Framework Law

Privacy Policy

This policy describes how Framework Law Group PC, a California professional corporation (“Framework Law,” “we,” or “us”), collects, uses, and shares personal information through our website, the Framework Law Legal Checkup (the “Checkup”), the Framework Law Hub client portal (the “Hub”), and our related services (together, the “Services”).

Using the Checkup or the Hub, or sending us information, does not by itself make you a client. If you engage us for legal services, information you share in the course of that engagement is also protected by our professional duty of confidentiality and governed by your engagement letter, and nothing in this policy limits those duties.

Types Of Information We Collect

The following describes the types of information we collect and how we use it.

Legal Checkup

  • When you complete the Checkup, we collect your first name, business name, and website, what your business offers and who its customers are, your confirmations or edits to the website details we find, and your email address. Information you submit through the Checkup is processed through our systems and our AI provider to prepare your results and your Hub, and becomes part of our records.
  • We use this information to prepare your results, create your Hub, and follow up with you about our legal services, including reminders, potential gaps, and recommendations.

Website Findings

  • When you give us a website address, we automatically review the publicly available pages of that site, such as its home, about, contact, terms, and privacy pages, to find details like the business’s legal name, contact email, social media handles, and whether the site links to terms or a privacy policy. You can confirm, edit, or reject these findings.
  • We use these findings to pre-fill your business profile. They are generated automatically and may be inaccurate or incomplete.

Hub Account

  • When you submit the Checkup, we create a Hub account using your email address and keep records of your sign-ins, account dates, and the businesses you manage. The Hub uses email sign-in links rather than passwords. One account can manage more than one business.
  • We use this information to provide and secure your account.

Business, Ownership, and Document Information

  • In the Hub, you may submit or update more information about your business, such as your entity type, state, and formation details; owners and ownership percentages; trademark information; which contracts you have; licenses and permits; phone number and business or mailing address; and documents you upload, such as formation documents, operating agreements, and contracts.
  • We use this information to map your legal status in the Hub, show upcoming dates and potential gaps, and, if you ask, help with legal services.

Information About Other People

  • Information you enter or upload may include details about other people, such as business partners, co-owners, clients, or other parties named in your contracts. Please share information about others only if you have the right to do so.
  • We handle this information as described in this policy.

Public Records

  • We may look up publicly available records about your business, such as state business registration records, business data services like OpenCorporates, and United States Patent and Trademark Office records, to fill in or check details in your Hub.
  • Public records can be outdated or inaccurate, so we show them for you to confirm.

Communications and Scheduling

  • We collect what you send us by email or through the Services, and we keep records of emails we send you, including sign-in links, service emails, and updates. Our email tools may record whether you open or click our emails. If you book a call, our third-party scheduling tool collects the information requested in its booking form and shares it with us.
  • We use this information to respond to you, provide the Services, and follow up about our legal services.

Cookies and Advertising

  • We use cookies, local storage, and similar technologies that are needed to run the Services, keep you signed in, hold your in-progress Checkup answers in your browser, and protect the Services. We may also use basic tools to understand how the Services perform.
  • We do not currently use third-party advertising pixels, retargeting, or session-recording tools, and we do not sell your personal information or share it for cross-context behavioral advertising. If that changes, we will update this policy first.

Payments

  • If we offer paid features through the Services, payments will be processed by a third-party payment processor, such as Stripe. We will receive billing details such as your name, billing address, and transaction records, but not your full payment card number.
  • We use payment information to process your purchases and keep required records.

Security and Bot Protection

  • We use a bot-protection service on the Checkup, which receives your IP address and browser signals to help tell people apart from automated traffic, and we apply rate limits to prevent abuse.
  • We use this information to keep the Services secure and available.

Web logs

  • We and our service providers automatically collect technical information, such as your browser type, operating system, IP address, pages visited, referring website, and date and time stamps. Some providers that help deliver the Services, such as our hosting, bot-protection, and font services, receive your IP address when your browser connects to them.
  • We use this information to operate, secure, and troubleshoot the Services.

In addition to the information that we collect from you directly, we may also receive information about you from other sources, including third parties, partners, our affiliates, or publicly available sources.

Use and Processing of Information

In addition to the purposes and uses described above, we use information in the following ways:

  • To create and display your Hub and business profile.
  • To provide the Checkup and the Hub, including sign-in links and service emails.
  • To review what you submit and reach out to you, for example with reminders about upcoming deadlines, notes on potential gaps, recommendations, and ways we could help, including scheduling a call.
  • To process payments and administer purchases, if and when we offer paid features.
  • To understand how the Services are used and to improve the Checkup, the Hub, and our services.
  • To respond to your questions and requests.
  • To send you updates, educational content, and information about our services. You can unsubscribe from marketing emails at any time using the link in the email, and we will still send account and service emails.
  • To keep the Services secure, prevent abuse, manage our relationships, and meet our legal and professional obligations.

Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose. For example, if you complete a purchase we collect your information to perform our contract with you, but we also retain your information because we have a legitimate interest in maintaining it after the purchase is complete so that we can respond quickly to any questions about your order. As a result, our collection and processing of your information is based, in different contexts, upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business.

If you engage us for legal services, information in your Hub may be added to our client files and used to provide those services.

Artificial Intelligence and Automated Processing

We use artificial intelligence (AI) services to help run the Checkup and the Hub. Currently, when you use the Checkup, your website address, the text of your website’s public pages, and your Checkup answers are sent to Anthropic, PBC through its Claude application programming interface (API), which returns organized business details for you to review. We may also use AI-assisted tools in our internal workflows, for example to review submissions, prepare follow-up, and organize records.

Information sent to an AI provider is processed under that provider’s commercial terms and data policies. As of the date of this policy, Anthropic’s commercial terms state that it may not train its models on content submitted through its API, and it keeps that content only for limited periods under its data retention policies. Those terms are set by the provider and may change, and we may use other AI providers or features over time. We aim to use AI providers whose business terms restrict the use of submitted content for training their models.

AI and automated tools can make mistakes. We show website findings and other automated results so you can confirm or correct them. Currently, the general information shown in your Hub is pre-written by our attorney and selected based on your answers, rather than written by AI. We do not use AI or automated processing to make decisions that produce legal or similarly significant effects about you. As we add AI features to the Hub, such as AI chat about your file or drafting assistance, we will update this policy.

Sharing of Information

In addition to the specific situations discussed elsewhere in this policy, we disclose information in the following situations:

  • Affiliates and Business Transfers. We may share information with our affiliates. We may also share information with an organization that acquires, or plans to acquire, our business, operations, or assets, including at the negotiation stage. This includes a transfer of the Checkup or the Hub to a separate company that we or our principals form or control.
  • Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.
  • Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws or our professional obligations. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, or to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies.
  • Service Providers. We share information with service providers that help us operate the Services, such as providers of website hosting, database, sign-in, and file storage services; AI processing (as described above); email delivery; bot protection; call scheduling; office productivity and document storage; and, if we add paid features, payment processing. These providers process information on our behalf to provide their services to us.
  • No Sale or Sharing for Advertising. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Your Choices

You can make the following choices regarding your personal information:

  • Access to Your Personal Information. You may request access to your personal information by contacting us at the address described below, and we will provide reasonable access to the personal information we have about you, subject to the exceptions described in this policy.
  • Changes to Your Personal Information. You can update most of your business details directly in your Hub. If you cannot update or correct certain information there, contact us at the address described below. Note that we may keep historical information in our backup files as permitted by law.
  • Deletion of Your Personal Information. Typically we retain your personal information for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may, however, request information about how long we keep a specific type of information, or request that we delete your personal information by contacting us at the address described below. If required by law we will grant a request to delete information, but you should note that in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.
  • Objection to Certain Processing. You may object to our use of your personal information by contacting us at the address described below.
  • Marketing Emails. You can unsubscribe from our marketing emails at any time using the unsubscribe link in any marketing email or by contacting us. We will still send you account and service emails, such as sign-in links.
  • Online Tracking and Opt-Out Preference Signals. Our website does not respond to legacy “Do Not Track” browser signals, for which no common industry standard was ever adopted. We do treat a Global Privacy Control (GPC) signal, and any other opt-out preference signal recognized under applicable law, as a valid request to opt out of the sale or sharing of personal information and of processing for targeted advertising, applied to the browser or device transmitting it. Where required by applicable law, we will display confirmation that the signal has been processed. If you are signed in to an account when the signal is transmitted, we will also apply your choice to that account.
  • Revocation of Consent. If you revoke your consent for the processing of personal information then we may no longer be able to provide you services. In some cases, we may limit or deny your request to revoke consent if the law permits or requires us to do so, or if we are unable to adequately verify your identity. You may revoke consent to processing (where such processing is based upon consent) by contacting us at the address described below.
  • How We Verify and Respond to Requests. To protect your information, we will take reasonable steps to verify your identity before acting on a request, which may include asking you to confirm information already in our records or to respond from the email address associated with your account. We will not require you to create an account solely in order to make a request. An authorized agent may submit a request on your behalf with proof of authorization, and we may require you to verify your identity directly with us. We will respond within the time required by applicable law. If we decline your request, our response will explain why and, where applicable law provides an appeal right, how to appeal that decision. If we deny an appeal, you may contact your state attorney general.

How We Protect Personal Information

No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

The Hub uses email sign-in links rather than passwords, so access to your account depends on the security of your email account. You are responsible for keeping your email account secure and for activity under your Hub account, and you should notify us promptly of any unauthorized use. Documents you upload to the Hub are kept in private storage, with access limited to your account and to authorized members of our team and the tools and service providers we use to operate the Hub.

How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy. We apply the following general criteria to determine how long we keep each category of information:

Hub Accounts. Kept while your account is active. If a free account is inactive for twenty-four (24) months, we may delete it and its contents. You can also ask us to delete your account at any time.

Client Files. If you engage us for legal services, information and documents that become part of your client file are kept according to our file-retention practices and professional obligations.

Payment and Transaction Records. Retained for seven (7) years from the date of the transaction to satisfy tax and financial recordkeeping requirements. We do not store complete payment card numbers; those are handled by our payment processor.

Marketing and Mailing List Data. Retained until you unsubscribe or ask us to delete it, and thereafter only as needed to honor your choice — for example, keeping your email address on a suppression list.

Website and Security Data. Retained for up to twenty-four (24) months from collection, or for the retention period set by the applicable service provider, whichever is shorter.

Support and Correspondence. Retained for three (3) years after the matter is closed, unless it becomes part of a client file.

Backups and Legal Holds. Information may persist in routine backups for a limited period after deletion from active systems. Where information is subject to a litigation hold, regulatory inquiry, or other legal obligation, we retain it until that obligation ends, notwithstanding the periods above.

Sensitive Personal Information

Some information we collect, such as your account sign-in information, may be treated as “sensitive personal information” or “sensitive data” under applicable state privacy laws. We do not ask for Social Security numbers, full employer identification numbers, bank or payment card numbers, or health information, and you should not enter them in the Checkup or the Hub. If a document you want to upload contains this kind of information, please remove or redact it first.

We collect and use sensitive personal information only as reasonably necessary to provide the Services you have requested, to secure your account, to detect and prevent fraud and unlawful activity, and for other purposes for which applicable law provides no right to limit. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you, and we do not sell it or share it for cross-context behavioral advertising.

Where applicable law requires your consent before we process sensitive data, we will obtain that consent first. You may ask us to limit our use of sensitive personal information, or withdraw a consent you previously gave, by contacting us using the details below.

Your Privacy Rights

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising or for profiling that produces legal or similarly significant effects.

Regardless of where you live, you may ask us to confirm whether we process your personal information and to access, correct, or delete it by contacting us at grant@frameworklaw.com. We will respond within a reasonable time and as required by applicable law. We may keep information that we are required or permitted to keep, such as client files subject to our professional obligations, records needed to resolve disputes, and information in backups until it is overwritten. We will not discriminate against you for making a request.

Some state laws give residents additional privacy rights. Where those laws apply to us, we will honor those rights as they require.

California Residents. Under California Civil Code Section 1798.83, California residents may ask whether we have disclosed personal information to third parties for their direct marketing purposes. We do not disclose personal information for that purpose.

Children’s Privacy

The Services are intended for adults using them for business purposes and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us at grant@frameworklaw.com and we will delete it.

Users Outside the United States

If you are a non-U.S. user of the Site, by visiting the Site and providing us with data, you understand and agree that the data you provide to us may be processed for the purposes listed in this Policy. You also understand and agree that the data you provide to us may be processed in the United States. U.S. laws regarding the processing of data may be less stringent than the laws of your country. By providing your data, you consent to this processing.

Users in the EEA, UK, and Switzerland

Our Services are directed to, offered to, and intended for residents of the United States. We do not target, market to, or knowingly offer the Services to individuals located in the European Economic Area, the United Kingdom, or Switzerland, we do not monitor the behavior of individuals located in those jurisdictions. We do not intend, by operating a website accessible worldwide, to subject ourselves to the laws of any jurisdiction other than the United States.

If you are located in the European Economic Area, the United Kingdom, or Switzerland and you nonetheless choose to contact us or use the Services, you do so on your own initiative, and you understand that your information will be transferred to and processed in the United States. If you believe we hold personal data about you and you wish to access, correct, or delete it, contact us at grant@frameworklaw.com and we will respond to your request.

Miscellaneous

The following additional information relates to our privacy practices:

  • Transmission of Information to Other Countries. As a company located in the United States, we process personal information in the United States. If you provide your personal information to us your information will be processed in the United States where privacy laws may be less stringent than the laws in your country. By submitting your personal information to us you agree to the transfer, storage and processing of your information in a country other than your country of residence including the United States.
  • Third Party Applications/Websites. We have no control over the privacy practices of websites or applications that we do not own.
  • Changes to This Privacy Policy. We may update this policy from time to time. If we make material changes, we will update the “Last Updated” date below and, where appropriate, notify you by email or through the Hub. We review this policy at least once every twelve (12) months.

Contact Information. If you have any questions, comments, or complaints concerning our privacy practices, or want to make a request described in this policy, please contact us at the address below.

grant@frameworklaw.com

Framework Law Group PC, 630 Johnnie Morris Ave, Sacramento, CA 95838

Last Updated: November 10, 2026