Privacy Policy
Draft date: October 22, 2026 · Contact: [email protected] (mailbox not yet active)
This Privacy Policy explains how Civic Offices LLC ("Civic Offices") collects, uses, discloses and protects personal information, including your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA").
1. Information we collect
- Account data: name, email, phone, organization, authentication data (passkeys, hashed credentials).
- Customer Content: matters, documents, evidence, correspondence, recipient names and addresses you provide.
- Payment data: processed by our payment processor; we receive limited details (e.g., card brand, last four).
- Usage & device data: logs, IP address, browser type, API request metadata, agent credential activity.
- Waitlist: during pre-launch, an email address you voluntarily submit.
2. How we use it
To provide and secure the Services; to transmit correspondence you approve; to keep audit and approval records; to bill; to communicate about your account; to comply with law. We do not use Customer Content to train AI models.
3. Sale and sharing
We do not sell personal information and do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA. We do not knowingly collect information from children under 16.
4. Disclosures
To service providers/contractors acting on our behalf (see Subprocessors), to recipients you direct us to send to, when required by law, or in a business transfer subject to this policy.
5. Sensitive personal information
We use sensitive personal information (such as account log-in credentials) only for purposes permitted under Cal. Code Regs. tit. 11, § 7027(m) [Attorney review: confirm citation], and not to infer characteristics.
6. Retention
See our Data Retention schedule.
7. Your California rights
Subject to verification and exceptions, you may request to: know/access the categories and specific pieces of personal information we hold; delete it; correct inaccuracies; opt out of sale/sharing (we do neither); limit use of sensitive personal information; and not be discriminated against for exercising these rights. You may use an authorized agent. We honor Global Privacy Control signals. Requests: [email protected] (mailbox not yet active) or in-app Settings → Data once accounts open. We respond within 45 days as required.
8. CCPA categories (last 12 months)
| Category | Collected | Disclosed to |
|---|---|---|
| Identifiers | Yes | Service providers |
| Customer records (Cal. Civ. Code § 1798.80) | Yes | Service providers; recipients you direct |
| Commercial information | Yes | Payment processor |
| Internet/network activity | Yes | Hosting & security providers |
| Geolocation (precise) | No | — |
| Sensitive PI (log-in credentials) | Yes | Not disclosed except to auth infrastructure |
9. Security
Encryption in transit and at rest, least-privilege access, audited support access. No method is perfectly secure.
10. Shine the Light
We do not disclose personal information to third parties for their direct marketing purposes.
11. Changes & contact
We will post updates here with a new date. Contact: [email protected].