🔒 PRIVACY & DATA GOVERNANCE

Privacy Policy

Effective Date: August 10, 2026 | Last Updated: August 26, 2026 | Operative Entity: VBDGS LLC

1. Scope and Overview

This Privacy Policy explains how VBDGS LLC ("PE Proper," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information through the PE Proper website, applications, participant portals, support services, and related services.

2. Our Privacy Roles

For account administration, billing, website operations, security, product communications, and business records, PE Proper acts as a business or controller.

For case, matter, client, or participant content submitted by a law firm or Customer ("Customer Content"), the Customer acts as the controller/business and PE Proper acts as its service provider or processor.

3. Personal Information We Collect

• Identifiers & Contact Data: Name, email, phone number, organization, account credentials.
• Customer Content: Party names, asset/debt descriptions, valuations, dates, funding allocations, notes, images, evidence documents, and case references.
• Commercial & Billing Data: Plan selection, transaction status, payment metadata (processed via Paddle), order history.
• Device & Usage Data: IP address, browser type, timestamps, page views, cookie identifiers, system logs.
• Security & Audit Data: Login events, permission changes, exports, shared link access logs, and incident records.

We do not use Customer Content to train generalized artificial intelligence models.

4. Disclosures & No Sale of Personal Data

We do not sell personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising. We disclose personal information solely to service providers supporting database hosting, encrypted file/object storage, payment processing, security, and email delivery as necessary to provide the Service.

5. Data Retention

Active account data is retained for the duration of the subscription. For consumer/personal accounts, cancelled account data is retained for up to 90 days prior to permanent deletion. For professional accounts governed by the Law-Firm Data Processing Addendum (DPA), Customer case records are deleted or returned within 30 days following subscription termination or qualifying deletion request. Protected backups age out according to documented 30-day retention schedules. Billing transaction logs are retained for 7 years as required by financial and tax law.

6. Security Controls

We maintain technical and physical safeguards including TLS 1.2/1.3 encryption in transit, AES-256 storage encryption at rest, tenant-scoped application authorization controls designed to prevent unauthorized cross-account record access, reprocessing of supported uploaded image formats to remove embedded EXIF metadata (including GPS coordinates, camera-identification fields, and EXIF timestamps), single-session access tokens, rate limiting, and revocable participant links.

7. Consumer Privacy Rights (California CCPA/CPRA, Oregon, Colorado, FTC)

U.S. residents may exercise rights to confirm processing, access, correct, delete, or obtain a portable copy of personal information. Submit privacy requests by emailing support@legalcasesuite.com. We recognize universal opt-out signals such as Global Privacy Control (GPC).

8. Children and Health Data Precautions

The Service is restricted to adults (18+). We do not knowingly collect information from children under 13. The Service is not intended to collect protected health information or regulated consumer health data.

9. Privacy Contact & Appeals

Privacy Office: VBDGS LLC, Attn: Privacy Officer
Privacy Email: support@legalcasesuite.com
Appeals Method: Reply to any privacy request decision or email support@legalcasesuite.com with "Privacy Appeal" in the subject line.