Privacy Policy

1. Who We Are

KinlyLaw (“KinlyLaw,” “we,” “us,” or “our”) operates the website at www.kinlylaw.com and the connected software platform (the “Service”), which provides document generation tools, supplemental local rules search, and related features for family law practitioners and self-represented litigants in select U.S. states.

This Privacy Policy describes how we handle information about you when you visit the site, create an account, or use any part of the Service. If you have questions, contact us at support@kinlylaw.com.

2. Information We Collect

2.1 Information you provide

Account information. When you register, we collect your name, email address, password (stored as a salted hash — we never store your password in plain text), the U.S. state you select as your primary state, and your role on the platform.

Case and document data. The Service exists to help you draft and manage family-law documents, so most of what you put in is sensitive by nature: parenting plans (which often include children's first names, birth dates, and custody schedules), asset and liability worksheets, personal property classifications, witness lists, exhibit lists, monthly budget figures, and similar materials. We treat all of this as your “User Content.”

Payment information. If you subscribe to a paid plan or make a per-use purchase, our payment processor Stripe collects and stores your payment card details directly. We do not see or store your full card number. We receive only a customer identifier, your subscription status, the last four digits and brand of the card on file, and the billing history needed to provide the Service.

Lawyer Profile information (when applicable). If you opt into the forthcoming Lawyer Profiles directory, we collect the additional professional information you submit — bar admissions, practice areas, biography, and contact preferences — and display the approved portions publicly within the Service.

Communications. When you contact us by email or submit feedback through the Service, we keep a record of that correspondence.

2.2 Information collected automatically

Usage data. We log which features you use and when (for example, document generations, SLR searches, AI strategy requests) so we can enforce plan quotas and improve the Service.

Technical data. Like most websites, we automatically receive your IP address, browser type and version, operating system, referring URL, and timestamps when you interact with the Service. Our error-monitoring provider Sentry may capture limited diagnostic information (such as the URL where an error occurred and a stack trace) to help us fix bugs.

Cookies. We use a single essential, HTTP-only authentication cookie to keep you signed in. We do not use third-party advertising cookies, cross-site tracking, or analytics cookies that profile individual users. See Section 8 below for more.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate your sessions and enforce the limits of your chosen plan.
• Generate the documents you request and store the drafts you choose to save.
• Process subscriptions and per-use purchases through our payment processor.
• Send transactional emails (account confirmations, password resets, payment receipts, profile-status updates, and similar service messages).
• Diagnose and fix bugs, monitor performance, and protect against fraud and abuse.
• Improve and expand the Service, including by reviewing aggregated and de-identified usage trends.
• Comply with applicable legal obligations and enforce our Terms of Service.

We do not currently use your information for advertising or to send you marketing messages. If that ever changes, we will update this policy and give you a way to opt out before sending any marketing email.

4. How We Share Your Information

We do not sell your personal information. We share it only in the limited ways described below.

4.1 Service providers

We rely on a small number of third-party service providers to run the Service. Each acts as a data processor under our instructions and is contractually obligated to keep your information confidential and secure. They include:

• Stripe — payment processing. Stripe receives your payment card information directly and is a separate data controller for that information. See Stripe's privacy policy at stripe.com/privacy.
• Resend — transactional email delivery. Resend processes the email addresses and message content needed to send you service emails.
• Sentry — error monitoring. Sentry receives technical diagnostic data (such as stack traces and the URL of the page where an error occurred) when something goes wrong.
• Vercel — frontend hosting and content delivery.
• Railway — backend application hosting and managed PostgreSQL database (where your account and User Content are stored).
• Cloudflare — DNS resolution and inbound email routing for the kinlylaw.com domain.

4.2 Lawyer Profiles directory

If you opt into the Lawyer Profiles directory and your profile is approved, the information you submit for public display (name, photograph if provided, bar admissions, practice areas, biography, and contact preferences) becomes visible to other users of the Service. You can request removal at any time by emailing support@kinlylaw.com.

4.3 Legal compliance

We may disclose information when we believe in good faith that disclosure is required to comply with a subpoena, court order, or other legal process; to protect the rights, property, or safety of KinlyLaw, our users, or the public; to investigate fraud or violations of our Terms of Service; or to comply with applicable law.

4.4 Business transfers

If KinlyLaw is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and any resulting changes to this policy before your information becomes subject to a different privacy policy.

5. Data Storage, Security, and Retention

Your account and User Content are stored on managed infrastructure located in the United States. We use industry-standard practices to protect your information, including encryption in transit (TLS/HTTPS), hashed and salted password storage, and access controls limiting which personnel can access production systems. No method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your account and User Content for as long as your account remains active. If you delete your account, we will delete your User Content and account information within 30 days, subject to limited exceptions for backups (which expire on the schedule maintained by our hosting provider) and any information we are legally required to retain (such as transaction records for tax and accounting purposes). Aggregated or de-identified information that can no longer be associated with you may be retained indefinitely.

6. Your Rights and Choices

Access and correction. You can review and update most of your account information directly in your account settings. For anything you cannot edit yourself, email us at support@kinlylaw.com.

Deletion. You can request deletion of your account and associated User Content by emailing the address above. We will confirm receipt and complete the deletion within 30 days, subject to the exceptions described in Section 5.

Drafts and saved documents. You can delete individual saved drafts at any time from within the Service. Deleted drafts are removed from active storage immediately and from backups according to our hosting provider's standard retention schedule.

6.1 California residents

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights, in addition to those described above:

• Right to know. You may request a copy of the specific pieces of personal information we have collected about you in the preceding 12 months, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties with whom we have shared it.
• Right to delete. You may request that we delete the personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, but you have the right to make this request.
• Right to non-discrimination. We will not discriminate against you for exercising any of these rights.

To exercise these rights, email support@kinlylaw.com with the subject line “CCPA Request.” We may need to verify your identity before fulfilling the request.

7. Cookies

We use one essential cookie, access_token, which is set when you sign in and removed when you sign out. It is marked HTTP-only and Secure, which means it cannot be read by JavaScript in your browser and is transmitted only over HTTPS. This cookie is strictly necessary to keep you signed in — without it, the Service cannot function for authenticated users.

We do not currently set any third-party advertising cookies, cross-site tracking pixels, or analytics cookies that build a profile of your browsing activity across other websites.

8. Children's Privacy

The Service is intended for adults age 18 or older. We do not knowingly collect personal information directly from children. If you are an adult using the Service to draft documents that involve children (for example, a parenting plan that includes a child's name and schedule), that information is treated as your User Content under this policy and protected the same way as the rest of your account data.

If you believe we have inadvertently collected information directly from a child under 13, contact us and we will delete it promptly.

9. International Users

The Service is operated from and intended for use within the United States. The state-specific tools, court forms, and legal references are designed for U.S. jurisdictions. If you access the Service from outside the United States, you do so on your own initiative and consent to your information being processed in the United States, where data protection laws may differ from those in your country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If we make material changes, we will give you reasonable advance notice by email or through a prominent notice in the Service before the changes take effect. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised policy.

11. Contact Us

Questions, requests, or concerns about this Privacy Policy or our handling of your information should be sent to:

KinlyLaw
Email: support@kinlylaw.com