← Back to Search

Tenetowl Privacy Policy

Last updated: October 13, 2026

1. Introduction

Tenetowl (“Tenetowl,” “we,” “our,” or “us”) is a legal research technology service operated by Deepblue Research. We provide AI-assisted legal research, case-law retrieval, legal proposition research, judgment analysis, and related functionality through our website, https://tenetowl.com, and supported integrations, including the Model Context Protocol (MCP).

This Privacy Policy explains how we collect, receive, use, store, disclose, and handle information when you use Tenetowl, including when you access Tenetowl through ChatGPT or another supported third-party platform.

We aim to minimize the information we process and protect the confidentiality of legal research. However, using Tenetowl does not, by itself, establish an attorney-client relationship or guarantee attorney-client privilege or any other legal protection against disclosure.

2. Information We Collect and Process

The information processed depends on the features you use, the tools you invoke, and the information necessary to fulfil your request.

2.1 Account and authentication information

When you authenticate or access Tenetowl through a supported integration, we may process:

  • Name and email address, where provided.
  • Account and authentication-provider identifiers.
  • Authentication and authorization status.
  • Access permissions and account-related settings.
  • Session identifiers and authentication-related metadata.
  • Security records associated with account access.

Tenetowl uses Clerk for OAuth-based authentication in its MCP integration. Clerk may process information necessary to authenticate users and manage access, subject to its applicable privacy policy and terms.

We do not request third-party account passwords through our legal research tools. Authentication credentials and access tokens are handled according to the relevant authentication and integration mechanisms.

2.2 Legal research queries and tool inputs

When you submit a request, use a search function, or invoke an MCP tool, we may process:

  • Legal questions, search queries, and legal propositions.
  • Keywords, case names, citations, and document identifiers.
  • Jurisdiction, court, date range, and other search filters.
  • Instructions and relevant contextual information supplied for the requested operation.
  • Documents, excerpts, or other content submitted through supported features.
  • Tool arguments and parameters required to execute a request.

The information processed by an MCP tool depends on its input schema and the operation requested. We aim to limit processing to information reasonably necessary to fulfil that request.

Please do not submit confidential client information, personal data, or sensitive documents unless you are authorized to do so and have assessed the confidentiality and data-protection implications of using Tenetowl and any connected third-party platform.

2.3 Research results and tool outputs

Tenetowl may retrieve, generate, process, or return:

  • Case names, court names, case numbers, and judgment dates.
  • Citations, legal provisions, and references to judgments.
  • Case summaries, relevant passages, and legal propositions.
  • Retrieved document excerpts and research findings.
  • Analysis of authorities for or against a legal proposition.
  • Search status, error messages, and other information needed to communicate a result.

Judgments and legal documents may contain personal information about litigants, witnesses, and other individuals. Such information may be processed or returned when relevant to a user's legal research request.

When Tenetowl is accessed through ChatGPT or another integration, information returned by a tool may be transmitted to and displayed by that platform.

We aim to limit tool outputs to information relevant to the requested task and avoid returning unnecessary personal identifiers, authentication information, internal account identifiers, or diagnostic data.

2.4 Technical information, usage data, and logs

Tenetowl maintains request logs and may process technical and operational information, including:

  • Request timestamps and processing status.
  • Tool execution results and error information.
  • Usage counts and request metadata.
  • Authentication and authorization events.
  • Security and diagnostic records.
  • Performance information, such as processing time and service errors.
  • IP addresses, browser or device information, and other technical metadata where collected by the relevant infrastructure or provider.

We use this information for service operation, security, troubleshooting, usage administration, and reliability monitoring.

We aim to avoid recording the full contents of confidential legal queries or documents in diagnostic logs unless necessary for a disclosed purpose. The precise information recorded depends on the deployed logging configuration.

2.5 Information from third-party services and public sources

Tenetowl may receive information from the platform through which you access the service, authentication providers, and other infrastructure providers necessary to operate the service.

We may retrieve publicly available judgments, citations, and other legal materials to fulfil research requests.

We do not intentionally collect additional personal information from third-party services beyond what is reasonably necessary for requested functionality, authentication, security, and service administration.

3. How We Use Information

We process information for the following purposes:

  1. Providing legal research services: Searching for judgments, retrieving relevant authorities, analysing legal materials, and returning research results.
  2. Operating MCP integrations: Receiving authorized requests, validating tool inputs, executing requested operations, and returning results to connected platforms.
  3. Authentication and access control: Verifying access permissions and protecting accounts and services.
  4. Usage administration: Counting requests, managing service limits, and administering applicable subscriptions or billing arrangements.
  5. Security and abuse prevention: Detecting unauthorized access, investigating suspicious activity, and protecting infrastructure.
  6. Troubleshooting and reliability: Diagnosing errors, monitoring performance, and resolving technical issues.
  7. Legal compliance: Complying with applicable laws, valid legal requests, and other lawful obligations.
  8. Service maintenance: Maintaining and improving the reliability and functionality of Tenetowl using methods consistent with this Policy.

We do not sell personal information or legal research queries.

We do not use customer legal queries or customer documents to train or fine-tune AI models. This commitment does not prevent processing those materials to fulfil a user's requested research operation.

4. AI Processing and Model Training

Tenetowl uses the OpenAI API to support AI-assisted legal research and related functionality.

When a request requires AI processing, we may transmit the relevant query, document excerpts, instructions, or other necessary information to OpenAI through the API. OpenAI processes such information under its applicable API terms and data-use policies.

OpenAI states that API inputs and outputs are not used to train or improve its models by default, unless the customer explicitly opts in. OpenAI's handling of API data is governed by its own policies and applicable contractual terms.

Tenetowl's commitment not to train models on customer legal queries or documents is separate from OpenAI's data-use practices. It does not guarantee immediate deletion of information from every system involved in processing a request.

When Tenetowl is accessed through ChatGPT, the platform may independently process the conversation, information submitted by the user, and results returned by Tenetowl. The platform's own privacy policy, account settings, and applicable service terms govern its handling of that information.

Users should review the privacy and data-use settings of any third-party platform they use to access Tenetowl.

5. Storage and Data Processing Providers

Tenetowl uses third-party infrastructure to operate and secure the service. Confirmed providers and their roles include:

  • Microsoft Azure: Hosting backend services through Azure Container Apps and storing relevant application data in Azure Cosmos DB.
  • Clerk: OAuth authentication and related access-management functionality for the MCP integration.
  • OpenAI: AI processing through the OpenAI API.
  • ChatGPT or another connected platform: Receiving requests from users and, where applicable, receiving and displaying results returned by Tenetowl.

Depending on the operation, information may be transmitted to one or more of these providers.

These providers process information under their applicable contractual terms, privacy policies, and service configurations. Their retention, security, and data-location practices may differ from Tenetowl's.

We do not sell customer information or disclose confidential legal research to third parties for their independent advertising or marketing purposes.

6. Data Retention and Deletion

Tenetowl stores research data in Azure Cosmos DB and maintains technical and operational logs. Our current implementation does not provide comprehensive automatic deletion of all persisted research data when a browser session ends.

We have not established a fixed retention schedule covering all categories of persisted research data and logs. Accordingly, we do not represent that all information is automatically deleted after a specified number of hours or days.

6.1 Session data

Users may clear their browser session or end a session. This action clears session data within the scope of the session-clearing functionality.

Clearing a browser session does not necessarily delete information previously transmitted to Tenetowl, persisted in Azure Cosmos DB, recorded in application logs, or processed by OpenAI, Clerk, or another third-party platform.

6.2 Persisted research data

Research queries and results may be stored in Azure Cosmos DB or other systems where required by the relevant functionality.

Persisted research records are not automatically deleted merely because a user clears a browser session. Tenetowl has not yet established a uniform retention period for all persisted research records.

Users should not assume that closing a browser, signing out, or disconnecting an integration deletes previously stored research data.

6.3 Technical and operational logs

Tenetowl maintains request logs for operational, security, usage, and troubleshooting purposes.

A fixed retention period for all log categories has not yet been formally established. Log contents and retention may vary according to the system and logging configuration.

Tenetowl aims to restrict access to logs and avoid including unnecessary confidential legal content or authentication secrets in them.

6.4 Third-party retention

Information transmitted to OpenAI, Microsoft Azure, Clerk, ChatGPT, or another connected service may be retained or processed under that provider's applicable policies, contractual terms, and configuration.

Tenetowl cannot guarantee immediate deletion from a third-party system solely because a user clears a browser session or disconnects an integration.

6.5 Deletion requests

Users may contact Tenetowl to request deletion of personal information associated with their account or use of the service.

We will assess requests in accordance with applicable law, our ability to identify the relevant records, technical capabilities, and lawful retention requirements.

Our current session-clearing functionality does not automatically delete all persisted research records or logs. We therefore cannot guarantee that a request will result in immediate deletion of every record across all systems and backups.

Where information cannot be deleted, or must be retained for a lawful purpose, we will handle the request in accordance with applicable requirements and explain any relevant limitation.

7. Security Measures

Tenetowl uses Azure-hosted infrastructure, authentication controls, and other technical and organizational safeguards intended to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

Depending on the system and configuration, these measures may include:

  • Authentication and authorization controls.
  • Restricted access to application services and databases.
  • Security monitoring and request logging.
  • Input validation and access checks for tool requests.
  • Encryption provided by the relevant hosting and service providers.
  • Incident investigation and troubleshooting procedures.

We do not claim that every system uses a particular encryption algorithm, protocol version, independent certification, or security control unless that implementation has been verified.

No system or method of electronic transmission can be guaranteed to be completely secure.

8. User Rights and Privacy Controls

Subject to applicable law and the features available to you, you may request:

  • Information about personal data Tenetowl processes about you.
  • Access to, or correction of, inaccurate personal information.
  • Deletion of personal information where legally permissible.
  • Information about the purposes and categories of data processing.
  • Withdrawal of consent where processing is based on consent.
  • Other rights available under applicable data-protection law.

Users may also sign out of Tenetowl or revoke integration access through the relevant platform's settings, where supported.

Revoking access prevents or limits future authorized access as implemented by the relevant system. It does not necessarily delete previously stored information.

To submit a privacy request, contact arjun@deepbluresearch.in. Please provide enough information for us to identify and assess your request, but do not send passwords, access tokens, or unnecessary confidential client documents.

We may need to verify your identity before acting on a request. Some requests may be limited by applicable law, legitimate security requirements, or lawful retention obligations.

9. Legal Confidentiality and Professional Responsibilities

Tenetowl is intended to support legal research. However, use of Tenetowl does not by itself establish attorney-client privilege, create an attorney-client relationship, or guarantee that submitted information is protected against disclosure.

Lawyers, law firms, and other users are responsible for assessing professional confidentiality obligations, client consent requirements, applicable court rules, and relevant data-protection laws before submitting client information to Tenetowl or a connected third-party platform.

Users should consider whether a particular legal query or document can appropriately be processed by an external AI provider and whether the intended use is authorized.

10. International Data Transfers

Tenetowl's use of third-party cloud, AI, authentication, and integration services may involve processing or storage in countries other than the country where a user resides.

The actual processing locations depend on the relevant provider, service configuration, and contractual arrangements. We do not represent that all information is stored exclusively in India unless that restriction has been verified for every relevant system.

Where applicable law requires safeguards for international transfers, Tenetowl will address those requirements as applicable to its role and processing arrangements.

11. Children's Privacy

Tenetowl is intended for legal research and related professional or general use. It is not specifically directed at children.

We do not knowingly collect personal information from children in violation of applicable law. If you believe that personal information has been collected unlawfully from a child, contact us using the details in Section 12.

12. Contact Information

For privacy questions, data-access requests, correction requests, deletion requests, or complaints, contact:

Service: Tenetowl

Website: https://tenetowl.com

Operating entity: Deepblue Research

Privacy contact email: arjun@deepbluresearch.in

Business address: Not provided in this Policy.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our technology, integrations, data practices, infrastructure, or legal obligations.

The current version will be published at https://tenetowl.com with its latest revision date. Where required by applicable law, we will provide appropriate notice or obtain consent before implementing material changes.

14. Applicable Law and Data Protection

Tenetowl intends to handle personal information in accordance with applicable data-protection and privacy laws, including relevant Indian data-protection requirements where applicable.

The rights available to an individual, the lawful basis for processing, applicable notice and consent requirements, and any obligations relating to data security, retention, deletion, or grievance handling depend on the applicable law and the circumstances of the processing.

Nothing in this Policy is intended to exclude or limit any right that cannot lawfully be excluded or limited.