Privacy Policy

Introduction

This Privacy Policy describes how Discover Docket, Inc. ("Discover Docket," "we," "us," "our") collects, uses, and protects information in connection with the Discover Docket marketing website at discoverdocket.ai (the "Marketing Site") and the Discover Docket platform (the "Platform").

Discover Docket has been designed from the ground up around a minimal-collection, no-tracking privacy posture. This policy describes the limited information we collect, the specific purposes for which we use it, and the security measures we apply to it.

This Privacy Policy applies to the Marketing Site and, where indicated, to the Platform. Customer matter data, client information, and work product processed inside the Platform are governed by separate terms set forth in the customer's subscription agreement and the Platform's data processing terms.

1. Information we collect

1.1 Information you provide voluntarily

We collect information you provide when you:

• Join the waitlist — email address (required), first name, last name, firm name, firm size, primary practice area, and primary jurisdiction (all optional).
• Submit a contact, press, or investor inquiry form — name, email address, organization or firm, role, inquiry type, subject, and message body. Specific fields vary by form.
• Communicate with us by email or other channel — the content of your communication and any contact information you include.

We collect this information only when you provide it. We do not infer, purchase, or otherwise acquire information about you from third parties.

1.2 Information we do not collect

We do not collect:

• Browser cookies (no first-party tracking cookies, no third-party cookies, no advertising cookies)
• Tracking pixels or web beacons
• Behavioral tracking data of any kind
• IP-address-based location tracking beyond standard server logs (see Section 1.3)
• Device fingerprints
• Cross-site behavioral data
• Information from advertising networks or data brokers
• Information from social media profiles unless you affirmatively connect them

1.3 Information collected automatically (limited)

Standard web server logs may record:

• IP address of the requesting browser
• User-agent string
• Page URL accessed
• Timestamp
• HTTP response code

These logs are used for security purposes (detecting attacks, debugging errors) and are retained for a maximum of 30 days. They are not used for behavioral profiling, advertising, or analytics.

2. How we use information

We use the information you provide to:

• Respond to your inquiries, deliver requested content, and follow up on substantive matters
• Send transactional emails (waitlist confirmations, response notifications) related to your specific submission
• Send periodic product updates and editorial content (The Docket) to waitlist members who joined for that purpose
• Operate, maintain, and improve the Marketing Site
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable legal obligations

We do not use the information you provide for:

• Advertising or remarketing
• Sale to third parties
• Behavioral profiling
• Targeted content beyond the simple categorization you provided (e.g., we will send you updates relevant to civil litigation if you indicated that's your practice area)
• Any purpose that materially differs from why you provided the information

3. Information we do not share or sell

We do not sell, rent, lease, or otherwise share your information with third parties for their own marketing or commercial purposes. This applies to:

• Email addresses
• Contact information
• Form submission data
• Communications with us
• Any other personal information you provide

We use a limited set of service providers to operate the Marketing Site (email service via Microsoft 365, database hosting via Supabase Enterprise, deployment infrastructure via Vercel). These service providers process information only on our behalf, under contractual confidentiality obligations, and only as necessary to operate the service. They are not authorized to use the information for their own purposes.

We may disclose information when legally required to do so — in response to a valid subpoena, court order, or other legal process; to protect our rights, property, or safety, or those of others; or in connection with a corporate transaction (merger, acquisition, financing) where the recipient agrees to honor this Privacy Policy.

4. Cookies and tracking

The Discover Docket Marketing Site does not use cookies or any tracking software. We have made this an explicit design choice and a public commitment.

Specifically, the Marketing Site:

• Does not set first-party cookies
• Does not load third-party cookies
• Does not load tracking pixels, web beacons, or fingerprinting scripts
• Does not use Google Analytics, Mixpanel, Segment, or any other behavioral analytics service
• Does not integrate Facebook Pixel, LinkedIn Insight Tag, or any advertising tracker
• Does not participate in any advertising network's audience-building or remarketing programs

If you visit the Marketing Site, we do not know it is you on a return visit, do not associate your activity with any profile, and do not pass any information about your visit to any third party for advertising or analytics purposes.

The Platform (when launched) may use limited functional cookies necessary for authentication and session management. The Platform's privacy terms will be governed by the customer's subscription agreement.

5. Email communications

We send transactional emails (waitlist confirmations, contact form responses, investor portal access links) and periodic update emails (build updates, editorial content) to addresses provided through our forms.

• We use Microsoft 365 / Microsoft Graph API as our email service provider.
• We do not use third-party email marketing platforms (Mailchimp, Constant Contact, etc.) that include tracking pixels by default.
• We do not include tracking pixels or open-tracking tags in any outbound email.
• We do not include click-tracking redirects in any outbound email.

You can unsubscribe from waitlist emails at any time by replying "unsubscribe" to any email or by sending a request to info@discoverlegal.ai. Transactional emails responding to specific inquiries (e.g., your contact form submission) will be sent regardless of marketing email preferences.

6. Data security

We protect the limited information we collect using:

• TLS 1.3 encryption in transit for all data sent to and from the Marketing Site
• AES-256 encryption at rest for data stored in our database
• Row-level security policies at the database layer to restrict access
• Cryptographic key management through enterprise-grade infrastructure
• Regular security review of access patterns and infrastructure

The Marketing Site and supporting infrastructure are SOC 2 Type II compliant via our enterprise infrastructure provider.

No system is perfectly secure, and we cannot guarantee that information will never be accessed by unauthorized parties. We take reasonable measures to prevent such access and to respond promptly if it occurs.

7. Data retention

• Waitlist signups: retained until you unsubscribe, after which the record is deleted within 30 days
• Contact form submissions: retained for two years after the last communication, then deleted
• Investor inquiries: retained for two years after the last communication, then deleted; documents shared via the investor portal are subject to separate retention terms set forth in the portal access agreement
• Email communications: retained per the email service provider's standard retention (typically tied to mailbox storage)
• Server logs: retained for 30 days, then deleted

If you want your information deleted before the standard retention period, contact info@discoverlegal.ai with the request.

8. Your rights

If you are a resident of California, the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection laws, you may have specific rights with respect to your personal information, including:

• The right to access information we hold about you
• The right to correct inaccurate information
• The right to delete information
• The right to opt out of the sale of personal information (we do not sell personal information, so this right is satisfied by default)
• The right to opt out of certain processing
• The right to data portability
• The right to non-discrimination for exercising any of the above

To exercise any of these rights, contact info@discoverlegal.ai. We respond to verified requests within 30 days (or sooner if required by applicable law). We do not charge a fee for handling these requests.

8.1 California-specific notice (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act and the California Privacy Rights Act grant you specific rights with respect to your personal information.

In the past twelve months, Discover Docket:

• Has NOT sold personal information.
• Has NOT shared personal information for cross-context behavioral advertising.
• Has NOT used or disclosed sensitive personal information for purposes beyond those permitted under the CPRA.

The categories of personal information we collect are described in Section 1 of this policy. The purposes for which we use the information are described in Section 2.

To exercise CCPA/CPRA rights, contact info@discoverlegal.ai with your request.

9. Children's privacy

The Marketing Site is not directed to children under 16. We do not knowingly collect information from children under 16. If you believe a child under 16 has provided information to us, contact info@discoverlegal.ai and we will delete the information promptly.

10. International users

The Marketing Site and supporting infrastructure are hosted in the United States. If you visit the site from outside the United States, your information will be transferred to and processed in the United States. We do not currently offer the Marketing Site or the Platform to users in jurisdictions that prohibit such transfer.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated to waitlist members by email and posted prominently on the Marketing Site for at least 30 days before they take effect.

12. Contact

For questions about this Privacy Policy, to exercise any rights described above, or to report a privacy concern, contact:

Discover Docket, Inc. Email: info@discoverlegal.ai Mail: [Insert mailing address before publishing]

We respond to privacy inquiries within 5 business days, and to formal requests for the exercise of statutory rights within the time required by applicable law.

---

This Privacy Policy is provided as our binding commitment with respect to information collected via the Discover Docket Marketing Site. The Platform, when launched, is governed by additional terms set forth in customer subscription agreements.