Privacy notice

Last updated 11 October 2026.

Allison is a regulatory research service provided by JNG Services LLC (“we”, “us”). This notice explains how the service handles account information, research questions, and evidence records.

Keep questions general

Do not submit client names, account numbers, personal identifiers, confidential documents, or other sensitive details. Describe a general scenario instead.

Allison applies pattern-based scrubbing to questions before research processing. That filter can recognize some identifiers, but it is not a guarantee of anonymization: names, business details, unusual identifiers, and contextual clues may remain. You are responsible for checking your question before submitting it.

What we collect

We collect your email address, your display name and your firm’s name; your password, stored only in scrambled form; the scrubbed question, the answer and its evidence record; and your credit balance and subscription status. Card details go to Stripe. Allison never sees or stores a card number.

The network address you sign in from is used to limit repeated sign-in attempts. Allison keeps it only in scrambled form and only for a short time. The companies that host Allison also process the address you connect from, as any website host does.

How information is processed

Your question reaches the Allison server to be processed. The scrubbed question and relevant source passages are sent, through OpenRouter, to an AI model provider to generate and check the research response. Every request requires a provider with zero data retention that does not use prompts for training, and Allison refuses to send a request that could not meet both conditions. Avoid sending information your firm has not authorized for this processing.

Account information supports sign-in and access control. Allison uses a session cookie to keep you signed in. This interface does not use advertising trackers or analytics scripts. We do not sell your information.

Companies that handle information for us

• Vercel hosts the website.
• DigitalOcean hosts the server, the records and their backups.
• OpenRouter and the AI model providers it routes to do the AI work, under zero data retention.
• Stripe handles payments.
• Cloudflare and Google carry mail sent to the contact address.

Saved research and access

Allison records the scrubbed question, answer, quoted sources, classifications, and associated evidence metadata. A review marker is a saved personal follow-up item. It does not send an email or automatically deliver the answer to counsel.

Users can view and export their own saved answers. Firm access controls separate research records between accounts and firms. Authorized service administrators may access records where needed to operate, support, or secure the service.

Security

Connections to Allison are encrypted, and passwords are stored only in scrambled form. No system is perfectly secure, and this notice does not promise that Allison is.

Retention and requests

We keep account and evidence records while your account is open, and afterwards as needed for our records. This notice does not promise a fixed deletion period. You can ask us to delete your information, and we will tell you what can and cannot be deleted.

For access, correction, retention, deletion, or security questions, write to support@brightsmith.app.