Privacy
The short version: your case data is yours, it stays inside your organization, it never trains the shared model, and deleting it actually deletes it.
Last updated July 17, 2026
What we collect
Account information — name, email, and organization details, used to operate your account and communicate with you.
Case data you provide — case captions, districts, case types, filing dates, amounts, procedural posture, and the outcomes you record. This is the data the product exists to analyze; it is stored scoped to your organization only.
Complaint text pasted into the single-case report builder is used to extract case characteristics and is not stored beyond building your report.
Email addresses you give us — if you request a demo, early access, or a full report by email, we use that address to respond to that request and for directly related follow-up. It is not added to any third-party marketing list.
Usage data — standard operational logs (requests, errors, timestamps) used to run and secure the service. On the public site we also count anonymous impressions and clicks on page elements (aggregate totals per copy variant, nothing tied to you) to choose better wording.
Analytics & cookies
The public site uses Plausible — privacy-friendly analytics with no cookies, no cross-site tracking, and no personal identifiers: page views are counted in aggregate and visitor IP addresses are not retained. Because nothing here tracks you, the site does not need — and does not show — a cookie consent banner.
The only things stored in your browser are functional: your sign-in key if you use the app (removed when you sign out), and a single localStorage note of which button wording you were shown, so pages read consistently between visits. That note contains no identifier, is never linked to you, and nothing from it is sent to us beyond the variant name. No advertising or tracking cookies are set, by us or by anyone else.
How it is used
Your case data is used to produce your forecasts, run your portfolio simulations, and score Tertius's accuracy against your own recorded outcomes. That scoring stays inside your organization.
It is not used to train the production model, which is trained exclusively on public federal court records. Recorded outcomes may count toward clearly-labeled future recalibration milestones; if that ever changes what a model is trained on, it will be disclosed on the model's own calibration page before the model ships.
No sale, no sharing
We do not sell your data. We do not share it with other customers — captions, parties, and amounts never cross organization boundaries. We do not use your case list for advertising. Disclosure happens only if the law compels it, and then no more than it compels.
Deletion
Deleting a portfolio is real and immediate: the cases in it and their recorded outcomes are removed at the time of deletion, not flagged for later cleanup.
Retention is configurable at the organization level. On termination of an account, org data is deleted on request.
Service providers
Tertius runs on a small number of infrastructure providers that process data only on our instructions: hosting on Fly.io in the United States, Supabase for sign-in to the application (your login email and session; if you choose "Continue with Google," Google confirms your identity to us and we receive your email address), and Plausible Analytics for the aggregate site statistics described above.
When AI-assisted extraction is enabled, text you paste (for example, complaint text in the report builder) may be processed by Anthropic to extract case characteristics. Under the API terms we use, that text is not used to train Anthropic's models. Every AI-assisted step has a non-AI fallback, and deployments can run with AI disabled entirely.
Data is stored and processed in the United States. If you access the site from elsewhere, you are sending your information to the U.S., where these practices apply.
Your rights
You can ask us to access, correct, export, or delete the personal information we hold about you, by emailing sam@usetertius.com. We honor these requests regardless of where you live — including the rights granted by the GDPR and the California Consumer Privacy Act — and we will never treat you differently for exercising them.
Since we do not sell or share personal information for advertising, there is nothing to opt out of on that front; the CCPA "do not sell or share" right is satisfied by default. Customers' case data is handled under the organization agreement: requests about it go through your organization.
Children
Tertius is a professional tool for organizations and adults. It is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
Public court records
Tertius's forecasts are derived from public federal court records published by the Federal Judicial Center. Those records are public data and are not governed by this policy; nothing in your use of Tertius adds your cases to them.
Contact and changes
Tertius is operated by Tertius Research Inc., a Delaware corporation, which is the controller of the personal information described in this policy.
Questions about this policy go to sam@usetertius.com and are handled directly — that address reaches a person, not a queue. If this policy changes materially, active customers are notified before the change takes effect, and the date at the top of this page is updated.
See also security & data handling and the terms of service.