Privacy Policy

01Who this covers

This policy explains how Datalogian LLC, which operates Prepped BK (“we”, “us”) handles information about three groups of people:

• Firm users: attorneys and staff at law firms that use Prepped BK.
• Clients: people whose law firm sends them a Prepped BK upload link.
• Visitors: people who visit preppedbk.com or request access.

02The short version

• If you are a Client, your law firm controls your information. We handle it for the firm, on its instructions.
• We do not sell personal information or use it for advertising.
• Your documents are never used to train AI models.
• We do not keep Social Security numbers in the data we pull from documents.
• Uploaded files are encrypted and deleted automatically on a schedule the firm sets.

03If you are a law firm’s client

Your law firm decides what to collect from you and why. Under privacy law the firm is the controller (or “business”) and we are its processor (or “service provider”). We use your information only to provide Prepped BK to your firm, under a written agreement that limits what we can do with it. That agreement is our Data Processing Agreement.

For questions about your case, or to see, correct or delete your information, contact your law firm. If you contact us, we will pass your request to your firm.

04What we collect

From Clients, through the upload link

• Documents the firm asks for, such as pay stubs, bank statements, tax returns, credit reports and photo IDs.
• The information in those documents, such as names, addresses, employers, income, account balances, transactions, debts and creditors. Account numbers are cut to the last four digits in the data we extract.
• Contact details the firm enters so we can send upload links and reminders.
• Answers the Client gives in the questionnaire, when the firm turns it on for the case.

From firm users

• Name, email, firm name, bar admission state and number, and role.
• Sign-in and two-factor authentication data.
• Billing contact details. Card details go to Stripe, and we do not store full card numbers.

From visitors and access requests

• Name, firm, email, bar state and number, case volume and website, if you fill in the access form.

Automatically

• Technical logs such as IP address, browser type and the time of each request, kept to run and secure the Service.
• An audit log of actions in a firm’s account, such as sign-ins, uploads, exports and deletions.
• Cookies needed to keep you signed in and protect against misuse. We do not use advertising cookies.

05Social Security numbers

Prepped BK is built so Social Security numbers are not kept in the data we extract: there is no place for one, and the system refuses to save anything that looks like one. Some original files (a tax return, for example) may show a Social Security number on the page. Those files are encrypted and are deleted automatically on the firm’s retention schedule.

06How we use information

• To read documents, check the math, find what is missing and organize data for the firm.
• To send Clients upload links and reminders on the firm’s behalf.
• To prepare a paralegal review of a case, when the firm orders one.
• To verify attorneys, run accounts and bill firms.
• To secure the Service, prevent fraud and investigate problems.
• To meet legal obligations.

07AI document reading

We use Anthropic’s commercial API to read uploaded documents. Anthropic processes the content to return results to us and does not use it to train its models. We do not use Client documents or data to train any AI model. A firm attorney reviews the results before anything is filed.

08Paralegal review

A law firm can order a paralegal review of a case. When it does, a trained paralegal employed by Datalogian LLC, bound by confidentiality, reviews that case for the firm: the uploaded documents, the reading results and flags, and the Client’s answers. The reviewer sends written notes to the firm.

• The reviewer can see only that case, and cannot change anything in it.
• Access ends when the notes are delivered or 7 days after the firm’s request, whichever comes first.
• Every view and download by the reviewer is logged, and the firm can see the log.
• The reviewer does not contact the Client. The review is not legal advice, and the firm’s attorney remains responsible for the case.

09How we share information

We do not sell personal information, and we do not share it for targeted advertising. We share it only:

• With the law firm the information belongs to.
• With our own trained paralegal review staff, for one case at a time, only when the firm orders a paralegal review of that case.
• With the service providers below, who may use it only to provide their services to us.
• When the law requires it. For Client information, we will notify the firm first when we are allowed to, so it can protect privilege and confidentiality.
• In a merger or sale of our business, to a buyer bound by commitments at least as protective as these. We will tell affected firms before that happens.

10How long we keep it

• Uploaded files: deleted automatically, along with their encryption keys, when the firm’s retention window runs out. The firm sets the window, from 1 to 90 days after upload.
• Case data: kept until the firm deletes it or closes its account. After an account closes, we delete it within 30 days, and backup copies age out within a further 30 days. Paralegal review notes are case data.
• Account and billing records: kept while the account is open and afterward as long as tax and accounting laws require.
• Access requests: kept until we decide on the request, and up to two years after that.

11How we protect it

Files are encrypted in the Client’s browser before upload and stored encrypted. Sensitive data is encrypted at the application level on top of our providers’ storage encryption. Each firm’s data is walled off from every other firm’s in the database itself. Every firm user and paralegal reviewer signs in with two-factor authentication, and account activity, including every reviewer view and download, is recorded in an audit log.

No system is perfectly secure. If a security incident affects Client information, we will notify the affected firm without undue delay and within 72 hours, as our DPA describes. Firms decide how to notify their Clients, and we help.

12Your choices and rights

Depending on where you live, you may have the right to know what personal information we hold about you, get a copy, correct it, or have it deleted.

• Clients: please contact your law firm. If you contact us, we will forward the request to the firm and help it respond.
• Firm users and visitors: email support@preppedbk.com. We will verify the request and respond within the time the law requires. We will not treat you differently for using these rights.

Some laws exempt certain financial or business information. Where an exemption applies, we will still consider reasonable requests.

13Children

Prepped BK is for law firms and their adult clients, and it is not directed to children. A Client’s documents may mention dependents (on a tax return, for example). That information is handled as Client information under the firm’s control.

14Where information is processed

We and our service providers process information in the United States.

15Changes to this policy

If we make material changes, we will update the date at the top and email firm account owners before the changes take effect.

16Contact

Privacy questions: support@preppedbk.com.