Privacy Policy
In short: CuraLex has no accounts, sets no advertising or tracking cookies, and never sells or shares personal data. We use what you send us (a search, or the arguments of a tool call) only to answer that request. Our servers keep short-lived technical logs for security and troubleshooting.
This policy covers the CuraLex website at curalex.org and the CuraLex MCP connector (the server at curalex.org/mcp that AI assistants such as Claude connect to). CuraLex provides public legislative information: bills, their status and history, sponsors, votes, and the text of official bill documents.
What we collect
- Your requests. When you search on the website, or when an AI assistant calls a CuraLex tool for you, we receive the request parameters: search words, filters such as state or year, and bill or person identifiers. We use them only to compute the response. We do not store them in a database or build profiles from them.
- Only what the tool call contains. The MCP connector receives only the arguments your assistant sends to a CuraLex tool. It does not receive your conversation, your assistant's memory, or your files, and we do not ask for them.
- Technical logs. Like most websites, our servers record basic request information: IP address, time, the requested address, and the response status. For website searches, the requested address includes the words searched. For connector calls, the request contents are not written to these logs.
- Rate limiting. To keep the service fair and available, we count requests per IP address. The counts are kept in memory and discarded automatically.
What stays on your device
The website remembers your recent searches and your sidebar preference in your browser's local storage. That information stays in your browser, is never sent to us, and can be cleared at any time from the search page or your browser settings. CuraLex itself sets no cookies.
How we use information
We use request information only to provide the service: answering searches and tool calls, preventing abuse, and diagnosing problems. We do not use it for advertising, and we do not sell it or use it to train AI models.
Service providers and sharing
CuraLex runs on Amazon Web Services and is delivered through Cloudflare, which protects and speeds up the site. These providers process network traffic, including IP addresses, on our behalf under their own privacy terms. Cloudflare may set strictly necessary security cookies, and it gives us aggregate traffic statistics that do not identify individual visitors. We do not otherwise share personal information, except where the law requires it.
When a tool retrieves the text of a bill, our server fetches the public document from the official legislature website. That request comes from CuraLex, not from you, and carries no information about you.
Retention
Technical logs are kept only as long as needed for security, abuse prevention, and troubleshooting, and are routinely deleted through automatic log rotation. Rate-limit counters exist only in memory. Public legislative documents we retrieve may be kept to serve later requests; they contain no information about you.
Children
CuraLex is a research tool for general audiences. It is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes
If this policy changes, we will post the new version on this page and update the effective date.
Contact
Questions about privacy: [email protected].