Privacy Policy

CourtDocs ("CourtDocs," "we," "us," or "our") provides software that helps California legal professionals pre-populate, review, and export California Judicial Council forms. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to our website at courtdocs.us and to the CourtDocs application.

We built CourtDocs for law firms, so we treat the information you put into it with the seriousness that legal work demands. We do not sell your personal information, and we do not use your case, client, or matter data to train artificial-intelligence models or send it to third-party AI providers.

Who controls your data

Your information falls into two roles:

• Your account, billing, and usage data: we are the controller (the "business" under California law). This Policy governs how we handle it.
• Your case, client, and matter data (the information you enter to fill forms): you, the firm, are the controller. We act as your service provider (processor), handling that data only to provide the service and on your instructions, as set out in our customer agreement and any Data Processing Addendum. You remain responsible for your own professional obligations, including client confidentiality and privilege.

Information we collect

Information you provide:

• Account and organization: your name, email, and password, and your organization's details (firm name, State Bar number, address, phone, and email).
• Matter and client data: the client, party, case, and form-field information you enter to populate forms. This can include personal information about your clients and other third parties.
• Billing: handled by our payment processor, Stripe. We receive limited billing details (such as your subscription and customer identifiers); we do not store full payment-card numbers.
• Communications: messages you send us, such as support requests.

Information collected automatically:

• Usage and device data: log data such as IP address, browser type, the pages and actions you take, and timestamps, used for security, debugging, and improving the service.
• Cookies: strictly necessary cookies that keep you signed in and operate the application (see Cookies below).

Early access: if you join our early-access list, we collect your email and an optional role so we can contact you about access.

How we use information

• Provide, operate, and maintain the service, including filling forms and generating PDFs.
• Process payments and manage subscriptions.
• Provide support and respond to your requests.
• Secure the service, prevent abuse, and debug problems.
• Communicate with you about the service and, where permitted, about early access. You can opt out of marketing email at any time.
• Comply with our legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

How we share information

We share information only as needed to run the service:

• Service providers (sub-processors): vetted vendors that process data on our behalf under contracts requiring appropriate safeguards. Our current sub-processors are:
  • Fly.io: application hosting and compute, in the United States.
  • Neon: managed Postgres database storing account, organization, matter, client, and form data, in the United States (AWS US West).
  • Stripe: payments and subscription billing. Payment-card details are handled by Stripe; we store only billing and customer identifiers.
  • Resend: transactional email (sign-in, verification, account notices) and early-access email.
  • Axiom: operational logging and monitoring. Email addresses are redacted in our logs.
  • Cloudflare: DNS, network edge in front of the application (your data transits it encrypted in TLS), and hosting for our marketing website.
  The current list is always published at courtdocs.us/subprocessors.
• Support and feedback: if you email hello@courtdocs.us, your message is received in our Google Workspace-routed inbox; if you use the in-app feedback widget, your name, email, and message are stored in our private issue tracker (GitHub) so we can respond. Please do not include client or matter details in support or feedback messages.
• Legal and safety: when required by law or legal process, or to protect the rights, safety, and integrity of CourtDocs, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, with notice as required by law.

We do not sell your personal information.

Where your data is stored

CourtDocs is operated from the United States, and your data is stored and processed on United States infrastructure. Our sub-processors may process data in the United States. If we begin transferring personal data internationally, we will apply appropriate safeguards and update this Policy.

Security

We protect your data with industry-standard measures, including encryption in transit (TLS) and at rest, access controls, and least-privilege access for our team. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to limit who can access it.

Data retention

We keep your information for as long as your account is active and as needed to provide the service. After your account closes and you request deletion, we delete your organization's data within 30 days. Operational and audit logs are retained for 12 months and then deleted; database backups age out on a 7-day window; and we may retain data where the law or a legal hold requires it. The Data Processing Addendum in our Terms of Service describes retention and deletion in detail.

Your privacy rights

Depending on where you live, you may have rights over your personal information, including the right to:

• Know about and access the personal information we hold about you.
• Correct inaccurate personal information.
• Delete your personal information.
• Opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising).
• Not be discriminated against for exercising your rights.

California residents: the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides the rights above. We do not sell or share personal information as those terms are defined under that law.

To exercise a right, email us at hello@courtdocs.us. We will verify your request and respond within the time the law requires. If your request concerns client or matter data you entered as a firm, we will work with you, as the controller of that data, to fulfill it.

Cookies

We use strictly necessary cookies to authenticate you and operate the application. We do not use third-party advertising cookies. Our marketing website uses minimal, privacy-respecting analytics where applicable.

Children's privacy

CourtDocs is a professional tool that is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date, and we will provide additional notice of material changes as required by law.

Contact us

Questions about this Policy or your data? Email hello@courtdocs.us.

CourtDocs
Oakland, California, United States