⚠ DRAFT for review. This template must be reviewed and adapted by a licensed attorney before you rely on it — especially because this service handles sensitive and potentially privileged legal information.

Privacy Policy

Last updated: [DATE] · Operated by [YOUR LEGAL ENTITY] ("we," "us")

This Privacy Policy explains what information the Deadline & SOL Engine (the "Service") collects, how we use and protect it, and the choices you have. By creating an account you agree to this Policy.

1. Information we collect

Account information — the email address and password (stored only as a salted hash) you provide at signup, and your agreement timestamp.
Matter content you submit — documents you upload or paste, the dates and facts extracted from them, matter names, and the deadlines computed for you. This content may include sensitive or privileged legal information.
Usage and audit records — an append-only log of actions taken in your account (extractions, confirmations, computed deadlines) for integrity and security purposes.
Billing information — handled by our payment processor (Stripe). We do not store your full card number; we retain a customer/subscription identifier and subscription status.
Technical data — standard server logs (IP address, timestamps, request paths) used for security and reliability.

2. How we use information

To provide the Service — extract facts, compute deadlines, and maintain your private workspace and calendar.
To authenticate you and keep your data isolated from other accounts.
To process subscriptions and prevent fraud.
To maintain security, debug problems, and comply with legal obligations.

We do not sell your personal information or your matter content, and we do not use your matter content to train third-party AI models without your explicit, separate consent.

3. AI processing of documents

If AI-assisted extraction is enabled, the text of documents you submit may be sent to a third-party model provider solely to extract candidate dates and facts. No deadline is finalized by AI — every fact is confirmed by a human, and the deterministic engine computes the dates. You should not submit documents you are not authorized to process this way.

4. How we share information

We share information only with service providers acting on our behalf under contract, including our hosting provider, database provider, payment processor (Stripe), and (if enabled) the AI model provider. We may disclose information if required by law or to protect rights and safety. We do not otherwise share your matter content.

5. Data retention

We retain your account and matter data for as long as your account is active and as needed to provide the Service. You may request deletion of your account and associated matter content (see Your rights). We may retain limited records where required for legal, security, or audit purposes.

6. Security

We use encryption in transit (HTTPS), hashed passwords, per-account data isolation, and access controls. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security. [Describe encryption at rest, SOC 2 status, and breach-notification practices once implemented.]

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these, contact us at [PRIVACY CONTACT EMAIL]. If you are in the EEA/UK or California, additional rights may apply (GDPR / CCPA/CPRA); this section should be completed with jurisdiction-specific disclosures by counsel.

8. Confidentiality note for legal professionals

If you are an attorney or work for a law firm, you are responsible for ensuring your use of the Service complies with your professional and ethical obligations, including duties of confidentiality and technology competence. Do not submit client information you are not permitted to process through a third-party service.

9. Children

The Service is intended for professional use and is not directed to individuals under 18.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with an updated date, and where required, we will notify you.

11. Contact

Questions? Contact [YOUR LEGAL ENTITY] at [PRIVACY CONTACT EMAIL], [MAILING ADDRESS].

This template is provided for convenience and is not legal advice. Have it reviewed by a qualified attorney before publication.