How we handle your clients' records

Please read this before sending any files.

1. What we receive. Only the files you choose to send for a specific matter. We never ask for logins to your case-management system or email.
2. How to send files. Use your firm's own secure file-sharing link (ShareFile, Dropbox, Box, Clio or similar), or our secure upload link, which doesn't need an account: Starry Night secure record upload. Both are encrypted in transit and at rest. Please don't send medical records as email attachments.
3. Who works on them. Only Starry Night's founder, Nick. We use no subcontractors or offshore staff. Two service providers are involved: Dropbox (file transfer and storage) and Anthropic (the AI model provider, used through its business API). Anthropic's commercial terms prohibit it from training models on our content. Its API deletes inputs and outputs within 30 days by default, keeping them longer only for safety reviews, usage-policy enforcement, or where required by law.
4. Storage and deletion. Your files are kept only while we work on them. We permanently delete your files and our working copies within 7 days of delivery, or sooner if you ask, and we confirm the deletion to you in writing.
5. What you get. A chronology in which every entry cites its source page, so your team can check it quickly. It's a drafting aid: your attorney reviews and owns the final work product.
6. Agreements. If your firm uses a confidentiality agreement, send it over and we'll review it before receiving any files. We can't sign a HIPAA business associate agreement at this time. If your matter requires one, please tell us before sending files.
7. If something goes wrong. If we ever suspect your files were exposed, we'll tell you within 24 hours of finding out.

Questions? Email nick@starrynightlegal.com.