Privacy Policy
Last updated: April 14, 2026
This Privacy Policy describes how CounselDraft.ai (“CounselDraft,” “we,” “us,” or “our”), operated by Meticulosity Media LLC, an Arizona limited liability company, collects, uses, stores, and protects information when you use our platform. By accessing or using CounselDraft.ai, you agree to the terms of this Privacy Policy.
1. Information We Collect
We collect the following categories of information:
Account Information. When you create an account, we collect your email address, name, and optional professional details including firm name, firm address, and bar number.
Document Content. We collect the legal document content, form data, and transaction details you create, upload, or store within the platform. This may include personally identifiable information about third parties (such as your clients, buyers, sellers, or counterparties) that you enter in the course of drafting real estate documents.
Usage Data. We collect information about how you interact with the platform, including features used, pages visited, and actions taken, to improve the service.
Technical Data. We collect your IP address, browser type, operating system, and session identifiers for security and operational purposes.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the CounselDraft.ai service
- Authenticate your identity and manage your session
- Save, retrieve, and organize your documents
- Personalize your experience
- Communicate with you about your account, updates, and support matters
- Detect and prevent fraud, abuse, and security incidents
- Comply with applicable legal obligations
We do not sell your personal information to third parties.
3. Artificial Intelligence Features
CounselDraft.ai uses AI-assisted features to help generate and refine legal document drafts. We use multiple AI providers to deliver these features, including Anthropic (Claude), OpenAI (GPT), Google (Gemini), and Cloudflare Workers AI.
Training data. Document content and prompts you submit through CounselDraft.ai’s AI features are transmitted to these providers solely to generate a response. We do not authorize our AI providers to use your content to train or improve their foundational models, and each of our providers’ enterprise or API agreements restrict such use. Your document content is not used to train AI models.
Prompt and completion logging. AI providers may transiently process your inputs to generate responses. Any such processing is governed by their respective data processing agreements, which limit retention and prohibit secondary use.
Attorney-client confidentiality. If you are a licensed attorney, you are responsible for ensuring that your use of AI-assisted features complies with your jurisdiction’s professional responsibility rules regarding client confidentiality. CounselDraft.ai’s contractual restrictions on AI provider data use are designed to support — but do not independently guarantee — the maintenance of attorney-client privilege.
4. Data Roles: Controllers and Processors
When you use CounselDraft.ai to draft documents on behalf of your clients, you act as the data controller for your clients’ personal information, and CounselDraft.ai acts as a data processor on your behalf. You are responsible for ensuring you have any required authority or consent to enter your clients’ personal information into the platform.
5. Third-Party Services
We use the following third-party service providers. Each operates under its own privacy policy and data processing terms:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Authentication, database, and data storage | supabase.com/privacy |
| Vercel | Hosting and web analytics | vercel.com/legal/privacy-policy |
| Optional OAuth sign-in | policies.google.com/privacy | |
| Anthropic | AI document assistance (Claude) | anthropic.com/privacy |
| OpenAI | AI document assistance (GPT) | openai.com/policies/privacy-policy |
| Google (Gemini) | AI document assistance | policies.google.com/privacy |
| Cloudflare Workers AI | AI document assistance | cloudflare.com/privacypolicy |
6. Data Storage and Security
We take the security of your legal documents and personal information seriously. All data is encrypted at rest using AES-256 and protected in transit using TLS 1.2 with modern cipher suites. Access control is enforced at the database level using row-level security policies — your documents are isolated to your authenticated account at the infrastructure layer, not merely the application layer, meaning unauthorized access is prevented even if application-layer code were ever compromised.
Our infrastructure undergoes annual independent third-party security audits and is certified under SOC 2 Type II and ISO/IEC 27001:2022. We never use your documents, contract data, or personal information to train artificial intelligence or machine learning models without your explicit prior written consent.
While we employ rigorous security measures, no method of transmission over the internet or electronic storage is completely infallible. You transmit information to us at your own risk, and we encourage you to use strong, unique passwords and to enable multi-factor authentication on your account.
7. Data Retention
We retain your account information and document data for as long as your account remains active. If you delete your account, your account information and associated documents will be permanently deleted within 30 days of the deletion request, except where retention is required by law. Residual copies in encrypted backups may persist for up to 90 days before being purged.
8. Cookies
We use essential cookies for authentication and session management. These are required for the platform to function and cannot be disabled. We may also use analytics cookies to understand aggregate usage patterns. You can control non-essential cookie settings through your browser preferences, though disabling essential cookies will prevent you from using the platform.
9. Your Rights
You have the following rights regarding your personal information:
- Access. You may access your account information at any time through your profile settings.
- Correction. You may update or correct your account information through your profile settings.
- Deletion. You may request deletion of your account by contacting us at support@counseldraft.ai. Deletion will be completed within 30 days.
- Portability. You may request an export of your account data and documents by contacting us.
- Opt-out of communications. You may opt out of non-essential communications at any time using the unsubscribe link in our emails.
California Residents. If you are a California resident, you have additional rights under the CCPA and CPRA, including the right to know what personal information we collect and how it is used, the right to request deletion, the right to correct inaccurate information, and the right to non-discrimination for exercising your privacy rights. Contact us at support@counseldraft.ai. We will respond within 45 days as required by law.
10. Children’s Privacy
CounselDraft.ai is not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have inadvertently collected such information, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email and through a notice on the platform at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
12. Governing Law
This Privacy Policy is governed by the laws of the State of Arizona, without regard to its conflict of law provisions.
13. Contact
If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at: support@counseldraft.ai
Meticulosity Media LLC / CounselDraft.ai