Privacy Policy

1. Introduction

Arceus Legal (“Arceus Legal,” “we,” “our,” or “us”) values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you access or use our website, platform, contract review services, client onboarding workflows, communications, and related services.

This Privacy Policy is incorporated into and subject to Arceus Legal’s Terms of Service, Terms and Conditions, or applicable letter of engagement, as applicable.

By using Arceus Legal, you acknowledge that your information will be handled as described in this Privacy Policy.

2. Information We Collect

We collect information you provide directly to us, information generated through your use of our services, and limited technical information collected automatically.

Information you provide may include:

• Account information, such as name, email address, password, role, and organization affiliation.
• Organization information, such as company name, industry, website, contract volume, contract types, authorized email domains or authorized users, and company context.
• Client onboarding information, such as administrative contacts, authorized users, preferred reviewing firm, engagement status, and service preferences.
• Contract and legal review materials, such as contracts, order forms, statements of work, data processing agreements, supporting documents, negotiation history, comments, redlines, playbooks, intake responses, and related correspondence.
• Communications with us, including support requests, feedback, emails, Slack messages, meeting notes, and other service-related communications.
• Payment information, such as billing details and transaction records. Payment card information is processed by our payment provider and is not stored directly by Arceus Legal unless expressly stated.

We may also automatically collect technical and usage information, including IP address, browser type, device information, operating system, referring pages, pages viewed, timestamps, log data, and general usage patterns.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve Arceus Legal.
• Create and manage client accounts, authorized users, and organization access.
• Conduct client onboarding and confirm platform access.
• Coordinate contract review services with selected reviewing firms or service providers.
• Receive, organize, review, summarize, redline, and return contract-related materials.
• Communicate with you about your account, contracts, reviews, engagement status, billing, and support requests.
• Process payments and send transaction-related information.
• Monitor usage, maintain platform reliability, and improve the user experience.
• Detect, investigate, and prevent fraud, abuse, unauthorized access, security incidents, and violations of our terms.
• Comply with legal, regulatory, professional, contractual, and operational obligations.

We may use aggregated or de-identified information for analytics, product improvement, benchmarking, or business reporting, provided it does not reasonably identify you or your organization.

4. Legal Review Materials and Confidentiality

Arceus Legal may process sensitive business, contractual, financial, operational, or legal information that you or your organization provide for review.

We treat contract materials and related communications as confidential and use them only to provide, support, improve, secure, and administer the services, or as otherwise authorized by you or required by law.

Where a reviewing law firm or attorney is involved, their handling of information may also be governed by separate terms, professional obligations, conflict checks, terms and conditions, or a letter of engagement.

Arceus Legal is not responsible for the independent privacy practices of third-party reviewing firms, attorneys, or service providers except to the extent required by applicable law or contract.

5. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information and client materials from unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include encryption in transit, restricted access controls, authentication, logging, monitoring, vendor review, and internal security procedures.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

6. Information Sharing

We do not sell your personal information for money. However, we use advertising and analytics partners (described under “Cookies and Tracking Technologies”) whose use of cookies and similar technologies may be considered “sharing” or a “sale” of personal information for cross-context behavioral advertising under certain U.S. state privacy laws, such as the California Consumer Privacy Act (CCPA/CPRA). You can opt out as described in that section and below.

We may share information in the following circumstances:

• With your consent or at your direction.
• With authorized users in your organization, such as admins, reviewers, approvers, or other users with platform access.
• With reviewing firms, attorneys, contractors, or professional service providers involved in delivering the requested services.
• With advertising and analytics partners, such as Google and LinkedIn, who help us measure and deliver advertising and understand how our website is used, as described under “Cookies and Tracking Technologies.”
• With vendors and service providers who help us operate our business, such as cloud hosting, payment processing, analytics, communications, customer support, security, and workflow infrastructure.
• To comply with applicable law, legal process, regulatory requests, subpoenas, court orders, or professional obligations.
• To protect the rights, safety, security, property, or operations of Arceus Legal, our users, clients, partners, or others.
• In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.

7. Data Retention

We retain personal information, account information, client onboarding information, contract materials, communications, and billing records for as long as reasonably necessary to provide the services, comply with legal or professional obligations, resolve disputes, enforce agreements, maintain security, and support business operations.

Retention periods may vary depending on the type of information, the nature of the engagement, legal requirements, and client instructions.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including the right to:

• Access personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of certain information.
• Request a copy of certain information in a portable format.
• Object to or restrict certain processing.
• Opt out of marketing communications.
• Opt out of targeted advertising, or the “sale” or “sharing” of your personal information, where applicable.

You may exercise these rights by contacting us using the information below. We may need to verify your identity or authority before fulfilling certain requests.

Some information may be retained where required or permitted by law, contract, professional obligation, security needs, dispute resolution, or legitimate business purposes.

9. Cookies and Tracking Technologies

We and our third-party partners use cookies, pixels, tags, and similar tracking technologies to operate, secure, analyze, and improve our website and services, and to measure and deliver advertising.

The third-party tools we currently use include:

• Google Analytics, to understand how visitors find and use our website.
• Google Ads, to measure the performance of our advertising campaigns and reach people who have previously visited our website.
• LinkedIn Insight Tag, to measure the performance of our LinkedIn advertising, attribute conversions, and reach relevant audiences on LinkedIn.

These partners may set their own cookies and collect information such as your IP address, device and browser information, and pages viewed, subject to their own privacy policies. We encourage you to review the privacy policies of Google and LinkedIn for details on how they process this information.

You can control cookies through your browser settings, and you can opt out of certain advertising and analytics through tools such as Google’s Ads Settings and Google Analytics Opt-out Browser Add-on, and LinkedIn’s advertising preferences in your account settings. Some portions of the service may not function properly without cookies.

10. Children’s Privacy

Arceus Legal is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete the information where required.

11. Third-Party Services

Our services may integrate with or link to third-party services, including communication tools, payment processors, cloud providers, reviewing firms, and other business tools.

This Privacy Policy does not apply to third-party services that we do not control. You should review the privacy policies and terms of those third parties.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will update the “Last updated” date above and may provide additional notice where required.

Your continued use of Arceus Legal after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

support@arceus.legal