Privacy Policy
1. The short version.
Strata is a zero-retention system. The discovery and records you upload (matter content) are processed to produce your work product and are permanently erased from our systems the moment you download. We do not retain your matter content, we do not use it to train any model, and we structure our systems so that, by design, there is nothing for a third party to subpoena. This page explains the limited data we do keep and your rights.
2. Who we are.
Strata Legal ("Strata," "we," "us") operates the Strata analysis and drafting platform for licensed criminal-defense attorneys. For privacy questions: strata-legal@proton.me.
3. Information we collect.
Matter content (NOT retained)
Discovery files, uploaded records, generated output, and the working record. Used only to produce your work product and erased on download. We keep none of it.
Account information
Name, email, firm, bar number (where provided), authentication credentials. Kept until you close your account.
Billing information
Transaction records and payment metadata retained as required by law and tax obligations.
Usage & security metadata
Access logs, authentication events, and security telemetry — metadata only, never matter content — retained on a rolling basis for security, abuse prevention, and integrity of the audit log.
4. How we use information.
- To provide, secure, and operate the service.
- To produce the work product you request and deliver it for your review.
- To bill for services and maintain records required by law.
- To detect, prevent, and respond to security, fraud, and abuse.
We do not use matter content to train any model, ours or any processing provider's, and we do not sell your data.
5. How we process and protect data.
Matter content is encrypted in transit (TLS 1.2/1.3) and at rest (AES-256), scoped per matter, and accessible only to the licensed attorney account. Engineering and operations staff cannot read matter content; access is role-based, least-privilege, and multi-factor authenticated. Each matter is isolated and never pooled or cross-referenced across customers.
Case content is processed under contractual terms that prohibit use for model training and limit retention. For security reasons, we do not disclose the specific providers or architecture of our processing pipeline publicly.
6. Sub-processors.
Strata uses processing providers that handle matter content strictly under no-training terms. The current sub-processor list is not published on a public page; it is disclosed to engaged customers under NDA in our Data Processing Addendum and is available on request.
7. Retention.
| Data | Retained? | Period |
|---|---|---|
| Matter content | No | Erased on download |
| Account information | Yes | Until account closure |
| Billing records | Yes | As required by law/tax |
| Security & audit logs | Metadata only | Rolling |
8. Your rights.
To the extent you act as a data subject or on behalf of one, you may have rights under GDPR, CCPA/CPRA, or similar laws to access, correct, delete, or restrict use of personal data; to object to processing; and to portability. Because we do not retain matter content, deletion of that content is automatic on download. For account and billing data, contact strata-legal@proton.me.
9. Legal requests & law enforcement.
By design, we hold no matter content that could be subject to a third-party request. Where we receive lawful legal process directed at account or billing records, we comply with the law and notify the affected customer wherever permitted.
10. International transfers.
Processing may involve providers located outside your jurisdiction. We rely on appropriate safeguards and contractual terms consistent with applicable data-protection law. [Confirm transfer mechanism: Standard Contractual Clauses / UK Addendum / etc.]
11. Minors.
Strata is a tool for licensed attorneys and is not directed to minors.
12. Changes to this policy.
We may update this policy. Material changes will be posted with a revised effective date.
13. Contact.
Questions about this policy: strata-legal@proton.me.