Privacy Policy

Last updated: August 12, 2026

The key point: Exhibix processes your documents entirely in your browser. Your files never leave your computer, are never uploaded to our servers, and we never have access to their contents.

1. Who We Are

Exhibix ("we," "us," "our") is a browser-based document preparation tool for legal professionals, operated from Florida, United States. Contact: admin@exhibix.net.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name and email address through our authentication provider (Clerk). If you sign in with Google or Microsoft, we receive your name and email from those providers.

2.2 Billing Information

Payment processing is handled by Stripe. We do not store credit card numbers, bank account details, or other financial information on our servers. Stripe's privacy policy governs the handling of your payment data.

2.3 Usage Analytics

We use Google Analytics to collect anonymized usage data: pages visited, session duration, browser type, and general geographic region. This data does not identify you personally and is used to improve the Service.

2.4 Support Requests

When you submit a support request or custom stamp request through the app, we store your name, email, and message to respond to your inquiry.

3. Information We Do NOT Collect

This is the most important section of this policy:

Your documents: PDFs, Word files, images, and any other files you process in Exhibix are never uploaded to our servers. All processing (Bates stamping, exhibit stickers, redaction, exhibit list generation) occurs entirely in your web browser.
Document contents: We never see, read, index, or store the text, images, or metadata within your documents.
Work product: Stamped documents, redacted pages, and exported exhibit lists exist only in your browser and on your local computer.
Client information: Any privileged, confidential, or attorney-client protected information within your documents remains exclusively under your control.

4. How We Use Your Information

Account management: To authenticate you and manage your subscription
Billing: To process payments through Stripe
Communication: To respond to support requests and send important service updates
Improvement: To understand usage patterns and improve the Service (via anonymized analytics)

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5. Third-Party Services

We use the following third-party services:

Clerk (authentication): Processes your login credentials. Clerk Privacy Policy
Stripe (payments): Processes billing information. Stripe Privacy Policy
Google Analytics (usage analytics): Collects anonymized browsing data. Google Privacy Policy

6. Cookies

We use cookies for:

Authentication: To keep you signed in (Clerk session cookies)
Analytics: To track anonymized usage patterns (Google Analytics)

We do not use advertising cookies or tracking pixels. You can disable cookies in your browser settings, though this may affect authentication functionality.

7. Data Security

We implement industry-standard security measures including:

HTTPS/TLS encryption for all connections
HTTP Strict Transport Security (HSTS)
Content Security Policy (CSP) enforcement
Automatic session timeout after inactivity
No server-side document storage (your files never leave your browser)

8. Data Retention

Account information is retained as long as your account is active. If you cancel your subscription, your account data is retained for 90 days in case you reactivate, then permanently deleted. Support request data is retained for 2 years. Anonymized analytics data is retained by Google Analytics per their standard retention policies.

9. Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and associated data
Export your account data
Opt out of analytics tracking by using browser privacy settings or ad blockers

To exercise any of these rights, contact admin@exhibix.net.

10. Children's Privacy

The Service is designed for legal professionals and is not intended for use by individuals under the age of 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or notice within the Service. The "Last updated" date at the top indicates the most recent revision.

12. Contact

For privacy-related questions or requests, contact us at admin@exhibix.net.