Privacy Policy

1. Who We Are

LitigationVault.ai is a product created, owned, and operated by PatentVC | Trademarkia, a California professional corporation doing business as Trademarkia ("Company," "we," "our," or "us").

This Privacy Policy applies to the LitigationVault.ai website, platform, applications, and related services (collectively, the "Platform"). It does not apply to third-party websites, services, or AI providers linked from or integrated with the Platform, which have their own privacy policies.

2. Information We Collect

We collect different types of information depending on how you interact with the Platform.

2A. Information You Provide

2B. Vaulted Content (see Section 3)

2C. Automatically Collected Information

3. Vaulted Communications — Special Protections

Vaulted communications are:

• Encrypted at rest using AES-256 encryption with dedicated encryption keys per organization.
• Encrypted in transit using TLS 1.3 minimum for all connections, including to AI provider APIs.
• Access-restricted — accessible only to you and your directing attorney. No Platform employee, administrator, or engineer can access the contents of your vault in the ordinary course of business.
• Never used for training — your vaulted data is never used to train, fine-tune, or improve any AI model, whether ours or any third-party provider's.
• Never sold or shared — your vaulted data is never sold, rented, licensed, or shared with any third party for any purpose, including marketing, advertising, analytics, or research.
• Audited immutably — every access to your vault generates an immutable, cryptographically signed log entry that cannot be altered or deleted by anyone, including Platform administrators.

When We Might Access Vault Data

We will access the contents of a vault only in the following limited circumstances:

• With your explicit written consent — for example, if you request technical support that requires us to examine specific vault contents.
• If required by law — in response to a valid court order, subpoena, or other legally binding process. We will notify you before complying unless legally prohibited from doing so, and we will assert any applicable privilege protections on your behalf to the extent permitted.
• To prevent imminent harm — if we have reason to believe that vault contents reveal an imminent threat to life or safety, consistent with our legal obligations.

Any access under these circumstances is logged in the immutable audit trail.

4. How AI Providers Handle Your Data

When you send a query to an AI model through the Platform, your query is transmitted to the selected AI provider's enterprise API for processing. Here is how each provider handles your data:

These protections are established through enterprise agreements between PatentVC | Trademarkia and each AI provider. We continuously monitor provider terms and will notify users of any material changes that could affect data handling or privilege protections.

5. How We Use Your Information

6. What We Never Do With Your Data

• We never sell your data. Not to advertisers, data brokers, analytics companies, or anyone else. Period.
• We never use vault content for AI training. Your queries, AI responses, and documents are never used to train, fine-tune, evaluate, or improve any AI model.
• We never use vault content for marketing. We will never analyze what you ask the AI to target you with ads or marketing messages.
• We never display advertising. There are no ads on LitigationVault.ai. We are a subscription business, not an advertising business.
• We never share vault content with other users. Your vault is completely isolated. No other user, attorney, or firm can see your data unless they are your directing attorney.
• We never use vault content for analytics. We may analyze aggregated, anonymized usage patterns (e.g., "how many users switch AI models") but we never analyze the substance of vault conversations or documents.
• We never mine vault content for insights. We do not use natural language processing, machine learning, or any other technique to extract insights from vault contents for our own purposes.

7. When We Share Information

We share your information only in the following limited circumstances:

7A. With Your Attorney

Your vaulted communications are accessible to your directing attorney. This is the core function of the Platform — attorney review is what establishes and maintains privilege. Your attorney can see your AI conversations, uploaded documents, and vault activity.

7B. Service Providers

We use the following categories of service providers who may process your data on our behalf:

• AI model providers (Anthropic, OpenAI, Google) — process your queries under enterprise ZDR agreements (see Section 4).
• Cloud infrastructure (AWS) — hosts the Platform's servers and encrypted storage.
• Payment processing (Stripe) — processes subscription payments. We do not store credit card numbers.
• Email delivery — sends transactional emails (account confirmation, notifications, invite links).
• Practice management sync (Clio, etc.) — syncs data at the attorney's direction. Only the data the attorney chooses to sync is transmitted.

All service providers are bound by data processing agreements that prohibit them from using your data for their own purposes.

7C. Legal Requirements

We may disclose information if required by law, regulation, court order, subpoena, or other legal process. We will:

• Notify you before complying (unless legally prohibited).
• Assert applicable privilege protections on your behalf to the extent permitted.
• Narrow the scope of disclosure to the minimum required.
• Log all such disclosures in the audit trail.

7D. Business Transfers

If PatentVC | Trademarkia is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will provide notice before your data is transferred and becomes subject to a different privacy policy. Your vault data will continue to be protected under the terms in effect at the time of the transfer.

7E. With Your Consent

We may share information with your explicit consent for purposes not covered by this Policy.

8. Security Measures

We implement comprehensive security measures to protect your data:

No system is 100% secure. While we implement industry-leading security measures, we cannot guarantee absolute security. If we become aware of a data breach affecting your information, we will notify you and applicable authorities as required by law.

9. Data Retention

You may request a full export of your vaulted data at any time through your account settings or by contacting us. Exports are provided in standard formats (JSON, PDF) within 30 days of request.

10. Cookies & Tracking Technologies

We use cookies and similar technologies on the Platform:

Essential Cookies (always active)

Required for the Platform to function. These include authentication tokens, session identifiers, and security cookies (e.g., CSRF protection). You cannot opt out of essential cookies while using the Platform.

Analytics Cookies (opt-in)

We may use analytics services to understand how people use the Platform in aggregate (e.g., which pages are visited most, where users encounter errors). Analytics cookies do not track vault content. You can opt out of analytics cookies through your browser settings or our cookie preferences panel.

What We Do Not Use

• No advertising cookies. We do not use advertising or retargeting cookies.
• No third-party tracking pixels. We do not embed Facebook Pixel, Google Ads remarketing, or similar tracking technologies on authenticated pages.
• No cross-site tracking. We do not track your activity across other websites.

11. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements and your attorney's professional obligations.
• Export / Portability: Request an export of your data in a structured, machine-readable format.
• Objection: Object to the processing of your personal information for certain purposes.
• Restriction: Request restriction of processing in certain circumstances.
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, contact us at customer.service@trademarkia.com. We will respond within 30 days (or sooner as required by applicable law). We may ask you to verify your identity before processing a request.

We will not discriminate against you for exercising your privacy rights.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know: What personal information we collect, use, disclose, and sell (we do not sell personal information).
• Right to delete: Request deletion of your personal information, subject to exceptions.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out of sale/sharing: We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of.
• Right to limit use of sensitive personal information: We use sensitive personal information only for the purposes of providing the Platform, not for profiling or advertising.
• Right to non-discrimination: We will not deny services, charge different prices, or provide a different quality of service because you exercised a privacy right.

CCPA Disclosures

To submit a CCPA request, contact us at customer.service@trademarkia.com or write to us at the address in Section 16. You may designate an authorized agent to make requests on your behalf.

13. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at customer.service@trademarkia.com.

14. International Users

The Platform is operated from the United States. If you are accessing the Platform from outside the United States, your data will be transferred to and processed in the United States. By using the Platform, you consent to this transfer and processing.

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdiction with data protection laws, please note that U.S. data protection laws may not provide the same level of protection as your home jurisdiction. We implement appropriate safeguards (including encryption and access controls) to protect your data regardless of where it is processed.

If you are a data subject in the EEA or UK and have a complaint about our data practices, you have the right to lodge a complaint with your local data protection authority.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes — particularly changes to how we handle vaulted communications, AI provider data handling, or data sharing practices — we will:

• Provide at least 30 days' notice by email to the address associated with your account.
• Post a prominent notice on the Platform.
• Update the "Last Updated" date at the top of this Policy.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with a material change, you may cancel your account and request an export of your data before the change takes effect.

16. Contact Us

If you have questions about this Privacy Policy, your data, or your privacy rights, contact us:

For CCPA requests, privacy rights exercises, or data export requests, please include "Privacy Request" in your subject line and provide sufficient information for us to verify your identity.