1. What this page covers.
This overview explains how Let’s-ParaConnect (“LPC”) handles private Matter documents, account access, sharing, and related support information. A Matter is the project or assignment an attorney and paralegal work on through LPC. Read this page together with the Terms of Service and Privacy Policy; it explains those protections without replacing either document.
Security review in progress.
LPC has implemented security controls, but verification of the production environment—the live service users access—is not yet complete. Storage permissions, enforcement of file-security checks, recovery procedures, and independent security testing still require production evidence. The controls described here are not an independent security certification or a guarantee that every protection has been verified on the live service. Request current security information before deciding whether LPC meets your firm’s requirements for confidential work. No system can guarantee absolute security.
2. Who can access your documents?
Private Matter files are separate from profile information and Matter postings used to find or apply for work. File access is checked against the signed-in user’s role, relationship to the Matter, and assignment. Browsing a posting, applying, or receiving an invitation does not give someone general access to the full Matter workspace. A selected applicant may receive a confidentiality document through the pre-engagement process before hiring.
Access is not limited to the attorney and paralegal in every circumstance. LPC administrators can access Matter archives. Authorized support, security, dispute handling, and Platform operations may require access to relevant information, and service providers process information needed to operate the service. Information may also be disclosed in the circumstances described in Section 4 of the Privacy Policy, including applicable legal requirements.
When someone withdraws, is removed, or an engagement ends, future access follows the Matter’s status and access rules. Ending participation does not erase previously shared information or automatically remove every retained record. Temporary links already issued may continue to work until they expire, and LPC cannot recall downloaded copies.
3. What information can other people see?
An eligible Paralegal profile may be visible to public visitors, including its approved photograph and published professional information. Hiding a profile in Account Settings removes it from discovery, but does not remove it from existing applications, engagements, authorized records, or copies already obtained. The public directory does not provide access to private Matter documents, payment credentials, or admission documents.
Write Matter postings, profile biographies, and application information for the audience that can see them. Keep unnecessary client names, identifying details, and confidential facts out of discovery information. Share work documents through the appropriate authorized Matter workspace rather than placing them in a public profile or sending a temporary file link to someone outside the Matter.
4. What confidentiality obligations apply?
The Terms of Service, Section 2.9, require users to protect nonpublic information they receive through LPC, even without a separate confidentiality agreement. This includes client identities, Matter facts, documents, work product, private messages, and nonpublic personal or business information. Use it only for the authorized work, a necessary conflicts check, or a permitted support or dispute process. Do not publish it, use it in a portfolio, reuse it for another client, or supply it for model training.
Before hiring, an attorney can request a conflicts check, a confidentiality acknowledgement or agreement, or both from a selected applicant. Requested items must be submitted and approved through that workflow before hiring can proceed. The attorney determines whether the responses and agreement are adequate and obtains any required client permissions. LPC records the process; it does not certify that no conflict exists or guarantee confidentiality or privilege.
A paralegal must not delegate work or give a subcontractor or outside AI service access to Matter information without the attorney’s prior written authorization and required client permissions. At the end of an engagement, return or securely delete copies as instructed, except records that must lawfully be retained. Retained copies remain confidential. These duties continue after withdrawal, completion, or account termination. Uploading client materials does not transfer their ownership to LPC; the content and work-product provisions are in Section 14 of the Terms.
5. How are files protected?
LPC’s implemented document-sharing controls include authenticated access checks, encrypted storage, temporary download links, file-type validation, and malware quarantine. Encryption in transit protects information while it travels over an encrypted connection; encryption at rest protects stored files. LPC does not offer end-to-end encryption in which only the participants hold the decryption keys. Authorized systems and service providers must be able to process files for storage, scanning, and delivery. Live storage permissions and file-security enforcement remain part of the production review described above.
File-security messages.
Under the implemented protection, a new upload awaiting a security scan cannot be opened or downloaded. If scanning is still in progress, try again later. If a file is blocked, it did not pass the check; if scanning could not complete, the file remains unavailable rather than being treated as safe. Contact LPC if a pending or failed check prevents necessary work. Do not bypass a block by sharing the same file through another route.
Some older files have been preserved under a limited exception without a verified scan result. Their continued availability does not mean they have passed malware screening. A clean scan reduces risk but does not guarantee that a file is harmless. File validation and scanning also do not determine whether a document is accurate, legally appropriate, or authorized for disclosure.
6. How do temporary file links work?
After checking access, LPC can issue a temporary link to open or download a file. Anyone who obtains that link may be able to use it while it remains valid, so treat it as confidential. Many download links expire after about one minute; some preview or other file-access links can remain valid for up to 15 minutes. If a link expires and you still have access, open the file again from the Matter workspace to request a new one.
Signing out, revoking a session, or removing someone from a Matter does not necessarily invalidate a link already issued. Expiration stops new use of that link; it does not delete a copy already downloaded, printed, saved, or captured. Protect local copies using your firm’s storage and device safeguards. If a link was shared with the wrong person, report it promptly rather than assuming it can be recalled.
7. How can you protect your account?
In Account Settings, use the security controls available to your account: enable two-factor authentication, manage passkeys where supported, and review or revoke active sessions. Two-factor authentication adds a sign-in code to password-based access. A passkey uses your device’s supported sign-in method; LPC stores its public credential, not your fingerprint or face scan. Keep backup or recovery codes somewhere secure and separate from your password.
Use a unique password, protect the email account used for sign-in and recovery, lock your devices, and sign out on shared devices. Never share your account, password, sign-in codes, or recovery codes. If a session is unfamiliar, revoke it and review your account security. If you cannot sign in or believe someone has taken over your account, contact LPC; do not send credentials or recovery codes in your request.
8. What information goes to AI?
LPC Assistant is available only within approved, signed-in Attorney, Paralegal, and Admin accounts. It is not available on public pages, even when you are signed in; the homepage shows an illustrative example. You can use ordinary account and Matter tools without asking LPC Assistant a question. When you use the Assistant, your prompt, relevant conversation history, and authorized account or Matter context are sent to OpenAI, LPC’s AI service provider. Context can include Matter titles, participants, deadlines, tasks, file names and review status, revision notes, limited message previews, and payment or payout status. Automatically supplied context excludes document contents, passwords, payment credentials, and private file-access details. A file is not sent to the Assistant merely because it is stored in a Matter.
Text you type or paste into the Assistant is sent as written, including document text or confidential facts you choose to include. Use Matter files and messaging to exchange work documents. Submit only information you are authorized to share, and do not paste passwords, payment credentials, or unnecessary client-confidential information. LPC also uses AI-assisted tools to organize support inquiries and investigate reported problems; avoiding the chat feature does not exclude information in a support submission from that processing.
LPC disables optional storage of AI responses at OpenAI, but this is not a promise of zero retention: LPC keeps conversation and operational records, and provider retention may still apply. The Assistant disclosures and AI-assisted support disclosures explain the processing and provider terms. The Assistant does not provide legal advice or decide whether sharing preserves privilege. Verify important answers against current account and Matter records. LPC’s Terms prohibit using Matter documents, messages, or work product for external marketing or model training without explicit permission.
9. How long are records kept?
Files and downloadable archives for completed Matters are scheduled for removal six months after completion. The Matter’s retention deadline controls download availability. Closing or archiving an entry in a list does not start or extend that schedule. Download needed records before the deadline and keep your own copies under your firm’s recordkeeping requirements; do not rely on LPC as your permanent file repository.
File removal does not erase the entire Matter, its financial history, or separately retained messages, support, dispute, and audit records. Account deactivation disables access rather than automatically deleting those records. Deactivation may be unavailable while active work, a dispute, or a financial obligation remains unresolved. Deleted information may remain temporarily in backups or security logs. Backups do not guarantee that LPC can recover a particular file for you; production recovery verification remains incomplete.
Assistant conversations and associated messages become eligible for cleanup after 183 days without a new message; active requests can delay removal. Restarting a conversation resets its active context but does not immediately erase earlier records. Separately retained support and incident records follow their own retention needs. See Section 8 of the Privacy Policy for the full explanation.
10. What about service providers and payments?
LPC uses service providers for hosting, database and file storage, email, authentication, file-security checks, monitoring, payments, and AI-assisted support. They process relevant information to provide those services under applicable agreements. LPC is operated from the United States for U.S.-based users; this does not promise that every provider processes every record only in the United States. Section 4 and Section 14 of the Privacy Policy describe provider disclosures and processing.
Payment credentials and connected-account identity, bank, or tax information are submitted through Stripe’s applicable flows. LPC does not store full card numbers or bank-account credentials, but receives transaction and payout records and limited payment-method details, such as card brand and last four digits. Never include full payment details in Matter messages, Assistant prompts, or a support request.
11. How do you report a security concern?
If a file appears accessible to the wrong person, a temporary link was disclosed, a session is unfamiliar, or you suspect account compromise, use the LPC contact form with “Security concern” in the subject. Include your account email, the affected page or Matter reference, approximate time and time zone, what happened, and whether the issue is continuing. If you cannot access your account, the public contact form is still available.
Do not include passwords, recovery codes, full payment details, temporary file links, or confidential client documents in the initial report. Preserve relevant evidence without exposing more information or testing access to other users’ records. LPC will coordinate any additional information needed to investigate. Where you still control the account, revoke unfamiliar sessions and secure your password and email account. Report suspected loss or disclosure to affected participants as required by the confidentiality rules in the Terms; the attorney remains responsible for professional notifications and client instructions.
This page does not promise a fixed response or resolution time. If an immediate client deadline is affected, use your firm’s authorized contingency process while LPC investigates.
12. How do you request information or deletion?
For questions about firm-specific security requirements, use the contact form with “Security information request” in the subject and identify the information you need, such as current production verification, service-provider arrangements, or retention and recovery details. Do not assume a certification, contractual commitment, or special handling requirement applies unless LPC has confirmed it.
For access, correction, or deletion of personal information, mark the subject “Privacy request.” LPC may need to verify your identity and authority. Some records may need to be retained for legal, security, transactional, or dispute-related reasons; account deactivation and clearing browser storage do not substitute for a deletion request. Section 10 of the Privacy Policy explains the available request and appeal process.