Privacy Policy & Security Guarantee
Effective Date: September 16, 2026 · Version 2.4 (Commercial Enterprise Edition)
The Jepson Zero-Retention Guarantee for Legal Counsel
Jepson is built specifically for patent litigators, technology companies, and IP law firms. We operate under a strict Zero Model Training Policy: your patent queries, claim charts, uploaded prior art documents, and infringement analyses are never used to train, retrain, or fine-tune foundational AI models. All matter data is isolated using tenant-level PostgreSQL Row-Level Security (RLS) and encrypted at rest and in transit.
1. Information We Collect
We collect only the minimum personal and matter data necessary to provision and maintain your secure patent charting workspace:
- Account & Identity Data: Name, professional work email address, law firm or corporate affiliation, and securely salted cryptographic password hashes (managed via Supabase Auth).
- Matter Analysis Data: Public patent numbers (e.g., US 9,123,456 B2), claim selections, user-uploaded prior art PDFs or literature, and user-edited claim charts.
- Billing & Transaction Records: Subscription status, tier entitlements, credit quotas, and transaction identifiers. Credit card numbers are processed directly by our PCI-DSS Level 1 payment processor and are never stored on Jepson servers.
- Technical & Security Telemetry: Anonymized API request timestamps, IP addresses for burst rate-limiting (5 req/min burst defense), and tenant verification headers.
2. Zero AI Training & Privilege Preservation
Under ABA Model Rule 1.6 (Confidentiality of Information) and the Work Product Doctrine (FRCP Rule 26(b)(3)), maintaining client confidentiality and avoiding waiver of privilege is paramount.
- No Model Training: Neither Jepson nor any downstream model API provider has permission to use your proprietary chart mappings, claims, or citations for model training or machine learning evaluation.
- No Cross-Tenant Data Leakage: Your charts and custom prior art remain strictly isolated within your organization’s tenant schema.
- FRCP Rule 11 Compliance: All generated claim charts are provided with verified citation pins, allowing counsel to independently corroborate every pinpoint citation before submission to federal court.
3. Data Architecture & Tenant Isolation
Jepson enforces defense-in-depth data protection:
- PostgreSQL Row-Level Security (RLS): Every query to our database executes with active Postgres RLS policies (e.g.,
auth.uid() = user_id), ensuring that database-level operations physically reject cross-tenant data access. - Encryption at Rest: All stored claim charts, JSON structures, and uploaded prior art PDFs in storage buckets are encrypted using industry-standard AES-256 encryption.
- Encryption in Transit: All communications between your browser, our Next.js frontend, our FastAPI compute engine, and the Supabase database are encrypted over TLS 1.3 with strict HTTPS enforcement.
4. Authorized Subprocessors
We partner exclusively with enterprise infrastructure providers that maintain strict SOC 2 Type II certifications and zero-retention data protection agreements:
| Subprocessor | Function | Data Retention Terms |
|---|---|---|
| Supabase Inc. | Managed Postgres & Auth | SOC 2 Type II, AES-256 encrypted at rest |
| Modal Labs Inc. | Serverless GPU Charting Engine | Ephemeral memory containers; zero disk retention |
| Google Cloud Vertex / Gemini API | Patent Claim Semantic Reasoning | Enterprise Tier: zero customer data retention or training |
| Stripe Inc. | Subscription Billing & Invoicing | PCI-DSS Level 1 Certified |
5. Matter Purging & Your Privacy Rights
We respect your right to control, audit, and permanently erase matter work product:
- Instant Matter Deletion: You can delete any individual claim chart or uploaded prior art document directly from your workspace. When deleted, all associated database records and cloud storage objects are purged permanently.
- Account & Data Erasure (GDPR / CCPA): Upon written request to jepson@kevindavidson.work, we will completely purge your profile, workspaces, and stored matter data from all active databases within 30 days.
- Export Portability: You may export your claim charts at any time in industry-standard formats, including court-ready PDF, editable Microsoft Word (.docx), and Microsoft Excel (.xlsx).
6. Legal Inquiries & Law Enforcement Requests
Jepson will never disclose confidential attorney work product or customer matter data to third parties or government authorities unless compelled by a valid, non-appealable subpoena or court order issued by a court of competent jurisdiction. To the extent permitted by law, Jepson will provide prompt prior notice to the affected law firm or enterprise customer to permit them to move for a protective order or quash the process.
7. Contact Our Data Protection & Security Team
For questions regarding this policy, custom Business Associate Agreements (BAAs), security questionnaires, or enterprise on-premise deployments: