Last updated November 4, 2026
Cramdown Privacy Policy
Cramdown does not sell your information, does not use it for advertising, and does not use it to train AI models. This policy explains what we collect, why, and the choices you have.
Drop Off Service LLC d/b/a Cramdown ("Cramdown", "we", "us") provides a document and case-management platform for professionals who work on bankruptcy and restructuring matters. This policy covers the Cramdown web application at cramdown.ai and its subdomains, and the services we provide through it (the "Service").
Most of what the Service holds is uploaded by our customers, the firms that use Cramdown, about their own matters. For that material we act on our customer's behalf and under our agreement with them. If you are not a Cramdown user and believe your information is in a customer's matter, please contact that firm first. We will help them answer you.
Information we collect
We collect only what we need to run the Service for you and your firm.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account information | Name, work email address, firm, role, sign-in records, and multi-factor authentication settings | You, your firm's administrator, or your sign-in provider (for example Google) |
| Matter content | Documents and data you or your firm upload or import: court filings, bank statements, ledgers, schedules, correspondence, and the text and figures we extract from them. This content can include personal and financial information about people named in a matter. | You and your firm |
| Connected services | Files and records you choose to import from services you connect, such as Google Drive, Box, Microsoft 365, QuickBooks Online, Bill.com and Concur, plus the access tokens those services issue to us | The connected service, with your permission |
| Public court records | Dockets and filings retrieved from court systems for matters you work on | Public court databases, at your request |
| Work you create | Notes, chat conversations with the Cramdown assistant, reports, approvals, comments and time entries | You |
| Usage and device information | Pages visited, actions taken, error logs, IP address, browser type and timestamps | Collected automatically when you use the Service |
We use cookies and similar browser storage to keep you signed in, remember your settings and protect your account. We do not use advertising or cross-site tracking cookies.
Google user data
We access your Google data only when you choose to sign in with Google or connect Google Drive, and only to bring the files you pick into Cramdown.
| Google permission | What we do with it |
|---|---|
| Your name, email address and profile picture (sign-in) | Create and identify your Cramdown account, and show which Google account is connected |
| Read-only access to Google Drive | List your folders and files so you can choose what to import, then copy the files you select, or the contents of a folder you choose to keep in sync, into the matter you are working on |
What we never do. We never create, change, delete or share anything in your Google Drive. We do not read files you have not selected or placed in a folder you chose to sync. We do not use Google data for advertising, sell it, or let people read it except as described below.
How we store it. Files you import become part of your matter and are stored like any other upload (see Security). The access tokens Google gives us are encrypted before we store them.
Who sees it. Imported files are visible to the members of your firm who have access to that matter. They are processed by the service providers listed under "How we share information", only to provide the features you use. Cramdown staff access them only when you ask for support, when needed for security, or when the law requires it.
AI models. We do not use Google user data to develop, improve or train generalized AI or machine-learning models.
Limited Use. Cramdown's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Removing access. Disconnect Google Drive in Cramdown's settings at any time. We then revoke our access with Google and delete the stored tokens. You can also remove Cramdown at myaccount.google.com/permissions. Files already imported stay in the matter until you or your firm delete them.
How we use information
We use information to provide the Service you and your firm ask for, and for nothing unrelated.
- Run the Service: store and organize documents, read text from them, classify them, extract transactions and figures, reconcile accounts, and build the reports, schedules and exports you request.
- Answer your questions: the Cramdown assistant reads the documents and data in the matter you are working in to answer you and draft work product.
- Keep accounts secure: verify who you are, enforce each firm's and matter's access settings, and detect misuse.
- Support and fix problems: respond to your requests, investigate errors, and keep the Service reliable.
- Communicate with you: send sign-in, security, invitation and service notices. We send marketing email only if you opt in, and you can unsubscribe at any time.
- Meet legal obligations: keep records the law requires and respond to lawful requests.
AI processing. Some features send matter content to AI model providers, which process it to return a result to you. We use these providers under terms that do not allow them to train their models on your content. We do not use your content, or any Google user data, to train generalized AI models.
De-identified, aggregated data. Where a firm's agreement with us allows it, we combine de-identified data from at least ten matters and use it only to test and improve Cramdown. It cannot identify a firm, a client, any party to a matter or any individual. We do not sell it, and we do not try to re-identify it.
How we share information
We share information only in the cases below, and we never sell it.
- Your firm and your matter team. People your firm or a matter's administrators give access to can see that matter's content. Outside counsel or other invited reviewers see only the parts they are invited to.
- Service providers. Companies that host and run parts of the Service for us, bound by contract to use the information only to provide their service to us:
| Provider | What they do for us |
|---|---|
| Google Cloud | Hosting, file storage, text recognition, and AI processing |
| Supabase | Database hosting |
| Anthropic | AI processing for the assistant and document extraction |
| Clerk | Account sign-in |
| Resend | Sending account and service email |
| Microsoft | Receiving court notices sent to a monitored mailbox |
| GitHub | Tracking feedback and problem reports you send us |
- Services you connect. When you connect a service such as QuickBooks Online, we send it only what a feature you use needs, for example an export you choose to push.
- Legal reasons. When required by law, subpoena or court order, or to protect the rights, property or safety of our users, the public or Cramdown. Where the law allows, we tell the affected customer first.
- Business transfers. If Cramdown is involved in a merger, acquisition or sale of assets, information may transfer under this policy's protections. We will give notice before it becomes subject to a different policy.
How long we keep information
We keep matter content for as long as your firm keeps the matter in Cramdown. When a document or matter is deleted, we remove it from the Service, and backups that contain it are overwritten on our regular backup cycle. Account information is kept while your account is active and for a limited period after it closes, unless the law requires longer.
Security
We protect information with encryption in transit and at rest, encrypted storage of the tokens connected services issue, per-firm and per-matter access controls, multi-factor sign-in, and logging of access to client data. No system is perfectly secure. If a breach affects your information, we will notify you and your firm as the law requires.
Your choices and rights
You can view and update your account information in Cramdown, disconnect any connected service, and ask us to delete your account. Depending on where you live, you may also have the right to access, correct, delete or receive a copy of your personal information, and to object to some uses of it. We will not treat you differently for using these rights.
To make a request, email privacy@cramdown.ai. If your request concerns content a firm uploaded to a matter, we will pass it to that firm and help them respond.
Children
The Service is for professionals and is not directed to children under 16. We do not knowingly collect their information from them.
Changes to this policy
We will post any changes here and update the date at the top. If a change materially affects how we use information already collected, we will notify account holders by email or in the Service before it takes effect.
Contact us
Email privacy@cramdown.ai with any question about this policy or your information.