1. Overview and Scope

OpenLaw, Inc. (“OpenLaw,” “we,” “us,” or “our”) is committed to protecting the privacy of individuals who visit our Website (“Visitors”) and individuals who register to use the Service (“Users” or “you”). This Privacy Policy describes how we collect, use, disclose, and safeguard information in connection with the openlaw.com Website and the Service. Unless otherwise defined here, capitalized terms have the meanings given in the OpenLaw Terms of Service at openlaw.com/terms, into which this Policy is incorporated.

This Policy covers the openlaw.com consumer marketplace, through which Legal Clients and Consultant Users connect, communicate, and transact. OpenLaw also offers the Lexi platform for law firms, which is governed by a separate privacy policy at lexi.law/privacy.

2. Information We Collect

2.1 Information collected about Visitors

Like other website operators, we collect information that browsers and servers make available through commonly used tools such as cookies (see Section 6). This non-personally-identifying information (“Non-Personal Information”) includes browser type, language preference, referring site, pages requested, and the date and time of each request. We also collect potentially personally-identifying information such as Internet Protocol (IP) addresses. We use Non-Personal Information to understand how Visitors use the Website and to improve their experience.

2.2 Becoming a User

You may create an account directly on the Website or be invited to join. By registering and using the Service after reviewing this Policy and the Terms of Service, you consent to our collection and use of your information as described here. This Policy is presented to you for review when you create your account, together with the Terms of Service.

2.3 Information collected about Users

When you create or use an account, we collect information that alone or together with other information can identify you (“User Personal Information”). This may include, without limitation: your name; email address; billing address; payment information; State Bar number (for attorney Consultant Users); profession, business, or industry; photograph; profile and professional details; the content, documents, and messages you submit through the Service; your search terms and preferences; and information we collect through your use of the Service. We collect only the information you provide or give us access to.

Payment information is processed by our third-party payment processor; we do not store full card numbers on our own servers. Connection credentials (such as OAuth tokens for integrations you enable) are collected when you connect a third-party account, as described in Section 5.

2.4 Location-based data

We may use general location data, with your permission, to provide the Service — for example, to let Consultant Users bid on Jobs in their area and jurisdiction — and not to personally identify you. You can disable location sharing through your device or browser settings, though some features may be affected.

2.5 Confidentiality and Job postings

To use the Service, Job Posters may post information through an online Job form or by speaking with an OpenLaw representative, which may include a description of their business and legal questions. A posted Job is visible to Consultant Users with access to view it (or, for a private Job, only to the Consultant Users the Job Poster specifies) and to OpenLaw personnel for quality control and support. No Job is confidential. Please do not share sensitive or confidential information through the Service. Communications requiring confidentiality should take place outside the Service, such as by telephone, and as further described in the Terms of Service.

2.6 No information from children

The Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a child has provided us personal information, contact [email protected].

3. How We Use the Information We Collect

We use information to:

• Provide the Service you request — for example, to help Legal Clients select a Consultant User, facilitate communication between Legal Clients and Consultant Users, populate online profiles, and simplify invoicing and billing for Jobs;
• Communicate with you — to send Service-related information, provide technical support, solicit feedback, send promotions or event information (from which you may opt out), and notify you of policy changes;
• Operate, secure, and improve the Service — including using aggregated, non-identifying information to operate, improve, and optimize the Website and Service, and to detect, prevent, and address fraud, abuse, and security issues;
• Comply with legal obligations and enforce our Terms.

3.1 AI-assisted features

Certain features may use artificial intelligence (including OpenLaw’s Lexi technology) to assist with tasks such as drafting, summarizing, or organizing content you provide, at your direction. Relevant content you submit may be processed by AI systems and third-party model providers to generate output. We do not use your content to train artificial-intelligence models, and we contractually require the same of our AI providers. AI output may be inaccurate and is not legal advice; see the Terms of Service for your responsibilities regarding review by a licensed attorney.

4. How We Share the Information We Collect

4.1 In general

We do not disclose User Personal Information outside OpenLaw except as described in this Policy or in Section 8 (Compelled Disclosure).

4.2 To operate the marketplace and with your direction

We share the information you choose to make available in order to perform the Service you request — for example, displaying your profile and the information you choose to share when you post or bid on a Job, and enabling communication and transactions between Legal Clients and Consultant Users. Your use of the Service after reviewing this Policy expresses your consent to this sharing.

4.3 Documents

If you upload a document using the documents feature, only Consultant Users may review it. You control access: you may make a document open to all Consultant Users or available by request only, and you may grant different levels of access such as “View Only,” “View and Download,” or “Full Control.”

4.4 Service providers

We disclose information to employees, contractors, and affiliated organizations that process it on our behalf to operate, provide, and support the Service (for example, hosting, email, payment processing, and analytics providers), under obligations to protect it. Some of these parties may be located outside your home country; by using the Service you consent to such transfers, subject to Section 5.

4.5 Merger or sale

If OpenLaw is involved in a merger, acquisition, or sale, we may transfer User Personal Information as part of that transaction. We will seek to ensure its continued confidentiality and will notify you on the Website before any transfer, and the recipient will be required to honor the commitments in this Policy and the Terms of Service.

4.6 No sale of personal information for cross-context behavioral advertising

OpenLaw does not sell your personal information for money, and does not share it for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.

4.7 Aggregated and de-identified information

We may share aggregated or de-identified information that does not identify any individual for any purpose.

5. Gathering and Protecting the Information We Collect

5.1 Safeguards

We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect User Personal Information, including encryption in transit and at rest, access controls, and monitoring. Our security program is built on controls aligned with industry standards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5.2 Your responsibilities

Security is a shared responsibility. You are responsible for maintaining the confidentiality of your account credentials, for managing who has access to your account, and for the choices you make about what information to submit or share through the Service (including in Job postings and shared documents).

5.3 Third-party service providers

We are not responsible for the security or data practices of third-party service providers, integrations, or websites you connect to or access through the Service. Their use of your information is governed by their own terms and privacy policies.

5.4 OAuth and connected accounts

If you connect a third-party account (for example, via OAuth), you authorize OpenLaw to access information from that account within the scopes you grant, solely to provide the Service. You may revoke access through the third-party provider or by contacting us.

5.5 International data transfer

OpenLaw is based in the United States, and information we collect is processed in the United States and may be processed by our service providers in other countries. By using the Service, you consent to the transfer of your information to the United States and other countries, which may have different data-protection laws than your own. Where required, we use appropriate safeguards for such transfers.

6. Our Use of Cookies

6.1 Cookies, generally

We use cookies and similar technologies to operate the Website, remember your preferences, understand usage, and improve the Service. A cookie is a small file stored on your device. You can configure your browser to refuse cookies or to alert you when cookies are being sent; some parts of the Service may not function properly without them.

6.2 Temporary and persistent cookies

We use session (temporary) cookies that expire when you close your browser, and persistent cookies that remain until they expire or you delete them, to recognize you and remember your preferences on return visits.

6.3 Analytics

We use analytics providers (such as Google Analytics) to understand how the Website and Service are used. These providers may set their own cookies and collect information such as IP address and usage data, subject to their privacy policies. You may opt out of certain analytics through tools the providers make available.

6.4 Global Privacy Control

Where required by law, we honor recognized opt-out preference signals, such as the Global Privacy Control (GPC), as a valid request to opt out of sale/sharing for the browser or device that sends them.

7. U.S. State Privacy Rights

Depending on your state of residence (for example, California, Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws), you may have some or all of the following rights regarding your personal information, subject to verification and legal exceptions:

• Know/access — to request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it;
• Correct — to request correction of inaccurate personal information;
• Delete — to request deletion of personal information we collected from you;
• Portability — to receive a copy of your personal information in a portable format;
• Opt out — to opt out of the sale or sharing of personal information and of certain targeted advertising and profiling; and
• Non-discrimination — to not receive discriminatory treatment for exercising your rights.

7.1 How to exercise your rights

Submit a request by emailing [email protected]. We will verify your request (and may require that requests relating to a firm or workspace come from an authorized administrator) and respond within the time required by applicable law (typically within 45 days, extendable as permitted).

7.2 Authorized agents

You may use an authorized agent to submit a request on your behalf, subject to proof of authorization and verification of your identity.

7.3 Sensitive information

Where we process sensitive personal information (for example, certain government identifiers), we limit its use to the purposes permitted by applicable law and the purposes for which you provided it.

7.4 “Shine the Light”

California residents may request information about the categories of personal information disclosed to third parties for their direct-marketing purposes. As stated in Section 4.6, OpenLaw does not disclose personal information to third parties for their direct-marketing purposes.

8. Compelled Disclosure

We may disclose User Personal Information when required to do so by law, regulation, subpoena, court order, or other valid legal process, or when we believe in good faith that disclosure is reasonably necessary to protect the safety, rights, or property of OpenLaw, our Users, or the public, or to investigate fraud or respond to a government request. Where permitted by law and appropriate under the circumstances, we will seek to notify the affected User of such a demand.

9. Your Access to and Control of Your Information

9.1 Access and update

You may access, update, or correct your basic profile information by editing your profile or contacting [email protected].

9.2 Retention

We retain User Personal Information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

9.3 Deletion

To cancel your account or request deletion of your User Personal Information, contact [email protected]. We will retain and use information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements, but, barring legal requirements, we will seek to delete your full profile within thirty (30) days. Residual copies may persist in routine encrypted backups for a limited period before deletion in the ordinary course.

9.4 Communication preferences

We may send you Service, transactional, and administrative messages, which are part of the Service and are not optional while you maintain an account. You may opt out of promotional messages using the unsubscribe link in those messages or your account settings.

10. European, UK, and Swiss Users

If you are in the European Economic Area, the United Kingdom, or Switzerland, the following applies. OpenLaw is the controller of the personal information it collects through the Website and Service for its own purposes. Our legal bases for processing are: performance of a contract (providing the Service); legitimate interests (operating, securing, and improving the Service, and communicating with Users); consent (where required, such as certain cookies or marketing); and compliance with legal obligations. You have the rights of access, rectification, erasure, restriction, portability, and objection, the right to withdraw consent, and the right to lodge a complaint with your supervisory authority. To exercise these rights, contact [email protected]. Where we transfer personal information out of these regions, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify Users of material changes (i) by sending a notice to the email address associated with your account, effective upon sending, and/or (ii) by posting a notice on the Website, effective no sooner than thirty (30) days after posting. Non-material changes take effect immediately. Your continued use of the Service after the effective date of a revised Policy constitutes acceptance of it. We encourage you to review this page periodically.

12. Contacting OpenLaw

Questions about this Privacy Policy or our information practices may be directed to [email protected], or by mail to:

OpenLaw, Inc., 7900 NW 155th St. #105, Miami Lakes, FL 33016.

Support inquiries: [email protected]. Legal notices: [email protected].