Privacy Policy

Effective: August 28, 2026

Technology Outlaws LLC operates marcellalegal.com and the Marcella platform.

Data collection. Name, email, firm name, and firm size when you join the waitlist or contact us. Privacy-respecting web analytics. No third-party ad trackers.

Platform data. Marcella does not train on your queries, your documents, or your matter memory. Personally identifying information is stripped by Presidio anonymization before content reaches the model.

Where your data lives. Marcella is offered in two deployment modes. In Bring Your Own Azure deployments, which include the BOYA, BOYA 20, and Enterprise tiers, client data, derivatives, and audit records remain inside your own Azure subscription and Microsoft 365 tenant, and Technology Outlaws holds no copy. In Trial and Firm deployments, Marcella runs on infrastructure that Technology Outlaws operates in Microsoft Azure in the United States, which means Technology Outlaws is a custodian of the records described below. The same anonymization, network isolation, and no-training commitments apply in both modes. If custody by a third party is unacceptable for your matters, a Bring Your Own Azure tier is the correct deployment and we will say so before you buy.

Document retention. Marcella extracts derivative intelligence from documents you provide and then discards the source file. We do not retain source documents after processing completes. Derivative records, matter memory, and audit logs are retained for the life of your subscription and are deleted within 30 days of termination.

Microsoft 365 permissions. When Marcella is installed in your tenant, it requests your basic profile at activation. This provides your name, email address, and user identifier for sign-in and session continuity. Any additional Microsoft Graph permission is requested only when you enable a feature that requires it, and is presented to your tenant administrator for consent before it takes effect. Features that request additional permissions state which ones at the point of activation.

Model provider. Inference runs on Azure OpenAI inside Microsoft Azure. The model endpoint has no public network access and is reached only through a private endpoint inside a virtual network, under managed identity authorization rather than an API key. Content does not leave Microsoft infrastructure and does not cross a public network boundary on its way to the model. No non-Microsoft model provider receives your content. If that ever changes, we will name the provider in the Sharing section below before the change takes effect.

Sharing. We do not sell personal information. We share data only with FormSubmit (forms), Microsoft Azure (infrastructure), Google Analytics and Ahrefs Web Analytics (site measurement), and as required by law.

Cookies and analytics. Two measurement tools run on this site and they are treated differently because they collect differently. Google Analytics 4 loads only after you accept the cookie notice. If you decline, it does not load and no analytics cookie is set. IP anonymization is on. Google Signals and ad personalization are off. Ahrefs Web Analytics runs on every page visit. It sets no cookies, uses no persistent identifiers, and collects no personal or identifiable data. It records the page URL, the referrer, and the user agent, and each data point is limited to a single device, a single site, and a single day, so it cannot follow you across devices, sessions, or other websites. Because it stores nothing on your device and identifies no one, it does not sit behind the cookie notice.

Local storage. We store one value in your browser to remember your response to the cookie notice. Declining stores only that choice.

Contact. contact@technologyoutlaws.com