Privacy Policy

Last updated: March 26, 2026

1. Introduction

Yamazaki 18, Inc., operating under the name Tressle (“Tressle”, “we”, “us”, “our”) respects your privacy and is committed to protecting the information we collect about you. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use our website at tressle.ai and our platform and services (together, the “Services”).

By using our Services or providing your information, you accept the practices described in this policy.

2. Roles, Scope & Applicability

  • When you use our Services as an end user or sign up for an account, Tressle acts as a data controller for personal information we collect about you (for example, contact details, login credentials, billing info).
  • When you or your law firm use our platform to upload documents, prompts, case materials or otherwise provide “Client Content”, Tressle acts as a data processor on behalf of your firm (the “Customer”) for that Client Content. The rights and obligations regarding Client Content are governed by your Customer Agreement or, where applicable, a Data Processing Addendum (if executed).
  • This Privacy Policy applies to your personal information processed by us as data controller; it does not govern how your law firm (Customer) processes your data as controller.

3. What Information We Collect

We collect and process the following categories of personal information:

3.1 Information You Provide Directly

  • Contact Information: Name, email address, job title, company name, telephone number.
  • Account Information: Username, password, billing/payment information (through our payment processor).
  • Communication Information: When you contact us for support, sales inquiries or otherwise interact with us.
  • Professional / Business Information: Information about your role, profession, firm, and preferences.
  • Client-Content-Related Metadata: When you upload materials or use the Services, we collect metadata such as date/time of upload, size of document, user identifiers (but not the substantive contents beyond what the Service requires).
  • Sensitive Client Data & Optional Inputs: Any other data you choose to enter into the platform (such as prompts, case notes, estate assets, beneficiary details, or documents) under your Customer Agreement. We acknowledge that given the nature of estate planning, this data may include Sensitive Personal Information (SPI) such as financial data or family health information. We process this strictly as a processor.

3.2 Information Collected Automatically

  • Log and Device Data: IP address, browser type/version, device identifiers, operating system, time zone, pages visited, feature usage, timestamps.
  • Usage Data: Which features you use, volume of queries, time spent, performance metrics.
  • Cookies and Similar Technologies: We use cookies, tracking pixels, and other technologies to enable login sessions, improve Service performance, analyze usage, and for optional marketing purposes. See our separate Cookie Notice for details.
  • Derived / Inferred Data: We may derive or infer additional information such as usage patterns, preferences, or segmentation metrics for operational and analytics purposes.

3.3 Information from Third Parties

  • We may receive contact or business information about you from our partners, analytics providers, advertising networks, event sponsors, or publicly available sources.
  • If your law firm as our Customer provides us additional user data under the Customer Agreement, we will process it in the capacity of processor.

4. How We Use Your Personal Information

We use personal information that we collect for the following purposes:

  • To provide, operate, maintain, and improve our Services, including enabling your use of the platform, authentication, account management, billing, subscription management.
  • To personalize your experience, recommend features, provide customer support, investigate issues, resolve bugs, and respond to your queries.
  • To monitor and improve the performance of our Services (analytics), understand usage patterns, detect and prevent fraud, abuse or security incidents.
  • To send you administrative communications, updates, marketing materials (if you opt-in or we otherwise have permitted basis).
  • To comply with legal obligations, enforce our terms, protect our rights, property and the rights of others.
  • We may also aggregate or anonymize personal information so that it ceases to be personally identifying, and use that aggregated data for analytics or research. We do not use Client Content (e.g., specific estate plans or client names) to train our foundation models or generative AI models that are shared across customers.

5. AI & Client-Content Disclosure

Because our Services are designed for law firms and legal professionals, we offer special transparency regarding how we treat Client Content and how our AI features operate:

  • The documents, prompts, case materials and other content you upload (Client Content) remain under your firm’s control; Tressle processes this content only to provide the Services under your Customer Agreement.
  • We do not use Client Content or uploaded documents to train our core artificial intelligence models or to improve third-party foundation models unless you explicitly opt in.
  • To provide generative AI features (such as drafting or summarization), we utilize third-party Large Language Model (LLM) providers (e.g., Google, Anthropic, or similar enterprise providers). We process Client Content with these providers under strict data retention policies (often referred to as “Zero Data Retention”), meaning your data is not stored or retained by the LLM provider for model training purposes.
  • Our AI features operate only on the content you provide during the active session or workflow. We design our systems to logically isolate each firm’s workspace.
  • We provide audit logs, access controls, and deletion mechanisms (see Retention section) to help you maintain control of Client Content.
  • If we ever change this practice, we will notify you in advance and obtain any required consent.

6. How We Share Your Personal Information

We may share personal information with:

  • Service Providers: We engage vendors, contractors and subprocessors (for example, hosting providers, payment processors, analytics platforms, customer support platforms, email providers). These third parties receive only the personal information necessary to perform their functions and are contractually bound to protect it.
  • Legal / Compliance / M&A: In connection with a merger, acquisition, sale of assets, bankruptcy or reorganizations, we may share personal information after due diligence; we will notify you where required. We also may disclose personal information to law enforcement or regulators if required by law or to protect rights or safety.
  • Aggregate/Anonymized Data: We may disclose or publish aggregated information that does not identify you or your firm.
  • We do not sell or rent your personal information to third parties for their independent use.

7. International Data Transfers

Our primary data storage and processing facilities are located in the United States. If you are located outside the U.S., your personal information may be transferred to, stored, and processed in the U.S. or other jurisdictions where our service providers operate, which may have different data protection laws than your home country.

8. Retention of Personal Information

  • We retain your personal information only as long as necessary to fulfill the purposes for which it was collected (for example, to provide our Services to you, to comply with legal obligations, to resolve disputes).
  • When your account ends or you request deletion, we will delete or anonymize your personal information unless retaining it is required by law or legitimate business interest.
  • Client Content retention is governed by your Customer Agreement or DPA with your firm; we will also isolate or archive it when required.
  • We securely delete or anonymize personal information from backups and inactive systems once it is no longer needed.

9. Security

We take reasonable technical, administrative and physical safeguards to protect personal information from unauthorized access, disclosure, alteration or destruction. These measures include encryption during transit and at rest, access controls based on job-role, network monitoring, incident response processes, and regular security assessments.

While we strive to maintain strong protections, no system is entirely risk-free; we cannot guarantee absolute security.

10. Your Legal Rights

Subject to applicable law, you may have certain rights regarding your personal information, such as requesting access or deletion. To make a request, email eng@tressle.ai and we’ll respond promptly. If your account is part of a law firm, please coordinate with your firm’s administrator first.

11. Children’s Policy

Our Services are not directed to users under the age of 18. However, we acknowledge that due to the nature of estate planning, our Customers (law firms) and their clients may upload or provide data regarding minors (e.g., beneficiaries, guardianships, trusts) via our Services, including through client intake forms. We process this data strictly as a data processor under the instructions of our Customer (the law firm) and in accordance with the Customer Agreement. We do not knowingly solicit personal information directly from children themselves. If we learn that we have collected personal information directly from a child under 13 without parental or guardian consent, we will take steps to delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time (for example, as our Services evolve or legal requirements change). We will post the “Last updated” date at the top of this page. If we make significant changes, we will notify you in a reasonable manner (for example, by email or in-app notice) as required by law.

13. How to Contact Us

If you have any questions or concerns about our privacy practices, or wish to exercise your data rights, you can reach us at:

Yamazaki 18, Inc., operating under the name Tressle

Email: eng@tressle.ai

(We’ll respond promptly to all privacy-related inquiries.)