Privacy & Security
How we protect your data and handle your personal information.
Last updated: July 9, 2026
Who Operates Autonomy
Autonomy LLC, a Michigan limited liability company, operates Autonomy and is responsible for the personal information described on this page. If you have a question about your privacy or want to reach us about your data, email help@autonomy.legal or call (616) 344-4347.
Data Encryption
All data is encrypted in transit via HTTPS/TLS. Data at rest is encrypted by our infrastructure providers (Neon PostgreSQL for case data, AWS S3 for uploaded documents). No unencrypted client data is stored anywhere.
User Isolation
Every case, document, and scenario is scoped to the authenticated user who created it. Our API enforces user-level access control on every request. There is no cross-user access to your data.
Document Storage
Uploaded documents (W-2s, tax returns, financial statements) are stored in AWS S3 with server-side encryption. Downloads use presigned URLs that expire after one hour. Documents are uploaded through authenticated server-side routes only. No direct client-to-S3 access.
Authentication
We use passwordless magic link authentication. No passwords are stored or transmitted. When you sign in, a one-time link is sent to your email. Sessions are managed by industry-standard NextAuth with secure HTTP-only cookies.
Local Data
Calculator form data is auto-saved to your browser's local storage for convenience. When you sign out, all locally stored form data is automatically cleared. This prevents data from persisting on shared computers.
Data Deletion
You can delete individual cases and documents at any time from the Cases page. Deleted data is permanently removed from our database and storage. To delete your entire account, contact us and we will remove all associated data.
Data Sharing and Service Providers
We do not sell your data, and we do not share it with third parties for their own purposes. To provide the service, your data is processed by service providers acting on our behalf, including the AI provider that extracts and analyzes your documents. These providers are contractually prohibited from using your data to train AI models.
How Long We Keep Your Data
We keep your case data for as long as your account stays active so you can return to your work. You can delete individual cases and documents at any time from the Cases page, and you can ask us to delete your entire account. When you delete data, we remove it permanently from our database and document storage. We keep waitlist emails only until Autonomy launches in your state, then we delete them.
Your Rights Over Your Data
You control your personal information. You can view your case information and download your uploaded documents at any time from the Cases page. You can correct information by updating it directly or by contacting us. You can delete individual cases and documents yourself, and you can ask us to delete your entire account and everything associated with it.
Children's Privacy
Autonomy serves adults handling their own Michigan divorce. We do not direct the service to children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, please contact us and we will delete it.
State Launch Waitlist
If you ask us to notify you when Autonomy launches in your state, we keep your email address and your state until that launch, at which point we send you an email and delete the record. We do not share or sell waitlist addresses.
Questions?
If you have questions about our security practices or data handling, please contact us.