Privacy Policy

Effective Date: November 21, 2025 Version: 1.0.0

Introduction

This Privacy Policy explains how discover.legal ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our service.

Your privacy is critically important to us. We believe in transparency about how we handle your data, and we are committed to protecting your personal information.

Information We Collect

Information You Provide to Us

Account Information: When you create an account, we collect your name, email address, and authentication credentials through Auth0.
Document Content: The text, facts, evidence, and other information you input when creating affidavits and legal documents.
Payment Information: When you make a payment, we collect billing information through our payment processor (Stripe). We do not store your full credit card numbers.
Communications: Information you provide when you contact our support team or communicate with us.

Information Automatically Collected

Usage Data: Information about how you use our service, including pages visited, features used, and actions taken.
Device Information: Information about your device, including IP address, browser type, operating system, and device identifiers.
Cookies and Similar Technologies: We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage patterns.

Research Data (Optional)

If you consent to participate in research, we may collect additional anonymized data about your document creation patterns to improve our service and conduct academic research. This consent is entirely optional and separate from your use of the service.

How We Use Your Information

We use your information for the following purposes:

To Provide Our Service: Create, store, and manage your affidavits and legal documents
To Maintain Your Account: Authenticate your identity and manage your account settings
To Process Payments: Handle billing and payment transactions securely
To Improve Our Service: Analyze usage patterns to enhance features and user experience
To Communicate: Send service-related notifications, updates, and respond to your inquiries
To Ensure Security: Protect against unauthorized access, fraud, and security threats
For Research: If you consent, use anonymized data for research purposes to improve legal document creation tools

How We Share Your Information

We do not sell your personal information. We may share your information only in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who help us operate our service:

Auth0: Authentication and identity management
Stripe: Payment processing
Render: Cloud hosting infrastructure
OpenAI: AI-powered document generation assistance

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to:

Comply with legal obligations
Protect our rights, property, or safety
Prevent fraud or abuse
Respond to emergencies

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent

We may share your information for other purposes with your explicit consent.

Data Security

We implement industry-standard security measures to protect your information:

Encryption: Data is encrypted in transit using SSL/TLS and at rest in our databases
Access Controls: Strict access controls limit who can view your information
Authentication: Secure authentication through Auth0
Regular Security Audits: We regularly review and update our security practices
Secure Infrastructure: Our service is hosted on secure cloud infrastructure (Render)

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as your account is active or as needed to provide you with our service. Specifically:

Account Data: Retained while your account is active
Document Content: Retained while your account is active and you choose to keep documents
Payment Records: Retained for as long as required by law and accounting purposes (typically 7 years)
Audit Logs: Terms of Service acceptance logs are retained permanently for legal compliance

You may request deletion of your account and associated data at any time by contacting us. Some information may be retained in backup systems for a limited time or as required by law.

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

You can access your account information and documents at any time through your dashboard. You may request a copy of your data by contacting us.

Correction

You can update your account information directly through your account settings. If you need assistance correcting your information, contact us.

Deletion

You may request deletion of your account and associated data by contacting us. Note that some information may be retained as required by law or for legitimate business purposes.

Opt-Out

Marketing Communications: You can opt out of marketing emails by following the unsubscribe link in those emails
Research Participation: You can withdraw your research consent at any time through your account settings
Cookies: You can manage cookie preferences through your browser settings

Data Portability

You can export your documents at any time through our service.

Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our service, you consent to such transfers. We take steps to ensure your information receives adequate protection.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect, use, and disclose
Right to request deletion of your personal information
Right to opt out of the sale of your personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us using the information below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

Posting the updated policy on our website
Updating the "Effective Date" at the top of this policy
Sending you an email notification for significant changes

Your continued use of our service after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: privacy@discover.legal
Response Time: We aim to respond to privacy inquiries within 48 hours

Data Protection Officer

For data protection inquiries specific to GDPR or other privacy regulations:

Email: privacy@discover.legal

Commitment to Privacy

We are committed to:

Transparency: Being clear about what data we collect and how we use it
Security: Protecting your information with industry-standard security measures
No Data Sales: We will never sell your personal information to third parties
User Control: Giving you control over your data and privacy choices
Compliance: Following all applicable privacy laws and regulations

This Privacy Policy is part of our Terms of Service and is governed by the same jurisdiction and dispute resolution provisions.