Discover Docket
Legal

Privacy Policy

Your privacy is fundamental to how we operate. This policy explains how Discover Docket collects, uses, and protects your information.

Last updated: March 2026

HIPAA Compliant
AES-256 Encryption
TLS 1.2+ Secured
SOC 2 Type II

1. Introduction

Discover Docket (“we,” “our,” or “us”) is committed to protecting the privacy and confidentiality of our users' information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the Discover Docket platform and related services.

As a platform designed for legal professionals, we understand the heightened sensitivity of the information you entrust to us. We are committed to maintaining the highest standards of data protection and confidentiality.

2. Information We Collect

We collect the following categories of information:

Account Information: When you register, we collect your name, email address, bar number, firm name, and billing information.

Professional Information: Information about your law firm, practice areas, jurisdictions, and professional credentials.

Usage Data: Information about how you interact with our platform, including features used, pages visited, and actions taken.

Client and Matter Data: Case files, client information, documents, communications, and other legal work product you upload or create within the platform.

Technical Data: IP addresses, browser type, device identifiers, and other technical information collected automatically when you use the Service.

Communications: Records of your communications with our support team and any feedback you provide.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related information
  • Send administrative information, such as updates and security alerts
  • Respond to comments and questions and provide customer support
  • Train and improve our AI models (using anonymized, aggregated data only)
  • Monitor and analyze usage patterns to improve user experience
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Comply with legal obligations

Important: We do not use your client data or privileged communications to train our AI models without your explicit consent. Client matter data is processed solely to provide the Service to you.

4. Data Security

We implement comprehensive security measures to protect your information:

  • Encryption at Rest: All data stored on our servers is encrypted using AES-256 bit encryption
  • Encryption in Transit: All data transmitted between your browser and our servers uses TLS 1.2 or higher
  • Access Controls: Role-based access controls ensure that only authorized personnel can access your data
  • Audit Logging: All access to your data is logged and monitored for suspicious activity
  • Multi-Factor Authentication: We require MFA for all user accounts
  • Regular Security Audits: We conduct regular third-party penetration testing and security audits
  • HIPAA Compliance: Our platform is designed and operated in compliance with HIPAA requirements

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

  • Service Providers: We share information with trusted third-party service providers who assist us in operating the platform, subject to strict confidentiality agreements
  • Legal Requirements: We may disclose information when required by law, court order, or governmental authority
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
  • With Your Consent: We may share information with third parties when you have given us explicit consent to do so

6. Attorney-Client Privilege and Confidentiality

We recognize the unique confidentiality obligations of legal professionals. Discover Docket is designed to support, not undermine, your professional obligations:

  • We treat all client matter data as confidential and privileged
  • Our employees are trained on the importance of legal confidentiality
  • We will not voluntarily disclose client information to third parties without your authorization
  • We will notify you promptly if we receive a legal demand for your client data
  • We will work with you to assert applicable privileges before complying with any such demand

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. You may request deletion of your account and associated data at any time. Upon account termination:

  • We will provide a data export within 30 days of your request
  • We will delete your data within 90 days of account termination
  • Certain data may be retained longer as required by law or for legitimate business purposes
  • Anonymized, aggregated data may be retained indefinitely

8. Your Rights and Choices

You have the following rights regarding your information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request a machine-readable export of your data
  • Opt-Out: Opt out of marketing communications at any time
  • Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at privacy@discoverdocket.com.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. These include:

  • Essential Cookies: Required for the platform to function properly
  • Analytics Cookies: Help us understand how users interact with the platform
  • Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect platform functionality.

10. HIPAA Compliance

To the extent that Discover Docket processes Protected Health Information (PHI) on behalf of covered entities or business associates, we operate as a Business Associate under HIPAA. We maintain a Business Associate Agreement (BAA) with all applicable customers and implement the required administrative, physical, and technical safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Discover Docket Privacy Team

privacy@discoverdocket.com

legal@discoverdocket.com

Response time: within 2 business days