Privacy Policy

Effective Date: April 22, 2026 · Last Updated: April 22, 2026 · Controller: Elite Agentic Solutions LLC, a Delaware limited liability company (“LegalDraft,” “we,” “us,” or “our”).

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and what rights you have. By using the LegalDraft service (the “Service”), you agree to this Policy. This Policy is incorporated into our Terms of Service.

1. Information We Collect

Account information: name, email address, hashed password, plan tier.
Billing information: last four digits of payment card, billing ZIP, Stripe customer ID. Full payment card numbers are processed and stored by Stripe; we do not store them.
User-submitted content: contracts, document inputs, prompts, uploads, and other content you provide to generate or review documents.
Usage data: pages visited, features used, document counts, timestamps, IP address (truncated where feasible), browser/user-agent, approximate region (state-level).
Cookies and similar technologies: session cookies for authentication, preference cookies, and limited analytics cookies. See our cookie banner for choices.

2. How We Use Your Information

To provide, operate, and improve the Service (including generating and reviewing documents).
To authenticate accounts and prevent fraud and abuse.
To process payments through Stripe.
To communicate with you about the Service, billing, and security matters.
To comply with legal obligations and enforce our Terms.

3. Third-Party Sharing

We share personal data only with vendors who help us operate the Service:

Anthropic, PBC (Claude API): when you request document generation or review, the prompt and the user-submitted content (e.g., the contract text you paste) are sent to Anthropic for processing. Anthropic processes this content under its own commercial terms and privacy policy. Per Anthropic’s commercial terms, API content is not used to train models by default.
Stripe, Inc.: processes payments. See Stripe’s privacy policy.
Hosting and infrastructure providers: our application runs on managed cloud infrastructure (Coolify on Hetzner) and uses transactional email and error-monitoring providers.
Legal compliance: we may disclose information if required by law, subpoena, or to protect rights, safety, and property.

We do not sell your personal information. We do not share personal information with third parties for cross-context behavioral advertising.

4. How Long We Keep Your Information

Account data: retained while your account is active and for up to twelve (12) months after closure for fraud-prevention and tax purposes.
Generated documents: retained in your library until you delete them or close your account.
Billing records: retained for the period required by tax and accounting law (typically seven years).
Logs and analytics: retained in aggregated form for up to twenty-four (24) months.

5. Security

We use commercially reasonable administrative, technical, and physical safeguards (TLS in transit, encryption at rest where supported, hashed passwords, restricted access, audit logging). No system is perfectly secure. If we discover a security breach affecting your personal information, we will notify affected users without undue delay and as required by applicable law (including state breach-notification statutes and, where applicable, the GDPR’s 72-hour notification rule).

6. Your Rights

California residents (CCPA / CPRA): you have the right to know what personal information we collect, to access and receive a copy, to request deletion, to correct inaccurate information, to limit the use of sensitive personal information, and to opt out of any sale or sharing of personal information for cross-context behavioral advertising. We do not sell or share personal information for cross-context behavioral advertising.

EU/EEA/UK residents (GDPR / UK GDPR): you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. The legal bases for our processing are contract performance, legitimate interests, consent (where applicable), and legal obligation.

How to exercise: email [email protected]. We will verify your identity and respond within the timelines required by applicable law (45 days under CCPA; one month under GDPR).

7. Children

The Service is not directed to children under 18 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact [email protected] and we will delete it.

8. International Transfers

We are based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified by email or in-app notice. The “Last Updated” date at the top reflects the most recent revision.

10. Do Not Sell or Share My Personal Information (California)

We do not sell your personal information and we do not share it for cross-context behavioral advertising. You may still submit a request to confirm this by emailing [email protected].

11. Contact

Elite Agentic Solutions LLC
Privacy: [email protected]
Legal: [email protected]