Effective Date: January 15, 2026
Exit Protocol Inc. ("we," "our," or "us") is committed to protecting the privacy and confidentiality of your data. This Privacy Policy describes how we collect, use, store, and protect your information when you use the Exit Protocol forensic intelligence platform.
When you create an account, we collect your email address and a hashed password. We do not store passwords in plaintext.
Through direct file upload (PDF bank statements, financial discovery documents), third-party API integrations (Clio Manage, Plaid), or manual entry, we receive financial transaction records, account balances, and related data necessary to execute forensic tracing protocols. This includes dates, descriptions, debit/credit amounts, and running balances extracted via spatial-grid OCR.
If you use the communication analysis features (AI Judge, BIFF Filter, War Room), we process message text you provide for sentiment analysis and tone rewriting. This data is stored only within your active case context and processed ephemerally — it is not retained beyond the analysis session.
Documents uploaded to the Evidence Vault are encrypted at rest and hashed (SHA-256) for chain-of-custody verification. When the Shadow Report module is used, we also extract and analyze document metadata including:
This metadata is processed solely for the purpose of providing the Shadow Report analysis and is stored within your case context.
We collect standard server logs including IP address, browser type, device information, and access timestamps for security monitoring and platform performance.
If you use the Demo Sandbox, you interact with synthetic financial data only. No personal or real financial information is collected during sandbox usage.
| Purpose | Data Used | Processing Type |
|---|---|---|
| LIBR forensic tracing | Financial transactions, account balances | Deterministic |
| Impeachment Engine | Transactions cross-referenced against sworn affidavits | Deterministic |
| Entity Resolution Graph | Transfer recipients, shell entity identifiers | Deterministic |
| Leakage Analysis | Income data vs. lifestyle spending | AI-assisted |
| Sentinel anomaly detection | Transaction descriptions, amounts, timestamps | Deterministic |
| AI Judge & BIFF analysis | Communication text | AI (Ephemeral) |
| Grand Strategist narratives | Aggregated case facts, timeline events | AI (Ephemeral) |
| Shadow Report | Document structure, XMP metadata, EXIF data | Deterministic |
| Evidence integrity verification | File hashes (SHA-256, MD5) | Deterministic |
| Account authentication | Email, hashed password | Standard |
| Security monitoring | IP addresses, access logs | Standard |
The core forensic engine — LIBR tracing, Impeachment Engine, Entity Resolution Graph, and Sentinel monitoring — processes your financial data using fixed, deterministic algorithms. These modules apply invariable mathematical rules and do not involve probabilistic AI models. Your financial data processed through these modules is never transmitted to external AI services.
Computationally intensive operations — including parsing large discovery sets (10,000+ transactions), executing spatial-grid OCR, and running graph theory algorithms — are processed asynchronously via Celery task queues. Your data is processed in isolated worker contexts and results are stored securely in your case upon completion.
When you upload PDF bank statements, the platform analyzes the geometric structure of each page — mapping the spatial distance between tokens to identify tabular columns (Date, Description, Debit, Credit, Balance). Azure Document Intelligence processes pages in the cloud; Surya OCR provides a local fallback. Upon upload, the parsing core authenticates the SHA-256 integrity of the PDF to establish its chain of custody.
Exit Protocol utilizes the following AI services for specific features:
Exit Protocol processes highly sensitive financial discovery, including sworn affidavits, bank ledgers, and cryptocurrency routing identifiers. We maintain a strict, uncompromising Zero-Training Policy regarding your case data.
Because our platform handles privileged attorney work product and sensitive marital dissolution data, Exit Protocol actively resists broad, unauthorized third-party discovery requests. We will not voluntarily disclose your forensic traces or uploaded ledgers to opposing counsel or civil litigants unless compelled by a valid, jurisdictionally sound court order.
Your data is retained for as long as your account is active and your cases remain open. Upon deletion of a case, all corresponding forensic artifacts — including transaction data, uploaded evidence, AI-generated analyses, OCR-extracted ledgers, entity graphs, and data synced from Clio or Plaid — are permanently removed from our active servers.
Routine backup archives are purged on an automated 30-day schedule. After this period, deleted data is irrecoverable.
You may request full account and data deletion at any time by emailing legal@exitprotocols.com.
For firms utilizing our Sovereign deployment, the entire application is containerized via Docker and deployed as an air-gapped system on your own infrastructure using a "Bring Your Own Key" (BYOK) model. In Sovereign Mode:
Depending on your jurisdiction, you may have the following rights:
To exercise any of these rights, contact us at legal@exitprotocols.com. We will respond within 30 days.
Exit Protocol is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will promptly delete their account and all associated data.
In the event of a security breach that compromises your personal data, we commit to notifying affected users via email within 72 hours of discovery. Notification will include the nature of the breach, the data potentially affected, and the steps we are taking to remediate the issue.
For questions, data access requests, or if you require an audit of your data footprint, direct inquiries to:
Exit Protocol Inc.
Privacy & Compliance
This policy was last updated on January 15, 2026. We will notify you of material changes via the email address associated with your account.