Legal

Privacy Policy

Effective Date: August 20, 2026

The short version

TrustForge is a tool that law firms use to compare a trust document against a client design sheet. Almost everything sensitive that passes through TrustForge, including trust instruments, design sheets, and information about a firm's clients and their families, belongs to the firm, not to us. We hold it on the firm's behalf; we use it to run the comparisons the firm asks for, to operate and secure the Service, and, unless the firm turns that off, to train a model used only by that firm; and we do not sell it, share it for advertising, or use it to train general-purpose AI without the firm's written permission. If your information is in a document a law firm uploaded, that firm is the right place to start with any question or request. The rest of this policy explains all of that in detail.

This Privacy Policy explains how TrustForge, a brand name of JPT Group, LLC, a Tennessee limited liability company (“TrustForge,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information in connection with the TrustForge website at https://trustforge.estate and the TrustForge service (together, the “Service”). It is incorporated by reference into our Terms of Service (the “Terms”). JPT Group, LLC is the controller of the personal information described in Section 3.1. Capitalized terms not defined here have the meanings given in the Terms.

Contents
  • 1. Who this policy covers
  • 9. Cookies and analytics
  • 2. Our two roles: controller and processor
  • 10. Security
  • 3. Information we collect
  • 11. How long we keep information
  • 4. How we use information
  • 12. Your choices and rights
  • 5. Firm Content and Client Data
  • 13. Minors
  • 6. Artificial intelligence
  • 14. Other matters
  • 7. How we share information
  • 15. How to contact us
  • 8. We do not sell or share personal information

1. Who this policy covers

1.1 This Policy applies to three groups of people: (a) the law firms, legal organizations, and legal professionals that subscribe to the Service and their Authorized Users as the Terms define that term; (b) visitors to our website; and (c) individuals whose personal information appears in documents that a subscribing firm uploads to the Service.

1.2 The third group matters most and is the least obvious. Trust Documents and Design Sheets routinely contain personal information about people who have no relationship with TrustForge and may not know the Service exists: beneficiaries, contingent beneficiaries, trustees and successor trustees, guardians, family members, and others named in an estate plan. Section 2 explains our limited role as to that information, and Section 5 explains how we handle it.

1.3 The Service is offered only to legal professionals for business use and is not offered to consumers.

2. Our two roles: controller and processor

2.1 Privacy laws distinguish between the party that decides why and how personal information is used (a “controller,” or under some laws a “business”) and the party that handles it on that party's instructions (a “processor,” or “service provider”). TrustForge occupies both roles, and which one applies determines who you should contact and what we are able to do.

2.2 Where we are a controller. When a firm or an individual deals with us directly, by signing up, paying, contacting support, subscribing to updates, or browsing our website, we decide how that information is used, and we are the controller of it. Section 3.1 describes this information. Requests about it should come to us, using the contact details in Section 15.

2.3 Where we are a processor. When a firm uploads a Trust Document, a Design Sheet, or any other Firm Content, the firm decides what to upload and why, and controls that material during its subscription. Retention after a subscription ends is governed by Section 11.7 of the Terms. The firm is the controller of that information and TrustForge is its processor. We handle Firm Content on the firm's instructions and as the Terms otherwise permit. We do not decide what a firm uploads, and we do not use Firm Content for our own purposes.

2.4 What this means if your information is in a document a firm uploaded. We have no independent relationship with you, no way to verify your identity, and no authority to make decisions about your information. If you want to access, correct, or delete personal information about you that appears in Firm Content, contact the law firm that uploaded it. If you contact us and we can identify the firm, we will use reasonable efforts to refer your request to that firm and to tell you that we have done so.

2.5 This Policy forms part of the Agreement. As Section 20.2 of the Terms provides, the Terms control over this Policy as to Firm Content and Client Data in the event of any conflict.

3. Information we collect

3.1 Information we collect as a controller.

(a) Account and contact information: name, business email address, business phone number, business mailing address, firm or organization name, job title, and where applicable bar admission or license information.

(b) Authentication information: username, password (stored in hashed form), and multi-factor authentication settings.

(c) Billing information: billing contact, billing address, subscription plan, transaction history, and the limited payment-card details our payment processor returns to us. We do not receive or store full payment card numbers; card payments are processed by our payment processor in accordance with applicable payment card security standards.

(d) Support and correspondence: the content of support tickets, emails, and other communications you send us, and our responses.

(e) Marketing preferences: whether you have subscribed to or unsubscribed from our communications.

3.2 Information we process as a processor. Firm Content, meaning the Trust Documents, Design Sheets, and other materials a firm uploads, together with the Comparison Reports generated from them. Firm Content commonly contains personal information about the firm's clients and about third parties named in an estate plan. See Section 5.

3.3 Information collected automatically. When you use the Service or visit our website, we collect technical and operational information: IP address, browser type and version, operating system and device type, pages viewed and features used, dates and times of access, referring page, and error and diagnostic logs. Under the Terms this is Usage Data, and it excludes Firm Content and Client Data.

3.4 We do not purchase personal information for use in the Service, and we do not obtain personal information from advertising networks or data brokers.

4. How we use information

4.1 We use information we hold as a controller to: create and administer accounts; authenticate Authorized Users and secure the Service; provide, maintain, and support the Service; process payments and manage subscriptions; respond to support requests; send operational and service notices, which are not marketing and cannot be opted out of; send marketing communications you have not opted out of; monitor, troubleshoot, and improve the Service; detect and prevent fraud, abuse, and security incidents; maintain business records; and comply with law and enforce our agreements.

4.2 We use Firm Content solely to perform the Service for the firm that uploaded it, meaning generating Comparison Reports, storing and making the material available to that firm's Authorized Users, and providing support at the firm's request, and as Section 6 permits.

4.3 We use Usage Data to operate, secure, analyze, and improve the Service. We may publish aggregated, de-identified statistics about how the Service is used, provided they do not identify any firm, Authorized User, or individual and do not contain or reveal Firm Content.

5. Firm Content and Client Data

5.1 Sensitivity. We recognize that Trust Documents and Design Sheets are among the most sensitive documents a person creates. They routinely contain net worth and asset schedules; dispositive provisions, including provisions that disinherit or limit a person's share; incapacity provisions and related health information; provisions concerning minors and dependents with disabilities; and detailed family relationships. Much of this material is also subject to the attorney-client privilege or the work-product doctrine.

5.2 How we treat it. We treat all Firm Content as confidential under Section 6 of the Terms, regardless of category. We do not separately classify, score, or build profiles from it. Access by our personnel is limited to what is necessary to provide, secure, or support the Service, to address a technical or support issue at the firm's request, to exercise our rights under Section 9.4 of the Terms, or as required by law.

5.3 What we do not do with it. We do not sell Firm Content or Client Data. We do not share it for advertising or cross-context behavioral advertising. We do not use it to market to anyone. We do not use it to build profiles about any individual. We do not use it for automated decision-making that produces legal or similarly significant effects. And except as Section 6 describes, we do not use it to train artificial intelligence models.

5.4 Consents and notices are the firm's responsibility. Under the Terms, the subscribing firm is responsible for having the rights, consents, and authority necessary to upload Firm Content and to permit us to process it, and for determining whether the rules of professional conduct or other law applicable to it require notice to, or consent from, a client. We do not obtain consent from clients or from individuals named in an estate plan, and we are not in a position to do so.

5.5 Ownership. As between TrustForge and a subscribing firm, the firm retains all right, title, and interest in its Firm Content and Client Data. We claim no ownership of it.

6. Artificial intelligence

6.1 Some features of the Service use artificial intelligence or machine learning. We identify those features in our Documentation at https://trustforge.estate/resources. This Section summarizes Section 9 of the Terms in plain language; if the two ever differ, the Terms govern.

6.2 Running the comparison; where processing happens. We process Firm Content through these features inside our own managed environment on Microsoft Azure, using models that Microsoft hosts within that environment. Firm Content is not sent to OpenAI or to any other developer of a model we use. Those developers do not receive Firm Content, and no model developer uses it to train or improve any model. Microsoft processes Firm Content solely as our service provider, does not use it to train or improve its own models, and does not retain it for platform-safety review. Processing takes place in the United States. This processing generates a Comparison Report; it does not train, fine-tune, or modify any model.

6.3 Firm-specific models. Unless a firm turns it off, we may use that firm's Firm Content to train or fine-tune a model used only by that firm (a “Firm Model”). A firm may disable this at any time through the settings in the Service or by written notice, and we give effect to that election within ten (10) business days. Where we train a Firm Model, then as to the Firm Content used for it we commit that: it is used only for that firm's Firm Model and never contributes to a model serving any other customer or to any general-purpose model; all training and fine-tuning occurs within the TrustForge Environment as the Terms define it, meaning infrastructure we operate, or that an infrastructure, hosting, or model-hosting provider operates on our behalf that is not a Third-Party Model Provider, in each case under confidentiality obligations at least as protective as those in Section 6 of the Terms; we do not transmit it to any Third-Party Model Provider as the Terms define that term; and the Firm Model and its output are available only to that firm and its Authorized Users. A Firm Model is not Firm Content: as Section 9.5(a) of the Terms provides, we own the model itself, while the firm retains ownership of the Firm Content used to train it. We delete or permanently disable a Firm Model within thirty (30) days after the firm opts out or the subscription ends.

6.4 What we will not do without permission. We will not use a firm's Firm Content to train any model available to anyone else, transmit it to a third-party model provider for training, or keep a model trained on it after the subscription ends, unless the firm has given us prior written consent, which it may withhold or revoke at any time.

6.5 Improving the features. We may use de-identified and aggregated data derived from use of these features to evaluate and improve their quality, accuracy, and safety, provided the data does not include and cannot reasonably be used to reconstruct the text of any Trust Document, Design Sheet, or Client Data, and does not identify any firm, Authorized User, or individual.

6.6 Human review. The Service is a work aid. It does not review any document for legal sufficiency and is not a substitute for review by a licensed attorney. We do not use artificial intelligence to make decisions about any individual that produce legal or similarly significant effects.

7. How we share information

7.1 Service providers. We share information with vendors that perform functions on our behalf: cloud hosting, storage, and model hosting (Microsoft Azure), security monitoring, payment processing, email delivery, error tracking, and customer support tooling. We require these vendors by contract to use the information only to perform those functions for us and to protect it under confidentiality obligations appropriate to what they handle. Our infrastructure, hosting, and model-hosting providers are subject to confidentiality obligations no less protective than those in Section 6 of the Terms.

7.2 At a firm's direction. We share Firm Content with the firm that uploaded it and its Authorized Users, and with any third party the firm directs us to, including any integration the firm chooses to enable.

7.3 Legal process. We may disclose information where required by law, subpoena, court order, or other legal process, or where we reasonably believe disclosure is necessary to investigate or prevent fraud, protect the security of the Service, or protect the rights, property, or safety of any person. The preceding sentence does not apply to Firm Content or Client Data, which we disclose only as required by law and subject to Section 6 of the Terms. Where a request concerns Firm Content and we are legally permitted to do so, we will notify the affected firm before disclosing, so that it can seek a protective order or other relief, and we will disclose only the portion we are legally required to disclose.

7.4 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. Firm Content remains subject to this Policy and to the Agreement until changed in accordance with Section 14.3 of this Policy and Section 18 of the Terms.

7.5 Professional advisors. We may share information with our auditors, accountants, insurers, and lawyers, who are bound by professional duties of confidentiality.

7.6 We do not share personal information with advertising networks or data brokers. We do not permit our analytics provider to use personal information for advertising or to build cross-site profiles, and we configure it accordingly.

8. We do not sell or share personal information

8.1 We do not sell personal information, and we have not sold personal information in the preceding twelve (12) months. We do not share personal information for cross-context behavioral advertising or targeted advertising. We do not offer financial incentives in exchange for personal information.

8.2 Because we do not sell or share personal information or engage in targeted advertising, there is nothing for you to opt out of in those categories, and opt-out preference signals such as Global Privacy Control have no effect on our processing.

9. Cookies and analytics

9.1 We use a small number of cookies and similar technologies, limited to two purposes: (a) strictly necessary cookies, which authenticate you, keep you signed in, remember your preferences, and protect against fraudulent access; and (b) analytics cookies, which tell us how the Service and our website are used so that we can improve them.

9.2 We do not use advertising, targeting, or cross-site tracking cookies, and we do not permit third parties to use cookies on our website for their own advertising purposes.

9.3 You can block or delete cookies through your browser settings. If you block strictly necessary cookies, parts of the Service will not work.

10. Security

10.1 As Section 4.6 of the Terms provides, we maintain commercially reasonable administrative, physical, and technical safeguards designed to protect personal information and Firm Content against unauthorized access, use, disclosure, alteration, and destruction. Our current practices include access controls, encryption of data in transit, logging and monitoring, and periodic review; these practices are appropriate to the risk and may change over time. We describe our then-current security practices in our Documentation at https://trustforge.estate/resources.

10.2 No system is completely secure, and we cannot guarantee that our safeguards will not be defeated. Firms and Authorized Users are responsible for safeguarding their credentials, for not sharing them, and for notifying us promptly, and in no event later than seventy-two (72) hours, as Section 4.4 of the Terms requires, if a credential is lost, stolen, compromised, or misused.

10.3 If we become aware of a security incident affecting personal information or Firm Content, we will respond in accordance with applicable law and any commitments in the affected firm's Agreement.

11. How long we keep information

11.1 We keep personal information only as long as necessary for the purposes described in this Policy, including to provide the Service, to meet our legal, tax, accounting, and recordkeeping obligations, to resolve disputes, and to enforce our agreements. In determining how long to keep information we consider its amount, nature, and sensitivity, the potential harm from unauthorized use or disclosure, the purposes for which we hold it, and whether we can achieve those purposes by other means.

11.2 Three retention periods are fixed by the Terms rather than by this Policy. After a subscription ends, a firm has thirty (30) days to retrieve its Firm Content, and we give at least thirty (30) days' advance notice to the firm's Administrator (also called the Owner) and secondary contact before deleting it. Where we have trained a firm-specific model, we delete or permanently disable it within thirty (30) days after the subscription ends or the firm opts out.

11.3 Backup and archival copies may persist for a limited period after deletion from active systems, in accordance with our backup cycle, and remain subject to this Policy and to our confidentiality obligations while they exist.

11.4 We may retain de-identified and aggregated information indefinitely.

12. Your choices and rights

12.1 Where to send a request. If your information is in a document a law firm uploaded, contact that firm. See Section 2.4. If you deal with us directly, contact us using Section 15.

12.2 Rights. Depending on where you live, you may have the right to: confirm whether we process personal information about you and obtain access to it; obtain a copy in a portable format; correct inaccurate or incomplete information; request deletion; opt out of the sale of personal information, targeted advertising, and certain profiling; and appeal a decision we make on your request. We do not sell personal information, engage in targeted advertising, or conduct profiling that produces legal or similarly significant effects, so those opt-outs do not apply to our practices.

12.3 How we handle requests. We will respond within the period required by applicable law; where no period is specified, we aim to respond within forty-five (45) days, and will tell you if we need longer. Where a request concerns information we hold only as a processor, our response is limited to referring the request to the relevant firm. We may ask for information sufficient to verify your identity, and we may decline a request where the law permits, for example where we cannot verify you, where the request concerns information we hold only as a processor, or where an exception applies. If we decline, we will tell you why and how to appeal.

12.4 Marketing. You can unsubscribe from marketing emails using the link in any such email or by contacting us. Operational and service notices are not marketing and will continue.

12.5 No discrimination. We will not deny you service, charge you a different price, or provide a lesser quality of service because you exercised a privacy right.

12.6 Requests we receive as a processor. Where a request concerns Firm Content, we will refer it to the relevant firm and assist that firm in responding to the extent required by the Agreement or by applicable law. We will not access, alter, or delete Firm Content in response to a request from someone other than the firm, except where the law requires it.

13. Minors

13.1 The Service is offered only to legal professionals for business use and is not directed to consumers or to children. We do not knowingly collect personal information from children through the Service or our website, and if we learn that we have done so we will delete it.

13.2 Separately, and importantly, Firm Content frequently contains information about minors: a client's children or grandchildren named as beneficiaries, the subject of a guardianship nomination, or the beneficiary of a minor's trust. We do not collect that information from the minor and we have no relationship with the minor. We use it only to perform the comparison the firm requested, and we do not use it to market to anyone or to build any profile. Requests concerning a minor's information contained in Firm Content should be directed to the firm that uploaded it, or made by the minor's parent or guardian through that firm.

14. Other matters

14.1 United States only. The Service is intended for use only by persons and entities located in the United States, and we operate it in the United States. We make no representation that the Service or this Policy is appropriate or available elsewhere. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law.

14.2 Third-party sites and integrations. Our website and the Service may link to or integrate with third-party products and services. We do not control them, and their handling of personal information is governed by their own privacy policies, not this one. Review those policies before providing information or enabling an integration.

14.3 Changes to this Policy. We may update this Policy. When we do, we will revise the Effective Date above and post the updated Policy. For material changes affecting a subscribing firm, we will give notice to the firm's Administrator by email and through the Service at least sixty (60) days before the change takes effect, on the same terms that apply to changes to the Terms.

14.4 Relationship to the Terms. This Policy forms part of the Agreement. As Section 20.2 of the Terms provides, the Terms control over this Policy as to Firm Content and Client Data in the event of any conflict.

15. How to contact us

15.1 Questions, requests, and complaints about this Policy or our handling of personal information may be submitted through the contact page below or by email. Either channel may be used to exercise the rights described in Section 13.

JPT Group, LLC d/b/a TrustForge — Attn: Privacy

Contact form and current mailing address: https://trustforge.estate/contact
Email: hello@trustforge.estate

15.2 If you are not satisfied with our response, you may have the right to complain to the attorney general or data protection authority in your state.