Privacy policy

1. Overview

This Privacy Policy explains how Docket ("we," "us") collects, uses, and protects information when your organization and its users access our litigation finance coordination platform. We process data as a service provider to your organization; your organization remains responsible for the content you upload and the counterparties you invite.

2. Information we collect

• Account data: name, work email, organization affiliation, role, authentication events, and session metadata.
• Matter data: titles, metadata, disclosure settings, access grants, messages, and documents you choose to upload.
• Usage and audit data: actions taken in the product (for example uploads, downloads, access changes, and invitations) to support security, troubleshooting, and matter activity history.
• Technical data: IP address, browser type, device identifiers, and cookies used for authentication and security.

3. How we use information

We use collected information to:

• Provide, secure, and maintain the Docket service
• Authenticate users and enforce access controls you configure
• Send transactional notifications (invites, access decisions, reporting reminders)
• Generate audit trails and activity logs for matters
• Improve reliability and support customers
• Comply with law and respond to lawful requests

We do not sell personal information. We do not use matter documents to train public models.

4. Sharing and subprocessors

We share information only as needed to operate the service, including with infrastructure and subprocessors such as cloud hosting, database, object storage, email delivery, and (when enabled) calendar or push notification providers. Counterparties you invite may see matter content according to the disclosure level and permissions you set.

A current subprocessor list is available on request. Enterprise customers may require a data processing agreement describing subprocessors and security measures.

5. Retention and security

We retain account and matter data while your organization uses Docket and as needed for backup, audit, and legal compliance. We apply access controls, encryption in transit, and least-privilege administrative access. No method of transmission or storage is completely secure; you should use strong passwords and limit user access within your organization.

6. Your rights and choices

Depending on your jurisdiction, users may have rights to access, correct, delete, or export personal data. Organization administrators can manage user accounts and matter content in the product. Contact us to exercise rights we cannot fulfill through self-service tools.

You may adjust email and push notification preferences in Settings where those features are enabled.

7. International transfers

If you access Docket from outside the United States, your information may be processed in the United States or other countries where we or our subprocessors operate. We take steps designed to protect data in line with applicable law.

8. Children

Docket is a business service not directed to individuals under 18. We do not knowingly collect information from children.

9. Changes and contact

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, notifying workspace administrators.

Privacy questions or requests: privacy@usedocket.com.