Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, use our document generator, or contact support. This includes contact information and any legal case details you input into the platform.

2. Confidentiality & AI Data Usage (Cal. SB 574 Standards)

We understand that legal drafting involves sensitive, confidential, and attorney work-product information. In strict compliance with California Business and Professions Code Section 6068.1(b) (enacted under Senate Bill 574), our platform enforces comprehensive architectural safeguards:

• Restricted Access & Enterprise Encryption: Inputs and generated outputs are restricted solely to authenticated users and authorized processing systems bound by strict non-disclosure obligations. Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• Zero Model Training: We use the Developer/Enterprise tier of Google Gemini API. Your data is used solely to generate your specific document and is never used by Google or Draft Master to train or fine-tune public models.
• Search Grounding Privacy Isolation: Our AI engines are system-instructed never to send client names, nonpublic dates of birth, or confidential case facts into external Search Grounding queries. All external statutory and citation lookups are strictly abstracted to public legal doctrines.
• Transient Processing & Ephemeral Storage: Uploaded case exhibits are temporarily processed in memory and immediately deleted from server disks and AI file caches upon generation completion.
• Zero Local Server Pleading Retention: Draft Master does not permanently store your generated pleadings on our database servers. Documents exist client-side in your active browser session.
• Integrated PII Sanitization: We provide built-in redaction tools (Redact Master) calibrated to California Rules of Court Rule 1.201 to assist counsel in redacting protected PII before generation.

3. Data Security

We implement industry-standard security measures to protect your data from unauthorized access, disclosure, or destruction. We use encryption for data at rest and in transit.

4. Confidentiality

We understand the sensitive nature of legal work. We do not sell your personal data or case details to third parties. Access to your data by our staff is strictly limited and monitored.

5. Third-Party Services

We use third-party providers for authentication (Clerk) and AI processing (Google Gemini). These providers are contractually obligated to protect your data.

6. Your Rights

You have the right to access, correct, or delete your personal information. You can manage your account settings or contact support for assistance.