Updated 1/2/2025

Gray Paper Legal, LLC is committed to protecting your privacy. This privacy policy sets out how we collect and use data associated with you (your “personal information“) and information regarding our use of cookies and similar technologies.

GPL operates a legal service portal and a drafting tool via our websites: secure.graypaperlegal.com and draft.graypaperlegal.com (collectively, the “Services”). This policy applies to the Services

Please read this policy carefully before using the Services. By accessing or using the Services, you consent to the practices described in this policy.

Personal Data Collection

We collect the following categories of personal information: postal address, unique personal identifier, online identifier, Internet Protocol address, internet or other electronic network activity information, including but not limited to browsing history, search history, and information regarding your interaction with an internet website, application, or advertisement, as well as geolocation data, and sensitive personal information.

Sensitive personal information we collect includes account login information, partial credit card information (maintained by a third-party, such as Stripe), precise geolocation, email, name, and address, and any content you enter into the Services. This sensitive information is collected and used for security, personalized services, transactions, and user experience improvement. This sensitive personal information is not sold or shared with third parties.

Cookies

We also gather information using website cookies. Cookies are small files that a site transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s systems to recognize your browser and capture and remember certain information. We use cookies to understand and save your preferences for future visits and compile aggregate data about site traffic and site interaction.

Please also note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have little or no control.

We may partner with third parties to manage our advertising on other sites. Our third party partners may use technologies such as cookies to gather information about your activities on this website, the Services, and other sites in order to provide you advertising based upon your browsing activities and interests.

Several services may enable you to opt out of interest-based ads. Some of these services include:

  • Network Advertising Initiative (NAI) self-regulatory opt-out page
  • Digital Advertising Alliance (DAA) self-regulatory opt-out page and mobile application-based “AppChoices” download page
  • European Interactive Digital Advertising Alliance (EDAA)’s consumer opt-out page

Please note this does not opt you out of being served ads. You will continue to receive generic ads. You may also block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies you may not be able to access all or parts of our website or the Services.

Usage

This information, both personal and collected via cookies, is used for maintaining your access to our Services, communicating with you, delivering personalized customer service, enhancing your user experience, providing product updates, offering new products or services, and tailoring marketing strategies. We do not sell this information to third parties.

Our collection, use, retention, and sharing of your personal information and cookie data are necessary and proportionate to the purposes for which the information was collected and not processed in a manner incompatible with these purposes.

We may share your contact information and subscription details with third-party partners for joint marketing opportunities with your explicit consent. You can opt in or out of such sharing at any time and can manage your preferences via your account settings, customer support, or opt-in/opt-out mechanisms provided in our communications.

We maintain transparency about our data sharing practices. If you consent to us sharing your information for joint marketing purposes, you have the right to know which third parties have received your information, request a copy of the information shared, and withdraw your consent at any time.

We may share your data with service providers or contractors as part of our operations. These third parties are not required to comply with direct requests from you but are obliged to assist us in meeting these requests, including correcting inaccurate information. We do not engage in third-party marketing practices without your explicit consent.

Retention

We retain each category of personal information and cookie data as necessary for the usage described in this policy. We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of our legitimate business interests and satisfying any legal or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and the applicable legal requirements.

Children

The Services are for legal professionals only and not intended for use by any individual younger than 16 years.

Personal Rights

In accordance with applicable privacy laws, you have rights with respect to your personal information including:

  • Right to Remove Personal Information: As a consumer, you have the right to request the deletion of any personal information and cookie data we have collected from you. We will remove this data from our records, inform any service providers or contractors to delete your data from their records, and notify all third parties to whom we have not sold or shared your personal information to delete it unless this proves impossible or involves disproportionate effort.
  • Right to Correct Inaccurate Personal Information: You have the right to request a correction of inaccurate personal information or cookie data we hold about you. We will employ commercially reasonable efforts to rectify the inaccurate data once we confirm your verifiable consumer request.
  • Right to Know What Personal Information and Cookies are Being Collected:You can request that we disclose the categories and specific pieces of personal information and cookie data we’ve collected about you, including the sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Know What Personal Information and Cookie Data is Sold or Shared and to Whom:While we do not sell your personal information or cookie data, you have the right to know if we’ve shared your data and with whom.
  • Right to Opt Out of Sale or Sharing of Personal Information and Cookie Data:You can direct us not to share your personal information or cookie data with third parties. We provide minors under 16 with specific rights regarding the sale or sharing of their personal information or cookie data.
  • Right to Limit Use and Disclosure of Sensitive Personal Information:You can direct us to limit the use of your sensitive personal information and cookie data, which will be limited to providing services or goods reasonably expected by consumers, unless you give explicit consent for other uses.
  • Right to Port Your Data:You have the right to obtain access to your personal information, and to receive that personal information in a commonly used format and to have it ported to another data controller.
  • Right of Non-Discrimination:We uphold the principle of non-discrimination. Users exercising their privacy rights will not face any form of discrimination, including but not limited to, denying goods or services, charging different prices or rates, providing a different level or quality of goods or services, or suggesting that any of the aforementioned may occur as a result of exercising such rights.

Complaints and Requests / Contact

Contacts

All consumers, regardless of their state of residence, can submit requests for information disclosure, correction, or deletion of their personal data using the following methods:

  1. Phone: Contact Mike at (612) 254-1110.
  2. Email: Send a request to [email protected].
  3. U.S. Post: Gray Paper Legal, LLC, Attn: Mike Carlson, 3754 Pleasant Avenue, Suite B5, Minneapolis, Minnesota 55409-1227

California residents may use the dedicated toll-free number for California privacy requests at 888-200-9824.

Procedures

Upon receiving a request, we promptly determine its validity and aim to respond within 45 days, with a possible extension of an additional 45 days when necessary. Responses are delivered via your account with us, or by mail or electronically if no account exists.

The verification process for consumer requests may vary depending on your state of residence due to different verification standards and requirements. We may ask for information to match with our records to verify your identity. For verification purposes, we will not retain this information longer than necessary.

Please note that we are not obligated to provide the information required more than twice in a 12-month period to the same consumer. We are committed to disclosing and delivering the requested information, correcting inaccurate personal information or cookie data, or deleting your personal information or cookie data based on your valid request. For requests covering information beyond the 12-month period prior to the request, we will provide the information unless doing so proves impossible or involves disproportionate effort.

Security

We implement appropriate security procedures and practices, suitable to the nature of the personal information and cookie data collected, to safeguard it from unauthorized or illegal access, destruction, use, modification, or disclosure.

In the event of a data breach, we will promptly notify affected individuals and relevant authorities in compliance with applicable state laws and regulations, including information about the nature of the breach, the categories of personal information involved, the likely consequences, and the measures taken to address the breach, including efforts to mitigate its possible adverse effects.

Updates

Our commitment to your privacy is ongoing. This policy will be reviewed and possibly updated on a biannual basis as appropriate to ensure it reflects current legal requirements, our data collection and processing practices, and technological advancements. We encourage our users to review our policy periodically.