed are kept — nothing is captured in the background.

In the firm’s own cloud database and file storage, hosted by Supabase, and — if the desktop app is used — on the firm’s own computers, where case folders live on the local disk and are backed up to that same cloud storage.

Each firm’s records are isolated from every other firm’s at the database level, not merely in the screens. A signed-out visitor can read nothing at all.

Only the artificial-intelligence features send a document’s contents to an outside company, and only when somebody asks for them:

• Reading and summarising documents — the document’s text or image is sent to Anthropic.
• Reading scanned pages — a scan with no selectable text is sent to Microsoft Azure to be read.
• Transcribing recordings — audio and video are sent to AssemblyAI.

None of these run on their own. A firm that never uses the AI features never sends a document to any of them.

Cases marked sensitive are never sent. Marking a case sensitive stops every one of the paths above before the document is so much as retrieved. Those documents are still stored and still backed up for the firm; they are simply never read by a machine.

If the firm subscribes a calendar app (such as Apple Calendar) to its private court-date feed, that calendar app fetches the firm’s confirmed hearings — the hearing name (which usually includes the parties’ names), date, time, court and case number — from a long, secret link. Nothing is sent until someone subscribes a calendar to that link, and it can be replaced from Settings at any time, which stops the old one working.

These outside companies run parts of Stubborn Fact. Each receives only what it needs for its job:

• Supabase — the database, file storage and sign-in. Everything the firm stores lives here.
• Vercel — hosts the website and runs its server code, so requests pass through it.
• Anthropic — the AI that reads and summarises documents, when someone asks for it.
• AssemblyAI — transcribes recordings, when someone asks for it.
• Microsoft Azure Document Intelligence — reads scanned pages that have no selectable text, when someone asks for it.
• Resend — will send sign-in, confirmation and password-reset emails. This is being set up; until it is, those emails are sent by Supabase.
• Stripe — will take subscription payments. This is coming; card details will go to Stripe and never be stored by Stubborn Fact.

Stubborn Fact contains no analytics, no advertising, no tracking pixels and no third-party scripts that watch how it is used. Client information is never sold, rented or shared for marketing. There is no profiling of anyone.

Accounts can use an email address and password, or Google. Signing in with Google opens Google’s own page in a real browser — Stubborn Fact never sees a Google password. Passwords for email accounts are stored only as one-way hashes by the authentication provider and cannot be read back by anyone, including us.

Records are kept until the firm deletes them. Deleting a client or a document first moves it to a holding area, where it is hidden everywhere and can be restored; choosing “Permanently delete” then removes its records and its stored files for good. A firm that stops using Stubborn Fact can ask for its data to be exported and removed.

If you are a client of a firm that uses Stubborn Fact, that firm holds your information and is the right place to ask about it. For anything about the software itself, email support@stubbornfact.com.