Privacy Policy
Table of Contents
- 1. Our Approach to Privacy
- 2. Personal Information We Collect & How We Use It
- 3. Disclosure of Your Personal Information
- 4. Data Storage, Retention & Deletion
- 5. Data Security
- 6. Your Rights
- 7. Third-Party Links & Services
- 8. Children's Privacy
- 9. Changes to This Policy
- 10. Contact Information
- Annex 1 — Data Categories Table
1. Our Approach to Privacy
DivvyRight LLC (“DivvyRight,” “we,” “our,” or “us”) operates a cloud-based financial disclosure compilation platform available via our website at divvyright.com and related mobile applications (the “DivvyRight Service” or “Service”). Our Service is designed to help individuals, legal professionals, and other authorized users compile, organize, and generate financial disclosure documents in connection with divorce and family law proceedings.
We recognize that the personal and financial information you entrust to us is among the most sensitive data you possess. Protecting your privacy is not merely a legal obligation — it is foundational to the trust upon which our Service is built. This Privacy Policy (“Policy”) describes how we collect, use, disclose, store, and protect your personal information when you access or use the DivvyRight Service.
By creating an account, accessing, or using the Service in any manner, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described in this Policy. If you do not agree with any part of this Policy, you must discontinue use of the Service immediately. This Policy should be read in conjunction with our Terms of Service, which govern your overall use of the DivvyRight Service.
2. Personal Information We Collect & How We Use It
We collect personal information through several channels in order to provide, maintain, and improve the DivvyRight Service. The categories and methods of collection are described below.
2.1 Information You Provide Directly
When you register for an account, interact with the Service, or contact us, you may provide the following types of information:
- Account Data: Your full legal name, email address, phone number, password (stored in hashed form), and account preferences.
- Case Information: Details about your legal matter, including case number, jurisdiction, names of parties, attorney information, court identification, and dates relevant to your proceedings.
- Financial Data: Income information (salary, wages, bonuses, commissions, self-employment income, rental income, investment returns, and other sources of revenue), expenses, assets (real property, vehicles, bank accounts, retirement accounts, investment portfolios, business interests, personal property), debts and liabilities (mortgages, credit cards, student loans, personal loans, tax obligations), insurance policies, and any other financial information required for disclosure compilation.
- Documents: Financial statements, tax returns, pay stubs, bank statements, investment account statements, property deeds, vehicle titles, insurance declarations, and any other documents you upload to the Service for the purpose of financial disclosure compilation.
- Questionnaire Responses: Answers to guided questions within the Service pertaining to your personal background, marriage and family details, employment history, health information relevant to financial disclosure, education history, custody arrangements, and lifestyle expenditures.
2.2 Information We Receive From Third-Party Sources
With your explicit authorization, we may receive financial account information from third-party data aggregation services or document analysis tools. When you upload financial documents or connect third-party services, the following data may be processed by DivvyRight:
- Account names, types, and numbers (masked where applicable)
- Account balances (current and available)
- Transaction history (dates, descriptions, amounts, categories)
- Institution names and identifiers
- Account holder identity verification data
DivvyRight does not store your banking login credentials. If we integrate with third-party financial data providers in the future, your authentication with your financial institution will be handled entirely by the third-party provider, and your credentials will never be transmitted to or accessible by DivvyRight. Any third-party provider’s handling of your data is governed by their own privacy policy.
Accuracy Disclaimer: While we endeavor to present third-party financial data accurately within the Service, DivvyRight does not independently verify the accuracy, completeness, or timeliness of data received from third-party sources. You are solely responsible for reviewing all imported data for accuracy before finalizing any disclosure documents.
2.3 Information Collected Automatically
When you access or use the Service, we automatically collect certain information about your device and usage patterns, including:
- Device Information: Device type, operating system and version, browser type and version, screen resolution, and unique device identifiers.
- IP Address: Your Internet Protocol address, which may be used for approximate geographic location determination, security monitoring, and fraud prevention.
- Usage Data: Pages viewed, features accessed, clickstream data, session duration, referring and exit URLs, and interaction patterns within the Service.
- Cookies & Similar Technologies: We use essential cookies to maintain session state and authentication. We may also use analytics cookies (such as those provided by Google Analytics or similar services) to understand how users interact with the Service. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair the functionality of the Service.
- Analytics: We use third-party analytics services, including Vercel Analytics and Google Analytics, to collect aggregated usage data that helps us understand performance, identify areas for improvement, and optimize the user experience.
2.4 How We Use Your Information
We use the personal information we collect for the following purposes:
- Financial Disclosure Compilation: To compile, organize, format, and generate financial disclosure documents based on the information you provide, which is the primary purpose of the Service.
- Account Administration & Support: To create and manage your account, authenticate your identity, provide customer support, and respond to your inquiries.
- Service Improvement: To analyze usage patterns, diagnose technical issues, develop new features, and improve the overall quality, reliability, and security of the Service.
- Legal Compliance: To comply with applicable federal, state, and local laws, regulations, legal processes, and enforceable governmental requests.
- Communications: To send you Service-related notifications, account alerts, security updates, and (with your consent) informational communications about the Service. You may opt out of non-essential communications at any time.
- Security & Fraud Prevention: To detect, prevent, and respond to fraud, unauthorized access, and other potentially harmful activities.
DivvyRight does not sell, trade, rent, or otherwise commercialize your personal information for marketing purposes. We do not share your personal data with third-party advertisers. Your financial and personal information is used exclusively in connection with the provision of the DivvyRight Service as described in this Policy and our Terms of Service.
3. Disclosure of Your Personal Information
We understand the extreme sensitivity of the information entrusted to us. We limit the disclosure of your personal information to the following circumstances:
3.1 Service Providers & Subprocessors
We engage trusted third-party service providers and subprocessors who assist in operating and maintaining the Service, including cloud hosting providers, database management services, payment processors, email delivery services, and customer support platforms. These providers are contractually bound to use your personal information solely for the purpose of providing services to DivvyRight and are required to maintain appropriate security measures consistent with this Policy.
3.2 Third-Party API Partners
When you authorize connections to third-party services (such as financial data aggregation providers), your data may be transmitted to and from those services in accordance with their own privacy policies and terms of use. We encourage you to review the privacy policies of any third-party services you connect to through the DivvyRight Service.
3.3 Legal Compliance & Law Enforcement
We may disclose your personal information if required to do so by law, or if we have a good-faith belief that such disclosure is reasonably necessary to: (a) comply with a legal obligation, subpoena, court order, or other legal process served on DivvyRight; (b) protect and defend the rights, property, or safety of DivvyRight, our users, or the public; or (c) investigate or prevent suspected illegal activity, fraud, or violations of our Terms of Service.
3.4 Business Transactions
In the event that DivvyRight is involved in a merger, acquisition, reorganization, asset sale, bankruptcy, or similar business transaction, your personal information may be transferred as part of that transaction. In such circumstances, we will provide notice to affected users before personal information is transferred and becomes subject to a different privacy policy. Any acquiring entity will be required to honor the commitments made in this Policy with respect to personal information collected prior to the transfer.
3.5 Anonymized & Aggregated Data
We may create anonymized, de-identified, or aggregated data sets derived from personal information collected through the Service. Such data cannot reasonably be used to identify any individual user. We may use and disclose this anonymized data for research, analytics, service improvement, and other lawful purposes without restriction.
3.6 Absolute Prohibition on Adverse Disclosure
DivvyRight will NEVER voluntarily disclose your personal or financial information to opposing counsel, your spouse or former spouse, or any adverse party in your legal proceedings. Your data is your data. We do not share user information between parties in a case, and access to your account and its contents is strictly limited to you and any professionals you have explicitly authorized within the Service. This commitment is a core principle of the DivvyRight platform and is further addressed in our Terms of Service.
4. Data Storage, Retention & Deletion
4.1 Storage Infrastructure
Your personal information is stored on secure, encrypted servers operated by our cloud hosting providers within the United States. All data at rest is encrypted using AES-256 encryption. All data in transit between your device and our servers is protected using TLS 1.2 or higher encryption protocols.
4.2 Retention Period
We retain your personal information for the duration of your active subscription to the DivvyRight Service. Upon termination of your account (whether initiated by you or by DivvyRight in accordance with our Terms of Service), your personal information, including all financial data, case information, documents, and compiled reports, will be permanently deleted from our systems within thirty (30) calendar days of account termination, unless retention is required by applicable law or regulation.
4.3 Data Export & Portability
Prior to account termination, you may request a complete export of your data in a machine-readable format. DivvyRight provides data export functionality within the Service, allowing you to download your compiled financial disclosure documents, uploaded documents, and associated data. We recommend exporting your data before initiating account closure.
4.4 Document Purging
Upon deletion of your account, all compiled financial disclosure documents, uploaded source documents, generated reports, and associated metadata are permanently purged from our systems, including backup systems, within the thirty (30) day deletion window described above. This process is irreversible.
5. Data Security
We implement and maintain commercially reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction.
- Access Controls & Role-Based Permissions: Access to personal information within the Service is governed by role-based access controls. Users may only access data associated with their own account and any accounts for which they have been explicitly granted permission (e.g., attorney access to a client’s case).
- Audit Logging: We maintain comprehensive audit logs that record access to and modifications of personal data within the Service. These logs are used for security monitoring, compliance, and incident investigation purposes.
- Employee Access: DivvyRight employee access to user personal information is strictly limited to personnel who require such access to perform their job functions (e.g., customer support, system administration). All employees with access to personal data are subject to confidentiality obligations.
- Regular Security Assessments: We conduct regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses in our systems and infrastructure.
- Breach Notification: In the event of a data breach that compromises the security, confidentiality, or integrity of your personal information, DivvyRight will notify affected users within seventy-two (72) hours of confirming the breach, in accordance with applicable state and federal notification requirements. Notification will include a description of the breach, the types of information involved, and recommended steps to protect yourself.
- Continuous Improvement: DivvyRight is committed to continuously improving our security posture and pursuing industry-recognized certifications as appropriate.
While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to implementing best practices and continuously improving our security posture.
6. Your Rights
Depending on your jurisdiction, you may have certain rights with respect to the personal information we hold about you. DivvyRight is committed to honoring these rights to the fullest extent permitted by law.
- Right of Access: You have the right to request confirmation of whether we process your personal information and to obtain a copy of such information.
- Right to Correction: You have the right to request correction of inaccurate or incomplete personal information we hold about you. You may also update much of your information directly through your account settings within the Service.
- Right to Deletion: You have the right to request deletion of your personal information, subject to certain legal exceptions (e.g., data we are required to retain by law).
- Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information under certain circumstances, such as while we verify the accuracy of information you have contested.
How to Exercise Your Rights
You may exercise your rights by contacting us at privacy@divvyright.com or by using the applicable features within your account settings. We will respond to verified requests within thirty (30) days, or such shorter period as may be required by applicable law. We may request additional information to verify your identity before fulfilling your request.
Jurisdiction & State-Specific Rights
DivvyRight is organized under the laws of the State of Tennessee, and this Policy is governed by Tennessee law. If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (note: DivvyRight does not sell personal information), and the right to non-discrimination for exercising your privacy rights. To submit a CCPA/CPRA request, contact us at privacy@divvyright.com.
7. Third-Party Links & Services
The DivvyRight Service may contain links to third-party websites, services, or applications that are not owned or controlled by DivvyRight. This includes, but is not limited to, payment processing services, financial data providers, and external informational resources.
We are not responsible for the privacy practices, content, or security of any third-party websites or services. The inclusion of a link within the Service does not imply endorsement by DivvyRight. We strongly encourage you to review the privacy policy and terms of service of any third-party website or service before providing personal information to, or through, such third-party services.
Your interactions with third-party services, including any information you provide to them, are governed solely by those third parties’ own privacy policies and terms. DivvyRight bears no liability for the acts or omissions of any third party with respect to your personal information, except to the extent such third party is acting as a subprocessor under our direct contractual authority.
8. Children’s Privacy
The DivvyRight Service is intended for use by individuals who are at least eighteen (18) years of age. We do not knowingly collect, solicit, or maintain personal information from anyone under the age of 18. The nature of the Service — financial disclosure compilation in connection with divorce proceedings — is inherently directed at adults.
If we become aware that we have collected personal information from a minor under the age of 18, we will promptly delete such information from our systems. If you believe that a minor has provided personal information to DivvyRight, please contact us immediately at privacy@divvyright.com.
9. Changes to This Policy
DivvyRight reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will:
- Update the “Effective Date” and “Version” at the top of this Policy.
- Provide notice to registered users via email or a prominent notification within the Service at least fifteen (15) days prior to the changes taking effect.
- Post the revised Policy on our website at divvyright.com.
Your continued use of the Service after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the Service and may request deletion of your account and personal information as described in Section 6 above.
We encourage you to periodically review this Policy for the latest information on our privacy practices.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy, your personal information, or our privacy practices, please contact us using the following information:
We will endeavor to respond to all privacy-related inquiries within a reasonable timeframe, and no later than thirty (30) days from receipt.
Annex 1 — Data Categories Table
The following table summarizes the categories of personal data collected by DivvyRight, the purposes for which each category is processed, the legal basis for processing, and the applicable retention period.
| Category of Data | Purpose | Legal Basis | Retention Period |
|---|---|---|---|
| Account Information | Account creation, authentication, communication, customer support | Performance of contract; legitimate interest | Duration of active subscription + 30 days |
| Financial Data | Financial disclosure compilation, document generation, accuracy verification | Performance of contract; explicit consent | Duration of active subscription + 30 days |
| Case Information | Populating disclosure forms, jurisdictional compliance, document formatting | Performance of contract; legitimate interest | Duration of active subscription + 30 days |
| Documents | Source material for disclosure compilation, reference and verification | Performance of contract; explicit consent | Duration of active subscription + 30 days; purged upon deletion |
| Usage Data | Service improvement, analytics, security monitoring, performance optimization | Legitimate interest | 24 months from collection (anonymized thereafter) |
| Third-Party Financial Data | Account aggregation via third-party providers, balance and transaction import, disclosure compilation | Explicit consent | Duration of active subscription + 30 days; connection revocable at any time |