1. Scope and operator
This policy covers the VaFL Toolkit and VaFL Drafts desktop applications for Windows and macOS, this website, support, the account, licensing, and update services, and direct subscriptions when available. Burroughs Law Office, P.C., 4445 Corporation Ln, STE 225, Virginia Beach, VA 23462 operates these products. Contact lawren@vafl.tools or (757) 363-0077. These desktop releases are distributed directly, not through the Microsoft Store or Mac App Store. We do not receive an app-store receipt for a direct purchase.
2. Local matter data and working documents
VaFL Toolkit stores its working matter database locally with SQLCipher encryption and operating-system key protection, using Windows DPAPI or macOS Keychain-backed services. App locking helps restrict access but does not replace device security. VaFL Drafts saves working documents, workbook copies, settings, and related records to local files. Do not assume that a .vad file, exported DOCX/PDF, backup, attachment, or synchronized file has the Toolkit database’s encryption. Protect files, accounts, backups, and devices appropriately. Ordinary local drafting and calculation do not require uploading the matter database to our subscription service.
3. Optional sync, sharing, intake, and delivery
When you connect Dropbox, selected matter records and documents can be transmitted to your Dropbox account and shared with permitted collaborators. Dropbox Sign receives documents and signer information when you request signatures. Jotform and any hosted intake provider process information under the selected form and service configuration; encrypted intake workflows do not mean that every intake method or its metadata is inaccessible to providers. Print-and-mail services such as Lob receive document contents and recipient addresses needed to deliver mail. Calendar exports and other files are disclosed to the apps or people you choose. Review recipients, permissions, provider terms, and confidentiality obligations before using these services.
4. AI assistance and system services
AI is optional. Local model services process selected content on your computer when configured locally. Cloud model services receive the prompts, selected text, source excerpts, or other scope you authorize; their retention, training, location, and account terms depend on the provider and your configuration. Supported Macs may offer Apple Foundation Models processing. Apple system Writing Tools are a separate service and may use off-device processing according to Apple’s settings and disclosures. We do not promise that every AI feature stays on-device. Accepted assistance may retain prompts, request details, source references, or provenance in local review history or working documents. Consult the in-app disclosure and review output before acceptance.
5. Toolkit and VaFL Drafts connections
Reviewed source packages, documents, and provenance can pass between the applications on your computer. A returned draft is placed in a review workflow before import. Shared trial workbooks can exchange workbook answers and revision information in both directions. These features can create additional local copies. Copies you export or synchronize follow the destination’s security and retention arrangements.
6. Client payments through LawPay
Optional LawPay integration is separate from buying a software subscription. The website’s connection service can process OAuth credentials or protected connection tokens, account identifiers, invoice/payment requests, and payment or settlement responses necessary to connect the app to LawPay. It is inaccurate to describe every connected feature as bypassing developer-operated services. Hosted payment pages collect payment credentials; do not enter full card or bank credentials in app notes or support messages. If a firm enables Pay Later and it is offered, financing applications are handled by the payment/financing providers under their terms.
7. Website, subscription, and license information
Our hosts can receive standard request information such as IP address, browser details, requested path, timestamps, and security logs. When you sign in, the account service processes your email address, sign-in times, the name you gave each signed-in computer, its platform and application version, a per-computer identifier and secret, plan and seat information, validity and refresh dates, and any access granted to you. The applications’ update check sends only the application name, platform, and version. When direct subscriptions become available, the service will also process purchaser name, firm and billing details, order and invoice references, payment status, trial and renewal dates, cancellation requests, and acceptance of terms; the payment processor receives payment information, and the account service will not store full card numbers or security codes. The account service runs on Vercel with a Supabase database, both in the United States. These records are separate from client matter content.
8. Email, cookies, and support
Sign-in codes and account messages are sent from our Google Workspace mail; transactional providers will deliver receipts, order confirmations, renewal notices, and support replies. Sign-in codes, links, and sessions are security credentials. The account service uses necessary authentication and security cookies. The revised marketing pages do not add advertising trackers or analytics. Third-party checkout or connected services may use their own cookies. We receive information you voluntarily send support; remove client information and secrets unless a suitable secure channel has been arranged. Marketing consent, if requested, will be separate from transactional email.
9. Purposes and disclosure
We use the information we control to provide purchases and licenses, authenticate account access, fulfill requested services, prevent fraud, resolve support and billing issues, maintain security, and meet legal obligations. Service providers receive information needed for those purposes. We may disclose information when legally required, to protect rights and security, or in a business transfer subject to applicable protections. We do not sell customer personal information or use client matter content for targeted advertising. Services you independently connect are also governed by their own policies.
10. Retention and security
Local files remain under your control and may persist in backups or connected accounts after removal from an app. We retain transaction and business records for accounting, tax, dispute, and legal needs; account, activation, security, and support records only as reasonably necessary for their purposes. Backup deletion may occur on a rotation rather than immediately. No security measure guarantees absolute protection. Closing an account does not automatically erase records we are legally required to retain.
11. Your choices and requests
You can decline optional integrations or AI, review sharing settings, export and back up local data, and disconnect services. Disconnecting does not recall copies previously sent. Contact lawren@vafl.tools for access, correction, deletion, or other privacy requests concerning information we control; we may verify your identity and retain records where law permits or requires. Rights vary by jurisdiction and statutory applicability. We will explain a refusal and any applicable review or appeal route. Do not email confidential client records to make a privacy request.
12. Children, location, and changes
These professional tools are intended for adults, not for children to use as customers. Attorneys may keep information about children in their own case records and remain responsible for its lawful handling. Hosting and connected providers may process information in the United States or other locations under their terms. Material changes to this policy will be posted with an updated date and additional notice where required. A future mobile or store-distributed product may require separate disclosures.