Privacy Policy

BespokeDocs LLC ("BespokeDocs," "we," "us") operates bespokedocs.com as a technology platform facilitating attorney-supervised contract review. This Privacy Policy explains how we collect, use, and protect information submitted through the Platform. BespokeDocs LLC is not a law firm and is not a party to any attorney-client relationship formed through the Platform.

Information submitted after execution of an engagement letter is protected by attorney-client privilege between you and the attorney assigned to your matter. That privilege and the attorney's professional confidentiality obligations are separate from and in addition to this Policy.

Intake information — When you submit a contract for review, we collect your name, email address, company name, counterparty name, contract type, page count, and any notes you provide about your concerns.

Contract documents — The contract file you upload for review.

Engagement letter execution data — Timestamp, IP address, and attestation text recorded when you execute the engagement letter via clickwrap.

Payment information — Payment is processed by Stripe. BespokeDocs does not collect or store your credit card or banking information. Stripe's privacy policy governs their handling of payment data.

Usage data — Standard server logs including browser type, pages visited, and timestamps. We do not use tracking cookies for advertising purposes.

We use the information you provide to:

• Process your contract review request and facilitate the engagement between you and the Attorney
• Run a conflict check against our client database before accepting your matter
• Generate and deliver your engagement letter, attorney memo, and redline
• Communicate with you about your matter
• Maintain matter records as required by applicable professional obligations
• Improve our platform and services

We do not sell, rent, or share your personal information or contract documents with third parties for marketing purposes.

BespokeDocs uses AI services provided by Anthropic, PBC to assist with contract analysis. When you submit a contract for review, your contract text and intake information are transmitted to Anthropic's API solely for the purpose of generating a first-pass analysis for attorney review.

Anthropic does not use data submitted through the API to train its models, pursuant to Anthropic's API usage policy. BespokeDocs does not authorize or permit such use.

All AI-generated analysis is reviewed, edited, and approved by the Attorney before delivery. The Attorney is responsible for all delivered work product.

Intake data is stored in Google Workspace (Google Sheets and Google Drive) using a service account with access limited to BespokeDocs operations. Contract documents and work product are stored in Google Drive in a matter folder accessible only to the Attorney and BespokeDocs platform services.

We use industry-standard security practices including encrypted transmission (HTTPS), access controls, and limited data retention. No system is perfectly secure — if you believe your information has been compromised, please contact us immediately.

Client matter files — including the engagement letter, contract, memo, and correspondence — are retained for a minimum of seven (7) years in accordance with the Attorney's professional obligations. Intake data (name, email, company, contract type) is retained in our records for operational and conflict-check purposes.

You may request deletion of your pre-engagement intake data (submitted before an engagement letter is executed) by contacting us at support@bespokedocs.com. Data that is part of an active or completed attorney-client matter is subject to the Attorney's professional retention obligations and may not be deleted upon request.

BespokeDocs uses the following third-party services in operating the Platform:

• Stripe — Payment processing. Governed by Stripe's Privacy Policy.
• Anthropic — AI-assisted contract analysis. Governed by Anthropic's Privacy Policy.
• Google Workspace — Data storage and email delivery. Governed by Google's Privacy Policy.
• Vercel — Platform hosting. Governed by Vercel's Privacy Policy.

We encourage you to review the privacy policies of these services. BespokeDocs is not responsible for the privacy practices of third-party services.

You may contact us at any time to request access to, correction of, or deletion of your personal information, subject to the limitations described in Section 6. We will respond to requests within 30 days.

If you are located in California or another jurisdiction with specific data privacy rights, additional rights may apply. Contact us to discuss your specific situation.

BespokeDocs is intended for business use by adults. We do not knowingly collect information from individuals under 18 years of age.

We may update this Policy from time to time. The effective date above reflects the most recent revision. Material changes will be communicated by updating the effective date and, where appropriate, by direct notification.

Questions about this Privacy Policy or your data may be directed to:

BespokeDocs LLC

support@bespokedocs.com

www.bespokedocs.com