Privacy Policy

Last updated: April 2026

This policy may be updated at any time to reflect changes in our practices or legal requirements. We will notify registered users via email at least 30 days before material changes take effect. We encourage you to review this page periodically.

1. Information We Collect

When you use FirmDraft, we collect only the information necessary to provide our service:

  • Account information: email address, name, and company name when you create an account.
  • Contract data: the form inputs you provide to generate contracts (party names, dates, jurisdictions, etc.).
  • Usage data: anonymized analytics to improve the product (pages visited, features used).
  • Payment information: processed securely by Stripe. We never store your credit card details.
  • IP addresses: hashed and stored temporarily for rate limiting and abuse prevention. Raw IP addresses are never stored.

2. How We Use Your Data

  • To generate and store your contracts.
  • To manage your account and subscription.
  • To improve our service and fix bugs.
  • To send important service updates (never marketing spam).
  • To enforce usage limits and prevent abuse.

3. What We Never Do

  • We never sell your data to third parties.
  • We never share your contracts or form data with anyone.
  • We never use your data to train AI models.
  • We never send unsolicited marketing emails.

4. Data Storage & Security

Your data is stored on secure, encrypted servers. We use industry-standard security measures including TLS encryption in transit, encrypted databases at rest, and role-based access controls.

5. Data Retention & Deletion

We retain your data for as long as your account is active. When you delete a contract, its content and form data are permanently removed. Anonymized generation records may be retained for usage tracking. When you delete your account, all personal data is permanently removed within 30 days.

6. PIPEDA Compliance

FirmDraft complies with Canadas Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access, correct, or delete your personal information at any time.

7. Cookies

We use essential cookies to keep you signed in and optional analytics cookies (Google Analytics) to understand how the product is used. You can manage cookie preferences at any time via our cookie consent banner.

8. Your Rights

  • Request a copy of all data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and all associated data.
  • Withdraw consent for optional data processing at any time.

9. Changes to This Policy

FirmDraft reserves the right to update this privacy policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated via email at least 30 days before they take effect. A notice will also be displayed on the platform. Continued use of the Service after the effective date of changes constitutes your acceptance of the revised policy.

10. Contact

Questions about this policy? Email us at hello@firmdraft.com