Last updated: August 7, 2026
1. Who we are
This Privacy Policy explains how Vorialis LLC ("Vorialis," "we," "us," or "our"), a Pennsylvania limited liability company, collects, uses, and shares information through the Contract Assistant platform ("Service"), which your union has made available to you.
2. Information we collect
The Service does not require you to create an account or provide a password. It does collect the following:
When you ask a question
- The text of your question and the AI-generated answer;
- The hospital, local, or classification you selected;
- A session identifier (not tied to your name or any account) used to group your messages into one conversation;
- An automatically-assigned category label (for example, "Overtime & Pay") used to help your union see common question topics.
When you submit a grievance inquiry
- Your name and phone number, if you choose to provide them;
- Your unit, the date of occurrence, and the name of any involved party you provide;
- Your original question and the AI's answer, carried over from the conversation.
Technical information
Like most web services, our hosting and security providers automatically log basic technical information (such as IP address and request timestamps) for security and rate-limiting purposes — for example, to prevent repeated failed login attempts on the administrator dashboard.
3. How we use this information
- To generate answers to your questions using an AI language model;
- To route grievance inquiries to your union's designated representative(s);
- To give your union's leadership visibility into member questions and grievance activity through an administrator dashboard;
- To maintain the security of the Service (for example, rate-limiting repeated login attempts).
4. Who can see your information
| Who | What they can see |
|---|---|
| Your union's administrators | Questions, categories, and grievance submissions from members of their own union only. Administrators from one union cannot see another union's data — this is enforced at the database level. |
| Your union's grievance chair | The details you provide when you submit a grievance inquiry, sent by email. |
| Vorialis LLC | Access to the underlying database for maintenance and support purposes. |
We do not sell your information, and we do not share it with advertisers.
5. Third-party service providers
Operating the Service requires sending data to a small number of infrastructure providers, solely to perform the functions described below:
| Provider | Purpose |
|---|---|
| Google (Gemini API) | Processes your questions and relevant contract text to generate an answer. |
| Supabase | Hosts the database where questions, grievances, and contract documents are stored. |
| Resend | Delivers the email notification sent to your union's grievance chair when you submit a grievance inquiry. |
| Cloudflare | Hosts and delivers the Service itself. |
6. Data retention
We want to be direct about this: at this time, the Service does not automatically delete questions or grievance records after a set period. Information is retained until a union administrator manually deletes it through the administrator dashboard, or until you contact us directly to request deletion (see Section 8). We are continuing to develop more automated retention controls, and this policy will be updated if that changes.
7. Data security
We use reasonable technical measures to protect your information, including:
- Database-level isolation ensuring one union's data cannot be accessed through another union's account;
- Encrypted connections (HTTPS) between your device and the Service;
- Cryptographically signed, time-limited session tokens for administrator access;
- Rate-limiting on the administrator login to slow down repeated password attempts.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
8. Your choices
You can contact us at [email protected] to ask what information we have associated with a conversation, or to request that specific questions or grievance records be deleted. Because the Service does not use member accounts, we may ask for details (such as the approximate date and content of your question) to help locate the right records.
9. Children's privacy
The Service is intended for use by adult union members and is not directed at children under 13.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above.
11. Contact
Questions about this Privacy Policy can be sent to [email protected].
← Back