Privacy Policy

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect:

• Name, email address, and phone number
• Professional credentials (for lawyers: bar number, license state, practice areas)
• Company information (for corporate accounts: company name, industry)
• Profile information (photo, bio, experience)

Usage Data

• Pages visited, features used, and time spent on the platform
• Search queries and matching preferences
• Device type, browser type, and operating system
• IP address and general geographic location

Location Data

With your consent, we may collect precise location data through GPS to help match you with nearby lawyers. You can also manually enter your address or zip code. Location sharing is optional and can be revoked at any time.

Payment Information

Payment card details are collected and processed securely by our payment processor, Stripe. LawLyft does not store your full credit card number, CVV, or other sensitive payment details on our servers.

2. How We Use Your Information

We use the information we collect to:

• Provide our services: Match clients with appropriate lawyers based on practice area, location, and case details
• Facilitate communication: Enable messaging and appointment scheduling between clients and lawyers
• Process payments: Handle consultation fees, emergency surcharges, and lawyer payouts
• Verify accounts: Confirm lawyer credentials and validate user identities through email and phone verification
• Improve the platform: Analyze usage patterns to enhance features and user experience
• Send notifications: Appointment reminders, booking confirmations, and important service updates
• Ensure safety: Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations: Respond to legal requests and enforce our Terms of Service

3. Information Sharing

We may share your information in the following circumstances:

With Lawyers & Clients

When you book a consultation, relevant information (name, contact details, case description) is shared with the matched lawyer. Similarly, lawyer profiles (credentials, ratings, practice areas) are visible to clients searching the platform.

With Service Providers

• Stripe: Payment processing and lawyer payout management
• Email service providers: Sending transactional emails (verification codes, confirmations)
• Twilio: SMS notifications and verification

For Legal Requirements

We may disclose your information when required by law, in response to valid legal requests (subpoenas, court orders), or to protect the rights, property, or safety of LawLyft, our users, or the public.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure password hashing using bcrypt
• Regular security audits and vulnerability assessments
• Role-based access controls for internal systems
• Session management with secure, httpOnly cookies

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users in the event of a data breach.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us at privacy@lawlyft.com. We will respond to your request within 30 days.

6. Cookies & Tracking

We use cookies and similar technologies to improve your experience:

• Essential cookies: Required for authentication, session management, and security
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how users interact with the platform to improve our services

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

7. Third-Party Services

We integrate with the following third-party services to provide our platform:

These third-party services have their own privacy policies. We encourage you to review them.

8. Google API Services User Data Policy

LawLyft's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use Google user data

• Create, update, and cancel calendar events for appointments booked through LawLyft
• Read existing calendar free/busy information to show accurate availability to clients
• Keep the lawyer's LawLyft schedule and Google Calendar in sync

What we do NOT do

• We do not transfer Google user data to third parties except as necessary to provide the calendar sync feature, comply with law, or as part of a merger/acquisition
• We do not use Google user data for advertising purposes
• We do not allow humans to read Google user data unless (a) we have the user's affirmative consent for specific messages, (b) it is necessary for security (e.g., investigating abuse), (c) it is aggregated and anonymized and used for internal operations, or (d) it is required by law
• We do not use Google user data to train generalized/non-personalized AI or machine learning models
• We do not read, sell, or share the contents of any events we did not create

Revoking access

You may revoke LawLyft's access to your Google Calendar at any time by visiting the Google Account Permissions page, or by clicking "Disconnect Google Calendar" inside your LawLyft lawyer dashboard. Revoking access will stop future sync but will not delete events already created.

9. Children's Privacy

LawLyft is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to promptly delete that information. If you believe a child has provided us with personal information, please contact us at privacy@lawlyft.com.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain and use your information as necessary to:

• Comply with legal obligations (tax records, regulatory requirements)
• Resolve disputes and enforce our agreements
• Maintain business records and audit trails

When your account is deleted, we will remove or anonymize your personal data within 90 days, except where retention is required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on our platform at least 30 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: