Last Updated: August 5, 2026

Legalpreneur, Inc. (“Legalpreneur,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have.

This Policy applies to thelegalpreneur.com, thecontractvault.com, the Legalpreneur platform, and our related products and services (collectively, the “Services”).

This Policy replaces our prior privacy policy in its entirety. It has been substantially expanded to describe our AI features and to add U.S. state privacy rights.

1. The Short Version

We want you to be able to understand this without reading all of it, so here is the summary. The details follow, and the details control.

• We do not sell your personal information. We do use advertising pixels on our public marketing pages, which some state laws treat as “sharing” — you can opt out (Section 8).
• We collect what we need to run your account, generate your documents, make your filings, take your payment, support you, and market our own products.
• We use third-party AI providers to power the AI legal assistant and contract generator. What you type goes to them to produce your answer.
• We use de-identified information — with direct identifiers removed — to improve our Services, including our AI features. You can opt out (Section 6.3).
• Nothing you send us is protected by attorney-client privilege. We are not a law firm. This is the single most important thing on this page.
• You have rights over your information, including access, correction, and deletion. Section 10 explains how to use them.

2. Critical Notice: No Privilege, No Confidentiality Guarantee

Legalpreneur is not a law firm, and using the Services does not create an attorney-client relationship. This has a direct privacy consequence that differs from working with your own attorney:

Information you submit through the Services — including questions to the AI legal assistant, documents you upload, and anything you say in Legal Office Hours — is NOT protected by attorney-client privilege or the attorney work-product doctrine.

In practice, this means such information could potentially be obtained by an opposing party in litigation, by a government agency through lawful process, or through a subpoena — where genuinely privileged communications with your own attorney might not be.

Before you type something into the Services, consider whether you would want it disclosed. If you have a matter where privilege matters — active or threatened litigation, a government investigation, a serious dispute, or potential exposure — talk to your own attorney rather than typing it here.

We treat your information carefully and confidentially as a matter of our own practice and contract. That is not the same as legal privilege.

3. Information We Collect

3.1 Information You Give Us

Account and identity information: Name, email address, phone number, mailing and billing addresses, password, and login credentials.

Business information: Business or entity name, entity type, EIN or tax ID, formation state, business address, industry, ownership and member or officer information, ownership percentages, and the names and addresses of other individuals associated with your business.

Note: Some of this necessarily includes personal information about other people — your co-owners, officers, registered agent contacts, and counterparties. You are responsible for having a lawful basis to provide it, and for telling those people that you have.

Payment information: Billing address, payment card type, last four digits, and expiration date. Full payment card numbers are collected and stored by our payment processors, not by us.

Content you submit: Documents you upload, contracts you generate and store, information you enter into the contract generator, questions and prompts you submit to the AI legal assistant, responses to business audit or Legalpreneur Score™ questionnaires, and support messages.

Electronic signature information: When you send a document for signature, we collect and process the names and email addresses of the signers you designate — who are often not our users — along with signature audit trail data including timestamps, IP addresses, and the sequence of viewing and signing events, because a valid audit trail is what makes an electronic signature defensible.

Note: When you send a document for signature, you are directing us to process personal information about your counterparties. You are responsible for having a lawful basis to provide their information and for the accuracy of the email addresses you enter. We use signer information only to deliver, complete, and evidence that signature request — we do not market to your signers or add them to our mailing lists.

Filing information: Information required for entity formation, annual reports, and trademark applications — which may include personal identifiers and, only where a specific government form requires it, dates of birth and identification document numbers. See Section 3.4.

Communications: Emails, chat messages, support tickets, survey responses, testimonials, and your participation in Legal Office Hours (including recordings) and community spaces.

3.2 Information We Collect Automatically

Device and usage data: IP address, browser type and version, operating system, device identifiers, referring and exit pages, pages viewed, links clicked, features used, search queries within the Services, session duration, timestamps, and crash and error logs.

Approximate location: Derived from your IP address, and, where you access the Services from a mobile device, general geographic location. We do not collect precise GPS location.

Cookies and similar technologies: See Section 8.

Email engagement: Whether you open our emails and which links you click, via pixels and tracked links.

Unlike our prior policy, we want to be accurate here: while we use IP addresses primarily for analytics and security, IP address is treated as personal information under several state laws, and it can be associated with your account. We do not claim it is entirely unlinked from your identity.

3.3 Information From Third Parties

• Payment processors — transaction confirmations, chargeback and dispute notices, and limited card details
• Government and public records — filing status, acceptance or rejection notices, entity and trademark records, and service-of-process documents received in our capacity as your registered agent
• Service providers — analytics, fraud and security signals, and email deliverability data
• Social and advertising platforms — engagement data where you interact with our content or ads, subject to their own policies
• Referral sources — if someone refers you, we may learn your name and email from them

3.4 Sensitive Information

Some information we collect is treated as sensitive under state law, including account login credentials, government identification numbers (such as EIN, SSN, or ID numbers where a government filing requires them), and precise financial account information held by our processors.

We collect sensitive information only where strictly necessary to provide the specific Service you requested — primarily to complete a government filing you asked us to make, and to process your payment — and we never use or disclose it to infer characteristics about you, or for advertising, product improvement, or AI training.

We ask for it only at the point of need, and we tell you why. When a government form requires an identification number, we request it at that step, explain which filing requires it, and proceed only with your affirmative consent. You can decline — you simply cannot complete that particular filing through us. We do not collect sensitive information “just in case,” and we do not retain it beyond the retention period in Section 9.

Please do not submit sensitive information we do not need. In particular, do not upload health records, biometric data, information about your race, religion, sexual orientation, union membership, immigration status, or precise geolocation, and do not submit information about children. If you upload a document containing such information, we will handle it under this Policy but we do not seek it.

4. Why We Collect It

We use your information to:

We do not use your information for purposes materially different from these without telling you first.

5. Automated Decision-Making

The Legalpreneur Score™ is generated automatically from information you provide. It is informational only. It does not determine your pricing, your eligibility for the Services, your access to features, or any legal or financial decision we make about you, and it has no legal effect on you. It is not shared with lenders, insurers, or third parties for decisions about you.

We do not use profiling to make automated decisions that produce legal or similarly significant effects about you.

One clarification, for accuracy: we use automated signals to detect account sharing, fraud, and abuse, and a suspension or termination of your account can follow. No account is suspended or terminated by an automated process alone — a human reviews the case and makes the decision, and you may contest it by emailing hello@thelegalpreneur.com. If your account is suspended, we will tell you why.

6. AI Features — How Your Inputs Are Handled

This section is new, and it describes the part of the Services most people have questions about.

6.1 What Happens When You Use the AI Assistant or Contract Generator

When you submit a question or generate a contract:

1. Your input — along with relevant context from your account, such as your business type and state — is transmitted to our AI platform provider, Chatbase, and to the underlying language model provider Chatbase uses to generate the response.
2. The provider processes the input and returns an output.
3. We store the input and output in your account so you have a record and so we can support you.

We do not operate our own foundation models. The AI features depend on third-party providers under contracts that restrict their use of the data we send.

Our AI platform provider is Chatbase. Chatbase states that it does not use customer data to train AI models, and uses retrieval-augmented generation to answer from our own content rather than incorporating your data into a model. Chatbase reports being SOC 2 compliant, and we have a data processing agreement in place with them. Chatbase maintains its own list of subprocessors, including the language model providers it relies on; we will provide the current list on request.

6.2 What We Do Not Do

• We do not sell your AI inputs or outputs.
• We do not use your identifiable inputs to train AI models, and our agreements with our AI providers are intended to prevent them from using our customers’ inputs to train their general-purpose models.
• We do not share your inputs with other users, and one user’s information is not used to answer another user’s question in identifiable form.

6.3 What We Do Do: De-Identified Product Improvement

We use de-identified information derived from your use of the Services — including AI inputs and outputs, generated documents, and usage patterns — to improve and develop our Services. This includes improving our prompts, templates, retrieval systems, scoring methodology, and feature design, and evaluating output quality.

Before using information this way, we remove direct identifiers, including names, business names, email addresses, phone numbers, addresses, account identifiers, tax and government ID numbers, and counterparty names.

We want to be honest about the limits of this. Legal documents and AI questions are free text, and free text can contain identifying detail that no automated stripping process catches — an unusual set of facts, a distinctive business arrangement, a named location. So in addition to removing identifiers, we:

• Contractually and internally prohibit any attempt to re-identify de-identified information, except as permitted by law solely to test whether our de-identification is working
• Maintain technical and organizational controls to keep de-identified information separate from the identifiers we removed
• Do not disclose de-identified information to a third party without obligating them to the same prohibitions
• Aggregate wherever possible, so that improvement work is based on patterns across many users rather than on any individual’s documents

We treat de-identified information as outside the scope of “personal information” for the purposes described in this Section. If we cannot de-identify particular information to this standard, we do not use it for product improvement.

You may opt out of de-identified product improvement. Email hello@thelegalpreneur.com with the subject line “Opt out of product improvement.” Opting out does not degrade the Services you receive, and we will not charge you differently for it.

6.4 Human Review

A limited number of authorized personnel may review specific AI inputs and outputs where necessary to respond to a support request you submit, investigate a suspected violation of our Terms of Use, address a safety or security issue, or comply with law. Access is limited to those who need it.

6.5 What You Should Not Put Into the AI

Given Section 2, we recommend you do not submit into the AI features:

• Details of active, threatened, or anticipated litigation, or communications with your own attorney
• Information subject to another party’s confidentiality obligations you would breach by disclosing
• Sensitive personal information about other people that is not necessary for the task
• Trade secrets whose value depends on absolute secrecy

7. When We Share Information

We do not sell your personal information for money. We do not rent, trade, or disclose your account information, documents, filing information, or AI inputs to unaffiliated third parties for their own promotional purposes.

We do use advertising pixels on our public marketing pages, which several state laws treat as “sharing” or “targeted advertising.” Section 8 explains this and tells you how to opt out.

We share information in these circumstances only:

7.1 Service Providers

We share information with vendors who perform functions on our behalf, under contracts that limit them to using it only for our purposes. These fall into the following categories:

• AI and language model providers — to power the AI assistant and contract generator (see Section 6.1)
• Electronic signature providers — to send documents for signature and maintain signature audit trails
• Payment processors — to charge you and manage subscriptions and refunds
• Cloud hosting and storage providers — to host the platform and store your documents
• Email, SMS, and CRM platforms — to send account and marketing communications
• Analytics and error-monitoring providers — to understand usage and diagnose problems
• Video conferencing and webinar platforms — to run and record Legal Office Hours
• Community and course-hosting platforms — to deliver courses and community access
• Registered agent providers — in states where we engage a third party to act as your registered agent
• Filing and government-interface vendors — where used to submit filings
• Professional advisors — accountants, auditors, insurers, and attorneys

A current list of the specific vendors in these categories is available on request at hello@thelegalpreneur.com.

7.2 Government Agencies — And a Note About Public Records

To provide filing and registered agent services, we submit your information to Secretaries of State, the USPTO, and other agencies as required by the specific filing you request.

Please understand: much of what appears on a business filing becomes a public record. Entity names, registered agent names and addresses, member, manager, or officer names and addresses, and trademark applicant information are typically published by the agency and searchable by anyone. This is a function of how business registration works, not a choice we make, and once a filing is public we cannot make it private.

If you are concerned about your home address appearing in public records, tell us before we file and we will discuss the options available in your state.

7.3 Participating Attorneys

Attorneys who participate in Legal Office Hours will see and hear what you share in those sessions. As stated in Section 2 and in our Terms of Use, this does not create an attorney-client relationship and is not privileged. Other attendees are also present.

7.4 Legal Requirements and Protection of Rights

We may disclose information where we believe in good faith it is necessary to:

• Comply with a law, regulation, subpoena, court order, or lawful government request
• Respond to service of process received in our capacity as your registered agent — which we will forward to you as the whole point of that service
• Enforce our Terms of Use, or establish, exercise, or defend legal claims
• Investigate fraud, security incidents, or violations of our policies
• Protect the rights, property, or safety of Legalpreneur, our users, or the public

Where we are legally permitted to notify you of a government request for your information, we will make reasonable efforts to do so.

7.5 Corporate Transactions

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will require the recipient to honor this Policy with respect to information transferred, or we will notify you and give you an opportunity to delete your information before the transfer takes effect.

7.6 With Your Direction

We share information where you ask us to — for example, sending a generated contract to a counterparty on your instruction, or adding an authorized user to your account.

7.7 Aggregated and De-Identified Information

We may share aggregated or de-identified information — such as statistics about how business owners use legal tools — that cannot reasonably be used to identify you.

8. Cookies and Tracking

We use cookies and similar technologies:

Cookies may be session cookies (deleted when you close your browser) or persistent cookies (which remain until they expire or you delete them). Some are set by third parties, including analytics and advertising platforms, which may collect information about your browsing across sites.

Your choices:

• Browser settings — most browsers let you block or delete cookies. Blocking all cookies will break parts of the Services.
• Do Not Track / Global Privacy Control — we honor the Global Privacy Control (GPC) signal as a valid opt-out of the sale or sharing of personal information where applicable. Browser “Do Not Track” headers have no consistent standard and we do not respond to them separately.
• Platform opt-outs — you can opt out of interest-based advertising through industry tools such as optout.aboutads.info and youradchoices.com.

Your Right to Opt Out of Targeted Advertising

We want to be precise about this, because it is the kind of thing privacy policies routinely get wrong.

We do not sell your personal information for money, and we do not disclose your account information, documents, or AI inputs to advertisers. However, we do use advertising pixels on our public marketing pages — for example, to retarget visitors who viewed a product page but did not purchase. Under California, Virginia, Colorado, Connecticut, Texas, Oregon and similar laws, that activity can constitute “sharing” for cross-context behavioral advertising or “targeted advertising,” even though no money changes hands.

So you have a real right to opt out, and here is how to use it:

• Click “Do Not Sell or Share My Personal Information” in our website footer, or
• Enable Global Privacy Control (GPC) in your browser or extension — we honor it as a valid opt-out signal, or
• Email hello@thelegalpreneur.com with the subject line “Opt out of targeted advertising”

Opting out will not affect your access to the Services, your price, or the quality of what you receive.

Advertising pixels operate on our public marketing pages, not inside your logged-in account. Your documents, AI conversations, filing information, and Legalpreneur Score™ are never used for advertising.

9. How Long We Keep Information

We keep personal information only as long as necessary for the purposes described in this Policy, then delete or de-identify it. Our general practice:

We may retain information longer where required by law, or where necessary to establish, exercise, or defend legal claims, including under a litigation hold.

10. Your Privacy Rights

10.1 Rights Available to You

Depending on where you live, you may have the right to:

• Know and access — what personal information we have about you, where we got it, why we have it, and who we share it with
• Receive a copy in a portable, machine-readable format
• Correct inaccurate personal information
• Delete your personal information, subject to exceptions
• Opt out of sale (we do not sell), of sharing for targeted advertising (we do this on our marketing pages — see Section 8), and of profiling for significant decisions (we do not do this — see Section 5)
• Limit our use of sensitive personal information to what is necessary to provide the Services
• Not be discriminated against for exercising your rights — we will not deny you Services, charge you a different price, or provide a lower quality of service
• Appeal a denial of your request

We provide every right listed above to every user, regardless of where you live, as a matter of our own policy.

We do it this way deliberately. Roughly twenty U.S. states now have comprehensive consumer privacy laws, their rights differ from one another, and most of them apply only to companies above size or volume thresholds that a company our size may not meet. Rather than making you research whether your state’s law covers us — or making you prove your residency — we simply honor these rights for everyone and do not require you to identify a statute. Where your state’s law gives you a right not listed above, you have that right too.

This Policy is not a representation that any particular state statute applies to Legalpreneur, Inc. Some of these laws exempt small businesses, including under our own state’s law. We honor the rights voluntarily and will not use a coverage exemption as a reason to deny your request.

This Policy is written for U.S. users. We do not target the Services to individuals in the European Economic Area, the United Kingdom, or Switzerland, and we do not offer GDPR-specific rights. If you are located outside the United States, be aware that your information will be transferred to and processed in the United States, where privacy laws differ from those in your country.

10.2 California-Specific Disclosures

For California residents under the CCPA as amended by the CPRA:

Categories of personal information we collect: identifiers; personal information under Cal. Civ. Code § 1798.80; commercial information; internet and network activity; approximate geolocation; audio and visual information (Legal Office Hours recordings); professional and employment-related information; and sensitive personal information as described in Section 3.4. We do not collect biometric information, education records, or precise geolocation.

Sources, purposes, and disclosure recipients: Sections 3, 4, and 7.

Sale: We have not sold personal information for monetary consideration in the preceding 12 months, and we do not do so now.

Sharing for cross-context behavioral advertising: In the preceding 12 months we have shared internet and network activity information and identifiers (cookie and device identifiers, IP address) collected from our public marketing pages with advertising platforms for cross-context behavioral advertising. You have the right to opt out, and Section 8 tells you how. We have not shared account information, documents, filing information, AI inputs, or Legalpreneur Score™ data for this or any advertising purpose.

We do not have actual knowledge of selling or sharing the personal information of consumers under 16.

Sensitive personal information: used only for the purposes permitted under § 7027(m) of the CCPA regulations — providing the Services you requested, security, and fraud prevention. Because we do not use it to infer characteristics, the right to limit does not restrict our use further, but you may still submit a request.

Retention: Section 9.

Authorized agents: an authorized agent may submit a request on your behalf with written permission signed by you; we may contact you to verify.

Shine the Light (Cal. Civ. Code § 1798.83): we do not disclose personal information to third parties for their direct marketing purposes.

10.3 How to Exercise Your Rights

Email hello@thelegalpreneur.com with the subject line “Privacy Request.” Tell us which right you want to exercise and the email address associated with your account.

Verification: to protect you, we will verify your identity before acting — typically by confirming control of your account email, and for sensitive requests, by asking you to confirm information already in your account. We will not ask you to create an account to submit a request.

Timing: we will confirm receipt within 10 business days and respond substantively within 45 days. If we need more time, we will tell you why and may extend by an additional 45 days.

Appeals: if we deny your request, our response will explain why and how to appeal. To appeal, reply to our decision with the subject line “Privacy Appeal.” We will respond to appeals within 45 days. If we deny your appeal, you may contact your state attorney general.

Fees: requests are free, unless they are excessive, repetitive, or manifestly unfounded, in which case we will tell you before charging anything.

10.4 Limits on Deletion

We may decline all or part of a deletion request where we need to retain information to:

• Complete a transaction or provide a Service you requested
• Meet a legal obligation, including tax, accounting, and filing-record retention (Section 9)
• Maintain filing and registered agent records — note that we cannot delete information from a government public record, because we do not control it; you would need to petition the agency
• Detect and prevent fraud or security incidents
• Establish, exercise, or defend legal claims
• Comply with a litigation hold

Deleting your account information means losing access to your documents, and it forfeits the 90-day retrieval window described in our Terms of Use. We will tell you exactly what a deletion request will affect, and give you a chance to export your documents first, before we act on it.

10.5 Marketing Opt-Out

Click “unsubscribe” in any marketing email, reply STOP to any text message, or email us. You cannot opt out of transactional messages — filing notices, billing notices, renewal reminders, security alerts, and legal notices — while your account is active, because we need to be able to reach you about your account.

11. Security

We maintain administrative, technical, and physical safeguards intended to protect your information, including encryption of data in transit and at rest, access controls limiting employee access to what is needed, authentication requirements, logging and monitoring, vendor security review, and periodic review of our practices.

No system is perfectly secure. We cannot guarantee that your information will never be accessed, disclosed, altered, or destroyed by unauthorized parties, and we do not warrant absolute security. You are responsible for keeping your password confidential and for using a strong, unique password.

If we become aware of a security breach affecting your personal information, we will notify you and any required regulators as required by applicable law.

(Our prior policy stated in all capital letters that we do not represent, warrant, or guarantee that personal information will remain secure. That remains legally accurate — nobody can guarantee it — but we have rewritten it here to describe what we actually do rather than only what we disclaim.)

12. Children’s Privacy

The Services are for business owners 18 and older. We do not knowingly collect personal information from anyone under 18, and we do not direct the Services to children.

If we learn we have collected personal information from someone under 18, we will delete it promptly. If you believe a minor has provided us information, email hello@thelegalpreneur.com.

Do not submit information about minors through the Services, including in uploaded documents.

13. Third-Party Sites and Platforms

The Services link to and integrate with third-party sites and platforms, including social media, community platforms, and payment providers. This Policy does not cover their practices. When you leave our Services or interact with us on a third-party platform, that platform’s privacy policy governs. Review the policies of any service you use.

14. Changes to This Policy

We may update this Policy. When we do, we will revise the “Last Updated” date above.

For material changes — such as a new category of information collected, a new purpose, or a new category of disclosure — we will provide notice by email to your account address or a conspicuous notice in the Services at least 30 days before the change takes effect.

We will not use your personal information for a materially different purpose than what was disclosed when we collected it without giving you notice and, where required by law, obtaining your consent.

We encourage you to review this Policy periodically.

15. Contact Us

Questions, requests, or concerns about privacy:

Legalpreneur, Inc. Email: hello@thelegalpreneur.com Subject line: “Privacy Request” for rights requests, or “Privacy Question” for anything else Website: https://thelegalpreneur.com

If you are unsatisfied with our response, you may contact your state attorney general’s office.