Legal

Privacy Policy

Version 1.1 · Effective 2026-08-30

This policy explains what personal information divvi collects, why each item is needed, which service providers process it, how long case data is retained, and how to request access or deletion. Sensitive case data is deleted 90 days after a case is marked complete. Full Social Security numbers normally stay in your browser; the encrypted divviQDRO workflow is the limited exception described below.

Who we are

divvi is a document preparation service and legal technology platform based in Utah. We help individuals prepare legal documents for divorce, decree modifications, postnuptial agreements, and Qualified Domestic Relations Orders; we run mediation and AI-assisted negotiation services; we file prepared packets with the court when you buy divviFile; we operate a post-decree co-parenting app; and we refer people to independent attorneys, mediators and other professionals through divviNetwork. We are not a law firm and do not provide legal advice.

Questions about this policy: privacy@divviutah.com

What we collect — and what we deliberately do not

We are intentional about data minimization. Here is exactly what we store and why:

Full nameYes — required for court documents
Email addressYes — account and communication
Mailing addressYes — required for court documents
Date of birthYes — required for court documents
Income & employmentYes — required for child support calculations
Asset names & valuesYes — required for property division
Account numbers (last 4 only)Yes — for identification only; full account numbers are never collected or stored
Social Security Numbers (full)Yes — encrypted at rest, for each parent and for each minor child. Utah courts require the full number on the sealed Non-Public Information forms (1051GEJ for parents, 1052GEJ for children), so we store it encrypted, decrypt it only on our servers at the moment that form is generated, and never display it back to you or send it to your browser
Social Security Numbers (last 4)Yes — stored as a reference identifier only
Children's informationYes — names, DOBs, custody arrangements required for court forms
Payment informationProcessed by Stripe; we never see or store card numbers
Browser/device dataAggregate usage analytics (page views and feature events) via Google Analytics and Vercel Analytics — no names, no case content, no identifying details. See our Cookie & Analytics Notice.

Social Security Numbers

Utah courts require Social Security numbers on sealed Non-Public Information Sheets — Form 1051GEJ for each parent, and Form 1052GEJ for each minor child. Neither form is part of the public record.

Here is how divvi handles SSNs:

  • You enter each parent's number during intake and each child's on the children step. They are sent to our servers over an encrypted connection and stored encrypted at rest (AES-256-GCM), with the key held in our server environment and never in your browser
  • A full number — a parent's or a child's — is decrypted only on our servers, only at the moment the sealed form is generated, and is never sent back to your browser or shown to you again
  • Everywhere else in divvi — every screen, every other document, every export — only the last 4 digits are used
  • divviQDRO uses the same protection: retirement plans require both parties' full numbers to divide an account, and they appear only on your retirement order and the confidential plan sheet
  • Stored case data is automatically purged 6 months after your divorce is finalized
  • The downloaded HTML file stays on your device under your control

Account numbers

For bank accounts, retirement accounts, investment accounts, mortgages, car loans, and credit cards, we collect only the last 4 digits of the account number. Full account numbers are never requested, accepted, or stored.

How we use your information

  • To generate your divorce documents
  • To send you case status notifications
  • To allow your spouse to review and sign documents
  • To improve the divvi platform (aggregated, anonymized analytics only)

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

Who we share data with

SupabaseDatabase and file storage — data encrypted at rest (AES-256) and in transit (TLS 1.2+)
VercelHosting platform — processes request data to serve the application
StripePayment processing — governed by Stripe's privacy policy; we share only what Stripe requires to process a transaction
Anthropic (Claude AI)AI features: chat assistants, document audit/review, stipulation and parenting-plan drafting, mediation analysis, transcript extraction, and the decree explainer. The information needed to produce a response (your prompts and relevant case details) is sent to Anthropic. Anthropic does not use your data to train its models.
Utah state courtsWhen you file: your case documents are submitted to the court per normal filing procedures

divviNetwork referrals

Asking divviNetwork for an attorney, mediator, financial professional or therapist creates a request in divvi's own system. We do not hand your details to a professional automatically. When you accept an introduction, we share your name, contact details, and the short description of what you need — nothing from your case file, your documents, or your finances unless you send it to them yourself.

Once you engage a professional, they hold your information under their own privacy practices and their own professional obligations, not ours. divvi may receive compensation on some referrals; that is disclosed on the referral itself.

The divvi app and co-parenting tools

The post-decree app stores what you put in it: your calendar and custody schedule, shared child expenses and receipts, messages between co-parents, and documents you upload to the vault. Where two co-parents share a case, each of you can see what the other posts to the shared calendar, expense log and message thread — that is the point of a shared record, and it is not private between you.

Paid AI features read your decree and the case information you have already given divvi in order to answer your questions. That processing runs through Anthropic on the same terms as every other AI feature above.

Text messages and mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories described above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

If you give us your phone number and opt in to text messages, we use it only to contact you about your own case — updates from your case manager, questions about information you have already given us, and appointment reminders. We do not text you marketing.

Consent to receive text messages is never required to use divvi, is never pre-selected, and can be withdrawn at any time by replying STOP to any message. Withdrawing it stops the texts and nothing else; your case, your documents, and the messages in your portal are unaffected. Reply HELP to any message, or write to cases@divviutah.com, for assistance.

Message frequency varies with what is happening in your case. Message and data rates may apply, and are set by your mobile carrier rather than by us.

Data retention

We retain your account and case data for as long as your account is active. Approximately 6 months after your case is finalized, sensitive fields stored in our database are automatically stripped — Social Security last-4, income amounts, and asset account last-4 — leaving the non-sensitive case record. You may request deletion of your data at any time, and we will process eligible deletion requests as described below.

Audit logs (records of signing, document generation, and other significant actions) are retained as needed for document preparation recordkeeping and security, and are protected from modification or deletion by design.

Your rights under Utah law

Under the Utah Consumer Privacy Act (Utah Code § 13-61-101 et seq.), including amendments effective July 1, 2026, you may have the right to:

  • Know what personal data we hold about you
  • Request a copy (portability) of your data
  • Correct inaccuracies in your personal data
  • Request deletion of your data
  • Opt out of the sale of your personal data (we do not sell data)
  • Opt out of targeted advertising (we do not engage in targeted advertising)

To exercise any of these rights, use the form below or email privacy@divviutah.com. We will respond within the timeframe required by law (and in any event within 45 days). We may need to verify your identity before processing a request.

Security

  • All data is encrypted in transit (TLS) and at rest (AES-256 via Supabase)
  • Access to production data is restricted to authorized personnel only
  • SSNs and full account numbers are architecturally prevented from reaching our servers
  • All significant actions are logged in an immutable audit trail

In the event of a breach of system security affecting your personal information, we will notify you in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement and with the steps needed to determine the scope of the breach and restore system integrity, as required by the Utah Protection of Personal Information Act (Utah Code § 13-44-101 et seq.).

Children

divvi is intended for adults. We collect information about minor children only as required for court forms — names, dates of birth, and custody arrangements. This information is not used for any other purpose.

Cookies and analytics

We use Google Analytics and Vercel Analytics to measure aggregate usage — page views and feature events. These analytics contain no names, no case content, and no identifying details. See our Cookie & Analytics Notice for details and choices. Divvi does not sell personal data and does not use personal data for advertising.

Changes to this policy

When we update this policy we will update the version and effective date above. For material changes we will notify you and ask you to accept the updated policy before continuing to use the service. Your affirmative acceptance is recorded.

Contact

divvi
Utah, United States
privacy@divviutah.com