Effective Date: June 25, 2026
This Privacy Policy ("Policy") describes how DingDuff Inc., a Texas corporation ("DingDuff," "we," "us," or "our"), handles information in connection with your use of the DingDuff platform, including all related services, MCP servers, APIs, integrations, and content made available through the platform (collectively, the "Service"). This Policy is incorporated by reference into our Terms of Service. Capitalized terms not defined herein have the meanings given to them in the Terms of Service.
When you create an account, we collect the information necessary to establish and maintain your subscription, such as your name, email address, and payment details. We may also collect technical information generated by your use of the Service, such as log data, device identifiers, and usage metadata. We use this information solely for legitimate internal purposes, including operating, maintaining, and improving the Service; processing payments and managing your subscription; communicating with you regarding your account, billing, and updates to this Policy or our Terms of Service; ensuring the security and integrity of the Service; and complying with applicable legal obligations. The Service principally functions as a pass-through resource connector to third-party data sources. We do not build a profile of your research or retain the substance of your work product; tool-call parameters are retained only briefly, for security and error-diagnosis, as described in Section 7, and are then reduced to aggregate counts.
DingDuff does not sell, rent, or trade your personal information to third parties for their marketing purposes or for any other commercial purpose. Your data is not our product.
Our tool allows Claude to run searches and retrieve cases and statute content, and those are necessarily communicated to our server in order for the tool to work. However, we do not see the conversational context in which those tool calls occur. For example, we can see that Claude accessed a statute, but we have no idea (and don't want to know) why it accessed that statute. The DingDuff citation checker is designed to run locally (either on your machine [in cowork] or in Claude's virtual machine [in browser]), so that the work product you are cite checking never reaches the DingDuff server.
We do not share your personal information with third parties except when we are required to do so by applicable law, regulation, legal process, or enforceable governmental request, including but not limited to subpoenas, court orders, or other compulsory legal process. We may also share information with service providers who perform functions on our behalf (such as payment processors), but only to the extent necessary to provide the Service and subject to obligations of confidentiality.
The Service uses CourtListener's legal database operated by the Free Law Project, which provides case law, statutes/codes, and the RECAP archive of federal court dockets and documents. When you run a search or retrieve a document, a query is sent to CourtListener's server, though without any information which could identify you. CourtListener maintains its own privacy practices: https://www.courtlistener.com/terms/#privacy.
DingDuff is accessed through Claude, an AI assistant operated by Anthropic. When you invoke a DingDuff tool, Claude transmits the tool call and its parameters to our server. We do not receive your broader conversation with Claude (see Section 3). Anthropic's collection and use of your prompts and conversation are governed by Anthropic's own privacy policy, available at https://www.anthropic.com/legal/privacy.
To operate the Service, we rely on a small set of infrastructure providers, each bound by contract to handle your information only as needed to perform their functions and to maintain confidentiality and security:
Stripe, CourtListener, and Anthropic are described elsewhere in this Policy. We do not provide any of these subprocessors with the substance of your research or work product, nor with the conversational context in which you use Claude.
DingDuff reserves the right to modify this Policy at any time and for any reason, in its sole discretion. We will provide you with notice of material changes by email or through the Service. Your continued use of the Service after such notice constitutes your acceptance of the modified Policy. If you do not agree to a modified Policy, your sole remedy is to discontinue use of the Service.
We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction. Data you provide and data we generate in the course of operating the Service — including account records, payment records, and tool-call inputs retained under Section 7 — is encrypted at rest in our databases and backups using industry-standard algorithms, and data in transit between you, our service, and our subprocessors is protected by TLS. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
We host the Service and store data using reputable third-party cloud infrastructure providers located in the United States, under confidentiality and security obligations.
We retain personal information only as long as necessary for the purposes described in this Policy:
Our own practices. DingDuff uses only the cookies and similar technologies necessary to operate the Service, keep you signed in, and maintain security. We do not use cookies or tracking technologies to follow you across other websites, and we do not sell or share your personal information for cross-context behavioral advertising.
Third-party content and services. Some pages include content or services provided by third parties. Those third parties may set their own cookies and collect information about your device and activity, including across other websites:
We do not control, and are not responsible for, the independent data practices of these third parties.
"Do Not Track." DingDuff does not itself track visitors over time and across third-party websites for advertising, and therefore does not respond differently to browser "Do Not Track" signals. Third parties whose content appears on our pages may respond to such signals in accordance with their own policies.
If you believe you have discovered a security vulnerability in the Service, please report it to hello@dingduff.com with "SECURITY" in the subject line. We will acknowledge receipt within five (5) business days, investigate the report in good faith, and keep you informed of our progress. We will not pursue legal action against good-faith researchers who comply with this policy and do not access user data, degrade the Service, or publicly disclose the vulnerability before we have had a reasonable opportunity to address it.
Use of DingDuff is limited strictly to adult attorneys in the United States. Access by children is forbidden under all circumstances. Therefore, we do not knowingly obtain or maintain personal information about children. If you learn that a child has illicitly accessed our computer systems, please notify us at hello@dingduff.com so that we may terminate the associated account and delete the associated data.
Depending on where you live, you have specific rights regarding your personal information. We respect those rights regardless of where you reside and extend the following protections to all DingDuff users:
State law. California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), and Utah (UCPA) residents are entitled to the rights described above under their respective state privacy laws. Residents of other states with comprehensive privacy laws may have similar rights; we will honor any such request to the extent required by applicable law.
How to exercise these rights. Email hello@dingduff.com from the email address associated with your account. We will respond within the time period required by applicable law — generally 45 days, extendable once by 45 additional days if reasonably necessary. You may designate an authorized agent to make a request on your behalf; we will require reasonable proof of the agent's authority and your identity.
If you have questions about this Policy or our data practices, or wish to exercise a privacy right, contact us at:
DingDuff Inc., hello@dingduff.com