ValorPlus Privacy Policy

Last updated: July 7, 2025

Governing Law: Tennessee, USA

1. Overview

ValorPlus (“we”, “us”, “our”) respects your privacy and is committed to protecting it through our compliance with this policy, including the Tennessee Information Protection Act (TIPA). This Privacy Policy explains how we collect, use, share, and protect personal and non-personal data when you use our document review Service.

2. What We Collect

a) User Account Data

Name, email address, and firm affiliation (provided by your Firm administrator)

b) Uploaded Documents & Processed Content

Text obtained through OCR from your documents (e.g., contracts, agreements)
AI outputs (summaries, metadata) generated via Google’s Gemini-1.5-Flash

c) Usage Metadata

Timestamps, page counts, file types, upload/delete actions for billing/reporting
Minimal DocumentPage records retained even after deletion

d) Consent Records

Acceptance timestamps (and optional IP/version info) for our Terms and Privacy Policy

We do not use cookies or other tracking technologies.

3. How We Use Data

a) Provide and Operate the Service

Allow users to upload and process documents
Generate AI-powered outputs
Track usage and billing per your Firm’s plan

b) Improve Our Service

Analyze aggregated, non-identifiable data to enhance features and performance

c) Compliance & Security

Enforce our Terms, prevent abuse, and satisfy legal obligations (e.g., under TIPA or other applicable laws)

We do not engage in targeted advertising, data sales, or automated profiling/decision-making with your data.

We conduct annual Data Protection Impact Assessments (DPIAs) for high-risk processing activities, such as AI analysis of potentially sensitive documents, in line with TIPA requirements.

4. Data Sharing & Third-Party Disclosure

a) Google Gemini-1.5-Flash

Uploaded OCR’d text is processed using Google’s third-party AI.
Google may store or process data under their Privacy Policy and API terms.
Note: Per Google’s terms, data processed via the paid API is not used to train or improve their models without permission.

b) Service Providers

We may share your data with third-party providers who help us operate the Service (e.g., hosting, backups).

c) Legal Compliance

We may disclose data to comply with law, protect legal rights, or respond to lawful requests (e.g., court orders).

d) Your Firm

Your Firm controls user accounts and has access to usage logs, processed documents, and associated metadata.

5. Data Retention & Deletion

When you delete a document/page, all related content is removed except for a minimal DocumentPage record in our database.
Retained metadata is used only for billing and audit purposes.
All other data is kept as long as necessary for business purposes, legal requirements, or ongoing Firm accounts.
You may opt out of non-essential retention (beyond billing/audit needs) by emailing hello@valorplus.ai; we will confirm deletion within 30 days, subject to legal holds.
Upon Firm termination, you may request full data deletion (where feasible), excluding third-party processed data.

6. Security Measures

We implement industry-standard safeguards, including:

Encryption of data in transit and at rest
Secure authentication and access controls
Logging of usage for tracking and breach investigation

In the event of a data breach, we will notify affected users and Firms within a reasonable timeframe, in accordance with applicable laws (e.g., TIPA’s risk-based requirements, typically within 45 days if harm is likely).

However:

We cannot guarantee the security of third-party platforms like Google. Uploading sensitive or confidential documents is at your own risk.

You are responsible for redacting sensitive or privileged information (e.g., personal identifiers, attorney-client communications) before upload, and for ensuring compliance with professional ethics rules (e.g., Tennessee Rules of Professional Conduct).

We do not access or review content for legal advice.

7. Your Rights & Choices

Under applicable laws (e.g., TIPA, CCPA, GDPR if relevant), you may have rights to:

Access, correct, or delete your personal data
Restrict or object to processing
Export your data (if technically feasible)
Opt out of any future targeted advertising or data sales (though we do not currently engage in these)

To exercise any rights or request a data protection impact assessment (if applicable under TIPA for high-risk processing), email us at hello@valorplus.ai.

Note: Data processed or stored by Google is subject to their policies; we cannot directly delete, access, or modify it on your behalf—please refer to Google’s Privacy Policy for their processes.

8. International Transfers

Your data — including document content — may be processed in the U.S. by both ValorPlus and Google.
U.S. data protection standards may differ from those in your jurisdiction.
By using our Service, you consent to such cross-border transfers.
For transfers subject to GDPR (if applicable), we rely on standard contractual clauses or other approved mechanisms.

9. Minors

Our Service is intended for professionals and business users.
We do not knowingly collect data from children under 13.
If we learn that we have data from a child, we will delete it.

10. Changes to this Privacy Policy

We may update this Policy occasionally. A new version will be posted in /legal/ and linked here.
Continued use after posting constitutes acceptance.
For material changes, you may need to re-consent.

11. Contact Us

For data privacy inquiries or requests, email us at:
📧 hello@valorplus.ai

Thank you for trusting ValorPlus with your document review needs.