Legal
Privacy Notice
Effective September 2, 2026 · Version 2026-09-02
Information we process
Docket processes pre-engagement assessment requests and sales inquiries; account and firm information; client and engagement details; public wallet addresses; exchange or custodian records; uploaded documents; user answers; case work product; support communications; contact preferences; security logs; device and request information; and service-usage data. A public assessment request may include contact details, jurisdiction, tax years, approximate source count, chains, problem categories, deadline, professional-help status, and the summary supplied by the requester. Stripe processes payment credentials; Docket receives transaction identifiers, status, amount, customer references, and limited billing metadata rather than full card details.
How we use information
We use information to respond to inquiries, determine whether a matter fits Docket, authenticate users, operate workspaces, perform assessments and investigations, retrieve blockchain and market data, generate workpapers, process payments, communicate case status, provide support, honor contact preferences, prevent abuse, maintain audit trails, comply with law, and improve reliability and product quality.
Automated processing and service providers
Case data may be processed by automated models and by vendors that provide model inference, blockchain or market data, payments, email, public-web research, monitoring, and security. Docket does not use firm or client records to train AI models, and its configured model route does not permit model providers to train on that data. We limit providers to the information needed for their function and use contractual or technical protections where appropriate. Public blockchain queries can reveal that an address was queried to the applicable provider.
How we share information
We share information with authorized members of the customer’s firm, vendors acting for Docket, advisers under confidentiality duties, and authorities or other parties when legally required or necessary to protect rights and safety. We may transfer information in a merger, financing, acquisition, or sale subject to appropriate confidentiality. We do not sell personal information or share it for cross-context behavioral advertising.
Retention
We retain case records and audit evidence for the period needed to provide the service, support professional review, meet legal and security obligations, and resolve disputes. Our default periods, deletion timing, backup window, and exceptions are published in our Retention and Deletion Commitments. A firm-specific written schedule may apply.
Security
We use access controls, isolated case workspaces, scoped provider credentials, integrity hashes, audit records, and other administrative and technical safeguards. No safeguard eliminates all risk. Do not provide private keys, seed phrases, or credentials capable of moving assets.
Your choices and rights
Firm administrators can manage team access and case records. Anyone who submitted a public assessment request may ask Docket to correct or delete it. Depending on location, individuals may also have rights to request access, restriction, portability, or information about processing. Some records must be retained for security, legal, payment, contact-suppression, or professional-workpaper purposes. Requests may be sent to privacy@docketcrypto.com; we may need to verify identity and, for firm-controlled records, firm authority.
Data protection resources
Firms conducting vendor diligence can review Docket’s Data Processing Addendum, Subprocessor List, and Retention and Deletion Commitments.
International use, children, and changes
Information may be processed in countries other than the user’s own, with legally required transfer safeguards. Docket is a business and professional service and is not directed to children. Material changes to this notice will be identified by a new effective date or version.
Contact
Privacy questions and requests may be sent to privacy@docketcrypto.com.