How Oculon handles confidentiality, in plain language

Confidentiality policies usually read like they were written to survive a dispute rather than to be read. Here is ours in the plain version: four commitments, each one testable.

The four commitments

Training: never. Client conversations are not used to train models, ours or anyone else's, and there is no setting that changes this — it isn't a toggle a firm could accidentally leave on.

Ownership: the firm's. Conversations are held on the firm's behalf and belong to it, from the first message. Oculon holds the record; it doesn't own it.

Sharing: none. Conversation data is not sold, not shared, and not used for any purpose beyond serving the firm — not for advertising, not for benchmarking, not folded into aggregate statistics we'd publish elsewhere.

Deletion: any time, on request. A firm can delete a conversation directly from its dashboard, or ask us to. Full deletion is permanent — it removes the transcript, the summary, and anything derived from either — and is completed within 30 days.

Why these four

Each commitment answers the question a firm actually has. Will my client data end up in someone else's model? Who owns the record? Who else can see it? If I want it gone, is it actually gone? If a commitment cannot be written in one sentence and checked in one afternoon, it is not a commitment.

The honest part

Iris conversations are not legal advice, and Iris says so at the start of every conversation: it is the firm's intake agent, not an attorney. Attorney-client privilege is a legal question for the firm's ethics counsel. What we can promise is what happens to the data, and the four commitments above are the whole of that promise.

The full page, with the named third parties and how deletion works day by day, lives on the confidentiality page.