Privacy, Attorney Confidentiality & CCPA/CPRA Notice

Draft Master LLC — Privacy Policy

Last Updated: November 4, 2026 • Aligned with Cal. Bus. & Prof. Code §§ 6068(e)(1) & 6068.1(a)(3)(A) and CRPC Rule 1.6

1. Exact Separation of Local Browser Processing vs. Enterprise Cloud Processing

Because licensed attorneys have stringent confidentiality obligations under Business and Professions Code §§ 6068(e)(1) and 6068.1(a)(3)(A) and California Rule of Professional Conduct 1.6, Draft Master documents its data flow transparently without overstatement:

  • 100% Local Browser Operations & Storage: Pre-flight PII file scanning, Redact Master Pass 1 deterministic regex scanning, IndexedDB working-session persistence (DraftMaster_ArgonRedact_V5Beta_DB, clearable in 1 click via the studio Reset button), local draft/counsel auto-save (localStorage keys v5_beta_draft_autosave_v1 and v5_beta_counsel_profile_v1), and final rasterized PDF pixel flattening execute locally inside your web browser. Draft Master operates no persistent server-side document database for your motions or discovery PDFs, and increments only an anonymous aggregate motion-generation counter (motion_stats) containing zero case facts or client identifiers.
  • Google Cloud Vertex AI Inference (Pre-Scrubbed): When you generate a motion, extract attachment timelines, run the 4-Agent Brief Analyzer, or opt into Redact Master Pass 2 contextual entity detection, pre-scrubbed text is transmitted over TLS to our stateless Google Cloud Run application and processed via Google Cloud Vertex AI under the Google Cloud Data Processing Addendum (CDPA).
  • Zero AI Model Training & Published Google Cloud Vertex AI Retention Schedule: Under Google Cloud Vertex AI enterprise terms (CDPA), customer prompts, grounded search inputs, and generated outputs are never used to train Google foundation models. Pursuant to Google's published Vertex AI data governance documentation: (a) Abuse Monitoring: prompts flagged by automated abuse classifiers may be retained for up to 90 days (with potential human review) unless the Google Cloud account holds an approved Abuse Monitoring Exemption under a Cloud Master Agreement (and up to 30 days for Frontier/Advanced AI models); (b) Caching & Logging: implicit caching is enabled by default on Vertex AI while request-response logging is disabled by default; and (c) Grounding with Google Search: search query strings sent to Grounding with Google Search are retained for 3 days, which is why Draft Master restricts grounding queries strictly to abstract legal authorities and strips client names, docket numbers, and case facts pursuant to Bus. & Prof. Code § 6068.1(a)(3)(A). Because of these transient cloud windows, Draft Master enforces client-side PII and medical PHI scrubbing in your browser prior to cloud transmission.

2. Subprocessor & External Service Inventory

ProviderPurposeData Transmitted
Google Cloud Platform (Cloud Run & Vertex AI)Stateless hosting & CDPA-governed LLM inference / legal search groundingPre-scrubbed motion facts, brief text, and abstract legal grounding queries (excluded from model training)
Free Law Project / CourtListener APIAutomated case-law reporter volume/page verificationExtracted case citation strings ONLY (zero client names or case facts)
Clerk, Inc.Attorney authentication & session securityAccount email, name, authentication tokens, subscription status metadata
Stripe, Inc.PCI-DSS Level 1 subscription billing & customer portalBilling email, payment method, invoice history (Draft Master never stores card numbers)
SMTP Support Mail RelayAttorney support desk correspondenceVoluntary support inquiries (do not email unredacted client discovery to support)
Google Analytics 4 & First-Party AttributionAggregate page-navigation telemetry (G-ERZZLS1N2W) & first-party referral attribution cookie (SqrlTracker)Page URLs, referrer/UTM tags, browser viewport metadata (zero motion text, discovery PDFs, or client PII)

3. California Privacy Rights (CCPA / CPRA Categories & Retention)

Under the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), Draft Master LLC collects limited subscriber categories: (a) Account Identifiers (name, bar/firm affiliation, email via Clerk — retained while your account remains active and deleted within 30 days of verified account deletion request); (b) Commercial/Billing Records (subscription tier and Stripe invoice history — retained for 7 years for tax/accounting compliance); and (c) Aggregate Usage Telemetry (GA4 / referral cookie metadata — retained per standard 14-month analytics expiry).

Draft Master LLC does not sell or "share" (for cross-context behavioral advertising) personal information of subscribers or their clients. California residents may exercise rights to know, access, correct, or delete account personal information by emailing support@draftmaster.ai. Local browser drafts (localStorage) and Redact Master sessions (IndexedDB) reside solely on your device and can be cleared instantaneously in your browser at any time.

4. Privacy Contact & Registered Office

Draft Master LLC
c/o Entity Protect Registered Agent Services Corp.
23 Corporate Plaza Dr. Ste 150-88A
Newport Beach, CA 92660-7908
Email: support@draftmaster.ai