Vaulted LawVaulted Law

LEGAL

Privacy Policy

Your documents and AI processing stay on your hardware. Vaulted Law does not upload client documents, local chat history, or generated work to a cloud AI service. Licensing, software delivery, and optional online legal research use separate network connections, described below.

Last updated

1. Overview

This Privacy Policy describes how Bedrock Group LLC, the provider of Vaulted Law ("Vaulted Law," "we," "us," or "our"), handles personal information in connection with the Vaulted Law website at vaultedlaw.app, the Vaulted Law desktop application, software downloads, license administration, purchases, and related support services (collectively, the "Services").

Bedrock Group LLC provides software under the Vaulted Law name; neither Bedrock Group LLC nor Vaulted Law is a law firm. Using the Services does not create an attorney-client relationship with Bedrock Group LLC or Vaulted Law. Law firms and other organizations using the desktop application remain responsible for their own professional, privacy, records-management, and client-notice obligations.

2. Your Private Legal Workspace Stays Local

Your private legal workspace is not hosted by Vaulted Law, and your documents are not uploaded for AI processing. We cannot remotely browse or retrieve your local files. Document ingestion, optical character recognition, embeddings, retrieval, AI inference, chat, and drafting run locally. There is no cloud-AI fallback and no automatic Matter upload. Optional public-law research sends search terms and source requests, not the underlying client documents, as explained in Section 4.

Local document analysis and drafting do not send us:

  • Matter files, imported documents, document text, or scanned-document images;
  • embeddings, prompts, chat history, AI responses, or generated legal work product;
  • client facts, case strategy, citations saved to a Matter, or locally stored precedent results;
  • firm profiles, attorney profiles, local user credentials, Matter permissions, or signature blocks; or
  • the content of searches, drafting requests, or document reviews performed entirely within the local application.

The desktop application's routine outbound communication

License activation and validation use online licensing services. Validation occurs when the application starts and approximately once every 24 hours while an internet connection is available. Initial activation transmits the license key, computer name, operating system, and processor architecture. Later validation transmits the license key and assigned license-instance identifier. No Matter documents or local AI context are attached to those requests. Subscription licenses permit up to a seven-day offline grace period between successful validations. Software setup and updates also contact download services for manifests and files; these requests do not upload your legal documents.

Purchase and subscription lifecycle records are generated through the website checkout and sent to our website by the commerce and licensing provider so the correct workstation entitlement can be issued, updated, or revoked. Those records do not originate from the private legal workspace. Optional online precedent research is a separate, user-initiated action and is described in the next section.

3. Limited Non-Content Information We Handle

Information you or your firm provides

  • Purchase and license information. Name, email address, billing contact details, purchased product, billing interval, quantity of licensed computers, order and subscription status, license status, and related transaction records. Payment-card information is collected and processed by our authorized merchant-of-record and payment provider; Vaulted Law does not receive full payment-card numbers.
  • License activation information. License key, license-instance identifier, computer name, operating system, processor architecture, activation status, and validation dates used to enforce workstation limits and support offline licensing.
  • Communications. Information you provide when requesting support, submitting a privacy request, reporting a problem, or otherwise contacting us. Sending information to support is a voluntary action outside the desktop application's local workflow. Do not send confidential client files or Matter content unless specifically requested through an approved support process.

Information collected through the website

When you visit the website or download software, hosting and delivery providers may process standard technical information such as an Internet Protocol address, browser and device type, operating system, requested page or file, request date and time, referring address, and security or diagnostic data. This is website and download traffic information, not information from the private legal workspace. We use it to operate the website, deliver installers and local-model files, diagnose failures, maintain security, and prevent abuse.

4. Local Legal Data

Matter files, imported documents, extracted text, embeddings, chat history, generated work product, attorney profiles, firm profiles, access rules, and user credentials are designed to be stored and processed on the licensed computer or in the firm-selected local office storage location. Local AI inference and optical character recognition are performed on the user's hardware. Vaulted Law does not use private Matter content to train shared or public artificial-intelligence models.

If a firm enables Office Sync, Matter data may move between authorized computers and the firm's selected office hub or network storage. That transfer occurs within infrastructure controlled or selected by the firm. The firm's office administrator controls user accounts and Matter permissions, including access to private Matters.

Optional online research is separate from local AI analysis. When you initiate research, the application retrieves public legal sources using legal search terms, citations, jurisdiction filters, and source addresses. Some sources are contacted directly using your firm's research credentials. Other sources are reached through a Vaulted Law-operated research gateway, which processes those requests and authenticates access using license information. Research services and the gateway necessarily receive the requests needed to return public material; they do not receive your client documents or local AI context for analysis.

Research results and the AI analysis of those results are saved in the local Research workspace or Matter. Do not put confidential client details into online search terms. Research request data can include information you choose to enter in those terms, even though the underlying documents remain local.

5. How We Use Information

We use personal information as reasonably necessary to:

  • provide, maintain, secure, and troubleshoot the Services;
  • process purchases, issue licenses, administer trials and subscriptions, and enforce computer-activation limits;
  • deliver and update application installers, local inference components, and model files;
  • respond to support, legal, privacy, and security requests;
  • detect fraud, misuse, security incidents, and violations of applicable terms;
  • maintain transaction, tax, accounting, and compliance records; and
  • establish, exercise, or defend legal rights and comply with applicable law.

We do not use private Matter content for advertising, data brokerage, or the training of shared or public AI models.

6. Disclosures to Third Parties

We may disclose limited personal information to the following categories of third parties when reasonably necessary to provide the Services:

  • Commerce and licensing providers that provide checkout, payment processing, tax administration, subscription management, receipts, fraud prevention, and license-key infrastructure.
  • Website hosting and security providers that operate the public website, server-side website functions, and technical protections.
  • Software delivery and storage providers that distribute application installers, updates, local inference components, and model files.
  • Legal-research and gateway infrastructure providers that process optional public-law searches and source retrieval initiated by the user.

We may also disclose information when reasonably necessary to comply with law, court process, or a valid government request; protect the rights, safety, and security of users or others; investigate fraud or misuse; or complete a merger, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality protections.

Vaulted Law does not sell personal information for money. We do not share personal information for cross-context behavioral advertising and do not disclose personal information to third parties for their own direct-marketing purposes.

7. Your Choices and Rights

Depending on where you reside and subject to applicable exceptions, you may have rights to request access to, correction of, or deletion of personal information we maintain about you; obtain information about its use or disclosure; or appeal a decision concerning a privacy request. We will not discriminate against you for exercising an applicable privacy right. We may need to verify your identity and authority before completing a request.

Most Matter information is not held by Vaulted Law and therefore cannot be accessed, corrected, or deleted by us. Users and authorized office administrators can manage that data within the desktop application and the firm's selected storage environment. Deletion should be performed in accordance with the firm's legal-hold, professional-responsibility, retention, backup, and client-file obligations.

Users may remove or replace a legal-research API token in application settings, cancel or manage a recurring purchase through the billing tools provided with the order, and deactivate a computer license before transferring it to another eligible workstation.

8. Retention and Security

We retain purchase, license, support, security, and compliance records only for as long as reasonably necessary for the purposes described in this Privacy Policy, to provide an active license or subscription, or to satisfy legal, tax, accounting, dispute-resolution, and fraud-prevention obligations. Hosting and commerce providers maintain records under their own retention practices. Information stored by a firm in the desktop application remains under that firm's control until the firm or an authorized user deletes or moves it, subject to backups and storage-system behavior.

Vaulted Law uses administrative, technical, and physical safeguards intended to protect information appropriate to its nature. Local application databases and protected settings use encryption and access controls, and online transmissions use encrypted connections where supported. No storage or transmission method can be guaranteed to be completely secure. Firms are responsible for securing their computers, networks, office hubs, backups, user accounts, and physical access.

9. Cookies and Tracking

Vaulted Law does not currently use third-party advertising pixels or cross-site behavioral analytics on the website. The website may use essential browser storage or cookies required to provide checkout, security, fraud prevention, and other requested functions. A checkout opened from the website may use cookies or similar technologies under the commerce provider's privacy policy.

Because Vaulted Law does not currently track users across third-party websites for targeted advertising, browser "Do Not Track" signals do not change the website's operation. If our tracking practices materially change, we will update this Privacy Policy and provide any controls required by applicable law.

10. Children's Privacy

The Services are intended for legal professionals and business users and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that such information was provided to us, we will take reasonable steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in the Services, our practices, or applicable law. We will post the revised policy at this URL and revise the "Last updated" date. If a change materially affects how we use previously collected personal information, we will provide additional notice or obtain consent when required by law.

12. Contact Us

Questions, complaints, and verifiable privacy requests may be sent to privacy@vaultedlaw.app. Please use the subject line "Privacy Request" and describe the request without including confidential client information or Matter files.