Privacy Policy

This policy explains how S Squared Labs Inc.(“we”), operator of MitigationDraft, collects and handles information. Because this service is used by criminal defense attorneys and processes sensitive client material, data handling is described in specific terms below.

Who our users are

Our customer is the attorney or law firm. Individuals completing an intake do so at the direction of, and as clients of, an attorney using MitigationDraft. We act as a service provider to the attorney with respect to their client's information.

Information we collect

• Attorney account data — name, email, firm, and authentication data, handled through our identity provider (Clerk).
• Case and intake content — the biographical information a client provides through an intake link, and the case reference an attorney enters. This may include highly sensitive personal information (health, substance use, family history).
• Marketing contacts — an email address you submit to request a sample report.
• Basic usage data — standard server logs and, where enabled with your consent, product analytics.

Attorney–client privileged material

Intake content is treated as confidential attorney–client material. We commit that:

• Client intake data is never used to train any AI model.
• Data is encrypted in transit and at rest, and access is restricted to providing the service.
• An attorney can delete a case and its associated intake and drafts; deletion removes the material from active systems.
• Intake links are for out-of-custody clients only; the service does not route client interviews through monitored correctional phone or video systems.

AI processing

To generate a draft narrative, intake content is sent to our AI provider (Anthropic) solely to produce that draft. We use the provider under terms that prohibit training on submitted content. The attorney reviews, edits, and is responsible for the final document.

Subprocessors

We rely on service providers to operate MitigationDraft, including hosting, database, authentication (Clerk), payments (Stripe), and AI generation (Anthropic). We share only what each provider needs to perform its function.

Data retention and deletion

We retain data for as long as an account is active or as needed to provide the service. Attorneys can delete case material at any time. Firms requiring a Data Processing Agreement or specific retention terms can contact us.

Your choices

You can request access to, correction of, or deletion of your account data, and unsubscribe from marketing email at any time. For requests, contact [email protected].

Contact

Questions about this policy: [email protected].