PRIVACY POLICY

Effective Date: October 20, 2025

This Privacy Policy explains how Lawzuit ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website and services.

1. INFORMATION WE COLLECT

Personal Information

Name, address, email, phone number
Payment information (processed by Stripe)
Account credentials (username, password)
Government-issued ID (if required for verification)

Case Information

Dispute details and facts of your case
Defendant/opposing party information
Document uploads and attachments
Communications related to your case

Usage Information

IP address, browser type, device information
Pages visited, features used, time spent
Cookies and similar tracking technologies
Referral source and clickstream data

2. HOW WE USE YOUR INFORMATION

We use collected information for:

Service Delivery: Creating documents, processing payments, managing your account
Customer Support: Responding to inquiries, troubleshooting issues
Communications: Sending case updates, notifications, and service announcements
Improvement: Analyzing usage patterns to enhance our platform
Legal Compliance: Meeting regulatory requirements and responding to legal requests
Security: Preventing fraud, abuse, and unauthorized access

We do NOT sell your personal information to third parties.

3. INFORMATION SHARING

We share your information only in the following circumstances:

Service Providers (Subprocessors)

Firebase: File storage and real-time database
Supabase: PostgreSQL database hosting
Stripe: Payment processing
SendGrid: Transactional email delivery
Twilio: SMS notifications
Vercel: Website hosting and infrastructure

These providers are contractually obligated to protect your data and use it only for providing services to us.

Legal Requirements

We may disclose information when required by law, such as:

Court orders or subpoenas
Law enforcement requests
Protection of our rights or safety
Investigation of fraud or security incidents

Business Transfers

If we merge with, are acquired by, or sell assets to another company, your information may be transferred as part of that transaction.

4. DATA RETENTION

We retain your information for:

Active accounts: Duration of account plus 7 years post-case closure
Closed accounts: 30 days for account recovery, then permanent deletion (except for legal/compliance records retained for 7 years)
Payment records: 7 years for tax and accounting compliance
Support tickets: 3 years from last interaction

Retention periods comply with California statute of limitations and legal document retention requirements.

5. YOUR RIGHTS

Under California law (CCPA) and other regulations, you have the right to:

ACCESS

Request a copy of personal information we hold about you

CORRECTION

Request correction of inaccurate or incomplete data

DELETION

Request deletion of your personal information (subject to legal retention requirements)

EXPORT

Receive your data in a portable, machine-readable format

OPT-OUT

Unsubscribe from marketing emails (transactional emails may still be sent)

NON-DISCRIMINATION

Exercise privacy rights without penalty or different service levels

To Exercise Your Rights:

Email privacy@lawzuit.com with your request. We will verify your identity and respond within 45 days.

6. SECURITY MEASURES

We protect your data using:

TLS 1.3 encryption for data in transit
AES-256 encryption for data at rest
Multi-factor authentication (MFA) options
Regular security audits and vulnerability scanning
Access controls and employee training

For more details, see our Security page.

7. COOKIES AND TRACKING

We use cookies and similar technologies for:

Essential cookies: Authentication, security, basic functionality
Analytics cookies: Understanding usage patterns and improving our service
Preference cookies: Remembering your settings and choices

You can manage cookie preferences in your browser settings. See our Cookie Policy for details.

8. CHILDREN'S PRIVACY

Our Service is not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us at privacy@lawzuit.com and we will delete it.

9. CALIFORNIA RESIDENTS (CCPA)

California residents have additional rights under the CCPA:

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of sale (we do not sell personal information)
Right to deletion
Right to non-discrimination for exercising CCPA rights

To exercise CCPA rights, contact privacy@lawzuit.com.

10. INTERNATIONAL USERS (GDPR)

If you are in the European Economic Area (EEA), you have rights under the GDPR including access, rectification, erasure, restriction, portability, and objection to processing.

Our legal basis for processing your data is consent, contract performance, or legitimate interests. Data may be transferred to the United States where our servers are located.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. Material changes will be highlighted for 30 days. Continued use after changes constitutes acceptance.

PRIVACY QUESTIONS?

For privacy requests or questions, contact our privacy team.

Email: privacy@lawzuit.com

Last Updated: October 20, 2025