1. Scope and operator
This policy covers the VaFL Toolkit and VaDraft desktop applications for Windows and macOS, this website, support, and the direct subscription and licensing services when available. Burroughs Law Office, P.C., 4445 Corporation Ln, STE 225, Virginia Beach, VA 23462 operates these products. Contact support@vfltoolkit.com or (757) 363-0077. These desktop releases are distributed directly, not through the Microsoft Store or Mac App Store. We do not receive an app-store receipt for a direct purchase.
2. Local matter data and working documents
VaFL Toolkit stores its working matter database locally with SQLCipher encryption and operating-system key protection, using Windows DPAPI or macOS Keychain-backed services. App locking helps restrict access but does not replace device security. VaDraft saves working documents, workbook copies, settings, and related records to local files. Do not assume that a .vad file, exported DOCX/PDF, backup, attachment, or synchronized file has the Toolkit database’s encryption. Protect files, accounts, backups, and devices appropriately. Ordinary local drafting and calculation do not require uploading the matter database to our subscription service.
3. Optional sync, sharing, intake, and delivery
When you connect Dropbox, selected matter records and documents can be transmitted to your Dropbox account and shared with permitted collaborators. Dropbox Sign receives documents and signer information when you request signatures. Jotform and any hosted intake provider process information under the selected form and service configuration; encrypted intake workflows do not mean that every intake method or its metadata is inaccessible to providers. Print-and-mail services such as Lob receive document contents and recipient addresses needed to deliver mail. Calendar exports and other files are disclosed to the apps or people you choose. Review recipients, permissions, provider terms, and confidentiality obligations before using these services.
4. AI assistance and system services
AI is optional. Local model services process selected content on your computer when configured locally. Cloud model services receive the prompts, selected text, source excerpts, or other scope you authorize; their retention, training, location, and account terms depend on the provider and your configuration. Supported Macs may offer Apple Foundation Models processing. Apple system Writing Tools are a separate service and may use off-device processing according to Apple’s settings and disclosures. We do not promise that every AI feature stays on-device. Accepted assistance may retain prompts, request details, source references, or provenance in local review history or working documents. Consult the in-app disclosure and review output before acceptance.
5. Toolkit and VaDraft connections
Reviewed source packages, documents, and provenance can pass between the applications on your computer. A returned draft is placed in a review workflow before import. Shared trial workbooks can exchange workbook answers and revision information in both directions. These features can create additional local copies. Copies you export or synchronize follow the destination’s security and retention arrangements.
6. Client payments through LawPay
Optional LawPay integration is separate from buying a software subscription. The website’s connection service can process OAuth credentials or protected connection tokens, account identifiers, invoice/payment requests, and payment or settlement responses necessary to connect the app to LawPay. It is inaccurate to describe every connected feature as bypassing developer-operated services. Hosted payment pages collect payment credentials; do not enter full card or bank credentials in app notes or support messages. If a firm enables Pay Later and it is offered, financing applications are handled by the payment/financing providers under their terms.
7. Website, subscription, and license information
Our host can receive standard request information such as IP address, browser details, requested path, timestamps, and security logs. When direct subscriptions become available, the service will process purchaser name and email, firm and billing details, order and invoice references, plan and seat information, payment status, trial and renewal dates, cancellation requests, and acceptance of terms. The payment processor receives payment information; the planned account service will not store full card numbers or security codes. Licensing will process a license identifier, protected key material, activation identifiers, platform/app version, seat assignment, entitlement status, and validity/refresh dates. These records are separate from client matter content.
8. Email, cookies, and support
Transactional providers deliver account-verification messages, receipts or order confirmations, license delivery, renewal notices, and support replies. Verification links and sessions are security credentials. The account service will use necessary authentication and security cookies when enabled. The revised marketing pages do not add advertising trackers or analytics. Third-party checkout or connected services may use their own cookies. We receive information you voluntarily send support; remove client information and secrets unless a suitable secure channel has been arranged. Marketing consent, if requested, will be separate from transactional email.
9. Purposes and disclosure
We use the information we control to provide purchases and licenses, authenticate account access, fulfill requested services, prevent fraud, resolve support and billing issues, maintain security, and meet legal obligations. Service providers receive information needed for those purposes. We may disclose information when legally required, to protect rights and security, or in a business transfer subject to applicable protections. We do not sell customer personal information or use client matter content for targeted advertising. Services you independently connect are also governed by their own policies.
10. Retention and security
Local files remain under your control and may persist in backups or connected accounts after removal from an app. We retain transaction and business records for accounting, tax, dispute, and legal needs; account, activation, security, and support records only as reasonably necessary for their purposes. Backup deletion may occur on a rotation rather than immediately. No security measure guarantees absolute protection. Closing an account does not automatically erase records we are legally required to retain.
11. Your choices and requests
You can decline optional integrations or AI, review sharing settings, export and back up local data, and disconnect services. Disconnecting does not recall copies previously sent. Contact support@vfltoolkit.com for access, correction, deletion, or other privacy requests concerning information we control; we may verify your identity and retain records where law permits or requires. Rights vary by jurisdiction and statutory applicability. We will explain a refusal and any applicable review or appeal route. Do not email confidential client records to make a privacy request.
12. Children, location, and changes
These professional tools are intended for adults, not for children to use as customers. Attorneys may keep information about children in their own case records and remain responsible for its lawful handling. Hosting and connected providers may process information in the United States or other locations under their terms. Material changes to this policy will be posted with an updated date and additional notice where required. A future mobile or store-distributed product may require separate disclosures.