ExpertDraft.ai
TermsConfidentiality

Privacy Policy

Last updated: March 29, 2026

1. Introduction

JMKA LLC (“Company,” “we,” “us,” or “our”), a Wyoming limited liability company operating as ExpertDraft.ai, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. By using ExpertDraft.ai, you consent to the practices described herein.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information when you register for an account or use our services:

  • Full name, email address, and phone number
  • Law firm name, bar number, and state of licensure (attorneys)
  • Professional credentials, board certifications, and CV (expert witnesses)
  • Billing information (processed and stored by Stripe; we do not store full payment card details)

2.2 Case Information and Medical Records

When you submit a case through the Platform, we collect:

  • Case name, case number, and case type
  • Jurisdiction, court, and judge information
  • Case briefs, factual summaries, and legal arguments
  • Uploaded documents, which may include medical records, depositions, evidence, and correspondence

2.3 Automatically Collected Information

When you access the Platform, we automatically collect:

  • IP address, browser type, and operating system
  • Pages visited, time spent, and navigation patterns
  • Device identifiers and general location data

2.4 Cookies and Tracking Technologies

We use essential cookies to maintain your session and authentication state. We may use analytics cookies to understand Platform usage patterns. You can control cookie preferences through your browser settings, although disabling essential cookies may affect Platform functionality.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To generate Records Intelligence screenings, AI Demand Packages, expert witness reports, and other deliverables
  • Account Management: To create and manage your account, process payments, and communicate about your orders
  • Platform Improvement: To analyze usage patterns, diagnose technical issues, and improve our services
  • Communication: To send order confirmations, report delivery notifications, and service-related updates
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

  • Expert Witnesses: Case information is shared with assigned expert witnesses under NDA for the sole purpose of reviewing and certifying reports
  • Payment Processing: Billing information is shared with Stripe for payment processing
  • Cloud Infrastructure: Data is stored on Supabase with encryption at rest and in transit
  • AI Processing: Case materials are processed by AWS Bedrock for report generation. AWS Bedrock does not retain input or output data and does not use it for model training
  • Legal Requirements: We may disclose information if required by law, court order, or government regulation
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity

5. Data Flow

Case materials submitted to ExpertDraft.ai follow this processing pipeline:

  • Submission: Records and documents are uploaded through our encrypted portal or forwarded via email
  • Encrypted Storage: All files are stored in Supabase with AES-256 encryption at rest and TLS 1.2+ encryption in transit
  • AI Processing: Case materials are sent to AWS Bedrock for analysis and report generation. AWS Bedrock does not retain your data after processing
  • Report Generation: AI-generated drafts are stored in encrypted storage and made available through the Platform
  • Encrypted Delivery: Final reports are delivered to the ordering attorney through the Platform’s encrypted interface

6. Data Security and HIPAA

We implement industry-standard security measures to protect your information:

  • Encryption: All data is encrypted at rest (AES-256) and in transit (TLS 1.2+)
  • Access Controls: Role-based access controls with row-level security ensure users can only access their own data
  • Authentication: Secure authentication via Supabase Auth
  • Document Security: Uploaded documents are stored in encrypted storage with access logging
  • Employee Access: Access to production data is limited to authorized personnel on a need-to-know basis

We implement administrative, technical, and physical safeguards consistent with HIPAA requirements for the protection of protected health information (PHI). We maintain Business Associate Agreements (BAAs) with subprocessors that handle PHI.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

7. California Medical Information Act (CMIA)

ExpertDraft.ai processes medical records on behalf of California attorneys in connection with litigation support services. To the extent that the California Confidentiality of Medical Information Act (CMIA, Cal. Civ. Code § 56 et seq.) applies to medical information submitted through the Platform, we handle such information in accordance with CMIA requirements. We do not disclose medical information except as necessary to provide the services described in our Terms of Service or as otherwise permitted by law.

8. Data Retention

We retain your information for the following periods:

  • Account Data and Case Records: Retained for the duration of your account plus 30 days after a deletion request
  • Reports: Retained for the duration of your account plus 30 days after a deletion request
  • Billing Data: Retained as required by applicable tax and financial record-keeping laws
  • Usage Logs: Automatically deleted after 12 months

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate personal information
  • Deletion: Request deletion of your personal information, subject to legal retention requirements
  • Portability: Request a machine-readable copy of your data
  • Restriction: Request that we limit processing of your personal information
  • Objection: Object to processing of your personal information for certain purposes

To exercise any of these rights, contact us at privacy@expertdraft.ai. We will respond to all verified requests within 30 days.

10. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights. You have the right to know what personal information we collect, request deletion of your information, and opt out of the sale of your personal information. We do not sell personal information.

To exercise your CCPA rights, contact us at privacy@expertdraft.ai. We will not discriminate against you for exercising your privacy rights.

11. Subprocessors

Our Platform uses the following third-party subprocessors, each governed by their own privacy policies and subject to contractual confidentiality obligations:

  • AWS (Bedrock): AI processing — no data retention, BAA in place
  • Supabase: Database hosting, file storage, and authentication
  • Stripe: Payment processing — PCI DSS Level 1 compliant
  • Resend: Transactional email delivery
  • Vercel: Application hosting and deployment
  • Cloudflare: DNS management and email routing

12. Children’s Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

13. International Data Transfers

Your information may be processed and stored in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States. By using the Platform, you consent to this transfer.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or through the Platform. The “Last updated” date at the top of this page indicates when the policy was last revised. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at:

JMKA LLC
Wyoming, USA
Email: privacy@expertdraft.ai