Privacy Policy
Effective October 22, 2026
Byline is a Kimura Labs product that helps professional services firms turn memos and drafts into public-facing marketing materials and content. This policy explains what information we collect, why, who helps us handle it, and the choices you have.
In this policy, “Kimura Labs,” “we” and “us” mean Kimura Labs LLC, a Delaware limited liability company, which runs Byline. “The website” means bylinetl.com. “The app” means Byline itself, at app.bylinetl.com.
The short version
- We collect what we need to sign you in and to run Byline for your firm, and nothing for advertising.
- We don’t sell personal information or share it for advertising.
- Your firm’s content belongs to your firm. We process it only to provide Byline.
- The AI provider we use doesn’t train its models on your firm’s content.
- We look at your firm’s content only when your firm asks for help, to keep Byline secure, or when the law requires it.
- Questions or requests go to hello@kimuralabs.com.
Information we collect
When you request access on the website
If you enter your email address in a “Request access” form, we receive that address so we can follow up about Byline. The website doesn’t use analytics or advertising trackers. It loads its fonts from Google Fonts, so Google receives your IP address and browser details when you visit.
When you use the app
- Account details: your name, email address and sign-in details. If you sign in with Google or Microsoft, we receive your name, email address and profile picture from that account. We don’t receive your password for that account, and we don’t ask for access to your email, files, calendar or contacts.
- Firm membership: which firm you belong to and your role there (for example admin, publisher or editor).
- Your firm’s content: the memos and documents you upload or paste, the alerts and cover emails Byline drafts, your firm’s style guide, logos and other files, practice groups, and the details of attorneys your firm adds (such as name, title, work email and bio page link).
- Website connection: if your firm connects its website, the site address, the username Byline publishes as, and an application password. The password is stored encrypted and is used only to publish to your site and read its lawyer pages when you ask Byline to.
- Activity: who drafted, edited, approved or published an alert, and when. We also count how often Byline’s AI drafting is used, to apply usage limits. These counts don’t include any content.
- Technical information: our hosting provider keeps standard server logs, such as IP address, browser type and the pages requested, to keep the service running and secure.
How we use information
- To provide Byline: sign you in, keep your firm’s work separate from other firms’, draft and format alerts, route them for approval and publish them when you choose.
- To send emails about your work in Byline, such as approval requests and updates on alerts. These aren’t marketing emails.
- To answer access requests and support questions.
- To keep Byline secure, prevent misuse and fix problems.
- To meet legal obligations.
We don’t sell personal information, share it for cross-context behavioral advertising, or use your firm’s content to train AI models.
Our legal bases
Where laws such as the EU and UK General Data Protection Regulation apply, we rely on these legal bases: providing the service under our contract with your firm; our legitimate interests in running, securing and improving Byline and in responding to people who contact us; complying with the law; and your consent, where we ask for it.
When we look at firm content
Kimura Labs staff access a firm’s content only when the firm asks us for support, when we need to investigate a security issue or misuse, or when the law requires it. We don’t read firm content for any other purpose.
AI drafting
When you ask Byline to draft an alert or build a style guide, the relevant content is sent to Anthropic, the company that makes the Claude AI models, to produce the draft. Under Anthropic’s commercial terms, Anthropic doesn’t use content sent this way to train its models. Anthropic may keep it for a limited period to detect and prevent misuse, and then deletes it. Byline never publishes or sends an AI draft without a person at your firm approving it.
Who helps us run Byline
We use a small number of service providers. Each receives only what it needs to do its job, under its own security and privacy commitments.
| Provider | What it does for Byline |
|---|---|
| Clerk | Sign-in and account management |
| Supabase | Database and file storage |
| Vercel | Hosting for the app and website |
| Anthropic | AI drafting (Claude) |
| Postmark | Sending emails from Byline |
| Formspree | Receiving access requests from the website |
| Google Workspace | Our email, including messages you send us |
| Google, Microsoft | Sign-in, only if you choose to sign in with them |
We tell customer firms before we add or replace a provider that handles their content, so they can raise concerns.
We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of the business, in which case this policy continues to apply to it.
Your firm’s content and attorney information
We handle the content and attorney details a firm puts into Byline on that firm’s behalf and under its instructions. For that information, the firm decides how it’s used and we act as its processor (or “service provider” under California law). For account details, website requests and the other information described in this policy, Kimura Labs is responsible as the controller. If you’re an attorney or client whose information appears in a firm’s content, please contact that firm first; we’ll help the firm respond. Firms that need a data processing agreement can request one at hello@kimuralabs.com.
Cookies
The app uses cookies that are needed to keep you signed in and to protect your account. We don’t use advertising or cross-site tracking cookies.
Because we don’t track people across other websites, we don’t change how Byline works in response to a browser’s “Do Not Track” signal.
How long we keep information
We keep account details and firm content for as long as the firm uses Byline. When a firm closes its account, we delete its content and account data from our systems within 30 days, except where the law requires us to keep something longer. Copies in backups, and copies held by the providers listed above (such as records of sent emails and server logs), are deleted as they expire under those providers’ retention schedules. Access requests from the website are kept until we’ve followed up, or until you ask us to remove them.
Security
Information is encrypted in transit and at rest. Each firm’s data is kept separate at the database level, so one firm’s users can’t see another’s. Website passwords are stored encrypted. Access to production systems is limited to the people who need it. No system is perfectly secure, but we work to protect what you trust us with and will tell affected firms promptly if a breach affects their data.
Your choices and rights
You can ask us to tell you what personal information we hold about you, correct it, delete it, or send you a copy. Depending on where you live, you may have further rights, such as objecting to certain uses or complaining to a data protection authority. Email hello@kimuralabs.com and we’ll respond within 30 days. To protect your information, we’ll confirm your identity before acting on a request, usually by replying to the email address on file. You can also have someone you’ve authorized make a request for you; we’ll ask for proof of that authorization. We won’t treat you differently for using these rights.
You can also update your name and email in your account settings, and your firm’s admins can remove members and attorneys at any time.
International transfers
Byline is run from the United States, and our service providers may process information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for these transfers.
Children
Byline is a tool for businesses and isn’t meant for anyone under 18. We don’t knowingly collect information from children.
Changes to this policy
If we change this policy, we’ll update the date at the top. If a change is significant, we’ll also tell firm admins by email or in the app before it takes effect.
Contact us
Kimura Labs LLC
8 The Green, Ste B
Dover, DE 19901
United States
hello@kimuralabs.com