Privacy Policy

Effective Date: March 27, 2026

1. Introduction

Quillmatic.com ("Quillmatic," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and protect information when you use the Quillmatic platform at quillmatic.com (the "Service").

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account Information: When you create an account, we collect your name and email address. This information is used to authenticate you and manage your subscription.

Firm and Practice Information: You may optionally provide your firm name, address, phone number, fax number, bar number, and email address through the Settings page. This information is used solely to populate your generated documents and is never shared with third parties for marketing purposes.

Client and Matter Data: You may enter client names, addresses, dates of birth, contact information, case numbers, and other matter-related information into the Service. This data is stored in your account and used to generate documents on your behalf. Social Security Numbers, if entered, are encrypted using AES-256 encryption before storage.

Uploaded Files: Templates and style reference documents you upload are stored in Supabase Storage and are accessible only to your account.

Usage Data: We collect information about your use of the Service, including documents generated, templates uploaded, and generation history. This data is used to enforce subscription limits, improve the Service, and provide you with usage statistics.

Payment Information: Payment processing is handled entirely by Stripe. Quillmatic does not store your credit card number, CVV, or other sensitive payment details. We receive only a Stripe customer ID and subscription status from Stripe.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Authenticate your identity and manage your account
  • Generate documents using your matter and client data
  • Process subscription payments through Stripe
  • Enforce subscription plan limits
  • Respond to support requests and communications
  • Send transactional emails (account confirmations, password resets, billing notices)
  • Monitor and improve the performance and security of the Service
  • Comply with legal obligations

We do not use your client or matter data to train AI models. We do not sell your data to third parties. We do not use your data for advertising purposes.

4. AI Processing

Quillmatic uses the Claude API provided by Anthropic, PBC to generate documents. When you generate a document, relevant matter data and template content are transmitted to the Anthropic API for processing. This transmission is necessary to provide the core functionality of the Service.

Anthropic's use of data submitted through the API is governed by Anthropic's own Privacy Policy and API Terms of Service, available at anthropic.com. As of the effective date of this policy, Anthropic does not use API-submitted data to train its models by default.

You should exercise professional judgment about what client data you include in document generation requests, consistent with your obligations under applicable rules of professional conduct.

5. Data Storage and Security

Your data is stored in Supabase, a managed PostgreSQL database service with SOC 2 Type II certification. All data is protected by row-level security policies that ensure each user can only access their own records.

Sensitive fields such as Social Security Numbers are encrypted using AES-256 encryption before being stored in the database. Encryption keys are stored separately from the encrypted data.

All data transmission between your browser and our servers occurs over HTTPS (TLS encryption). Uploaded files are stored in Supabase Storage with access controls restricting access to the authenticated account owner.

While we implement industry-standard security measures, no system is completely secure. We cannot guarantee that unauthorized third parties will never be able to defeat our security measures.

6. Third-Party Service Providers

We use the following third-party services to operate the platform:

  • Supabase — database, authentication, and file storage
  • Anthropic — AI document generation via the Claude API
  • Stripe — payment processing and subscription management
  • Vercel — application hosting and deployment

Each of these providers has its own privacy policy and security practices. We select providers that maintain high security standards and limit data sharing to what is necessary to provide the Service.

7. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and close your account, we will retain your data for 30 days to allow for account recovery, after which it will be permanently deleted.

Generation history and usage logs may be retained for up to 12 months for billing verification and service improvement purposes, after which they are deleted or anonymized.

You may request deletion of your account and associated data at any time by contacting us at support@quillmatic.com.

8. Your Rights

You have the following rights with respect to your data:

  • Access: You may request a copy of the data we hold about you.
  • Correction: You may update your account information at any time through the Settings page.
  • Deletion: You may request deletion of your account and associated data.
  • Portability: You may export your data through the Service at any time.
  • Objection: You may object to certain uses of your data by contacting us.

To exercise any of these rights, contact us at support@quillmatic.com. We will respond to requests within 30 days.

9. Cookies

Quillmatic uses cookies and similar technologies solely for authentication and session management purposes. We do not use cookies for advertising or tracking across third-party websites. The authentication cookies set by Supabase are necessary for the Service to function and cannot be disabled while using the Service.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. For significant changes, we will also notify you by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Kentucky, consistent with our Terms of Service.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Quillmatic.com

Email: support@quillmatic.com

Website: www.quillmatic.com

Attorney Notice: If you are a licensed attorney using Quillmatic to store or process client information, you are responsible for ensuring your use of cloud-based services complies with your jurisdiction's rules of professional conduct, including applicable ethics opinions regarding cloud storage of client data. Most state bars have issued guidance permitting cloud storage with reasonable security measures in place.