Privacy Policy

2.1 Account Information. When you create an account, we collect your name, email address, bar admission details, firm name, and contact information. If you subscribe to a paid plan, payment information is collected and processed by our payment processor, Stripe. We do not store credit card numbers on our servers.

2.2 Website Content. We store the content you create and publish through the Service, including text, images, practice area descriptions, attorney biographies, and any other materials you upload or generate using our tools.

2.3 Intake Form Submissions. When visitors submit information through intake forms on User websites, we store that submission data on behalf of the User (the attorney or law firm). This may include the visitor's name, email, phone number, and any other information the User has configured the form to collect.

2.4 Usage Data. We collect anonymized usage data, including pages visited within the platform, feature usage patterns, browser type, device type, and approximate geographic location. We use this data to improve the Service and troubleshoot issues.

2.5 Website Analytics. For User-published websites, we collect page view counts, referral sources, and visitor device information to power the analytics dashboard. This data is aggregated and does not include personally identifiable information of website visitors.

4.1 Attorney as Data Controller. Users (attorneys and law firms) are the data controllers for all client data collected via intake forms on their websites. Users determine what data to collect, how to use it, and how long to retain it. Users are responsible for providing appropriate privacy disclosures to their website visitors and intake form respondents.

4.2 MLO as Data Processor. With respect to intake form data and any client information submitted through User websites, MLO acts solely as a data processor. We store and transmit this data on behalf of the User and process it only according to the User's instructions and as necessary to provide the Service. MLO does not access, analyze, sell, or use client intake data for its own purposes.

4.3 Confidentiality. We understand that intake form data may contain information subject to attorney-client privilege or other confidentiality obligations. We treat all intake form data as confidential and restrict access to authorized personnel only as necessary to operate the Service.

We do not sell your personal data. We do not share data for advertising purposes. We share information only with the following service providers, solely to operate the Service:

• Supabase — database hosting and authentication. Your account data, website content, and intake submissions are stored on Supabase infrastructure.
• Vercel — application hosting and content delivery. Your published website is served through Vercel's global edge network.
• Stripe — payment processing. When you subscribe to a paid plan, Stripe processes your payment and stores your payment method securely. MLO does not store your credit card details.
• Resend — transactional email delivery. Notification emails (new lead alerts, trial reminders, billing receipts) are sent through Resend.
• Anthropic — AI content generation. When you use AI features, firm information is sent to Anthropic's API to generate content. Anthropic does not use this data to train models.

We may also disclose information if required by law, court order, or governmental regulation, or if disclosure is necessary to protect our rights, your safety, or the safety of others.

We implement industry-standard security measures to protect your data, including:

• Encryption in transit via TLS for all data transmitted between your browser and our servers.
• Encryption at rest for all stored data in our database.
• Secure authentication via Supabase Auth with support for email/password and social login.
• Role-based access controls limiting internal access to data on a need-to-know basis.
• Regular automated backups to protect against data loss.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We take reasonable measures to protect your information and promptly investigate any suspected security incidents.

Active Accounts. We retain your account data, website content, and associated information for as long as your account is active and your subscription is current.

Cancelled Accounts. If you cancel your subscription or delete your account, your data remains available for export for 30 days. After the 30-day export window, all data is permanently deleted from our systems, including backups, within 90 days.

We may retain anonymized, aggregated data that cannot be used to identify any individual for analytical and product improvement purposes indefinitely.

Essential Cookies. We use only functional cookies necessary to operate the Service, specifically a session cookie to maintain your authenticated login state. These cookies are strictly necessary and cannot be disabled while using the Service.

Optional Analytics. We may use privacy-friendly analytics to understand how Users interact with the platform. Any analytics data collected is anonymized and aggregated.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not participate in cross-site tracking or targeted advertising.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information, including the right to:

• Know what personal information we collect, the purposes for collection, and the categories of third parties with whom we share it.
• Request deletion of your personal information.
• Opt out of the sale of personal information.
• Not be discriminated against for exercising your privacy rights.

We do not sell personal information as defined by the CCPA. To exercise your CCPA rights, contact us at privacy@modernlawoffice.com. We will verify your identity before processing any request and respond within 45 days as required by law.

ModernLawOffice is a US-based service. All data is processed and stored in the United States. Our primary infrastructure includes Supabase (us-east-1 region) for database hosting and Vercel for application hosting and content delivery.

If you access the Service from outside the United States, you understand and consent to the transfer of your information to the United States, where privacy laws may differ from those in your jurisdiction. For Users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on standard contractual clauses and our service providers' certifications to ensure adequate data protection for any transferred data.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• General support: support@modernlawoffice.com
• Privacy-specific inquiries: privacy@modernlawoffice.com

ModernLawOffice — contact@modernlawoffice.com