Privacy Policy

Introduction

This Privacy Policy explains how LawWorks Inc. ("LawWorks," "we," "us," or "our") collects, uses, discloses, and safeguards information in connection with:

• lawworks.com and any LawWorks-controlled webpages that link to this Privacy Policy (the "Marketing Site"); and
• app.lawworks.com and any other LawWorks-controlled subdomains, applications, or online services that link to this Privacy Policy (collectively, the "Services" or "Application").

This Privacy Policy complements our Terms and Conditions located at https://lawworks.com/terms.

Company details

• LawWorks Inc. is a Delaware corporation.
• Principal place of business: 18650 MacArthur Blvd., Ste 300, Irvine, CA 92612
• Privacy email: [email protected]
• Phone: (949) 329-2434

LawWorks is intended to serve North American law firms. The Services are designed for business and professional use.

Important Notice About Roles (Law Firms Using LawWorks)

LawWorks provides a web-based operating system for law firms, including intake, case management, workflow automation, AI-enabled document generation, reporting and business intelligence, a referral/leads marketplace, and an app-store-style integrations platform.

When a law firm uses LawWorks

A law firm that uses LawWorks generally controls the information it (or its users) submits into the Services ("Customer Content"). In that context:

• The law firm typically decides what data is collected and how it is used.
• LawWorks generally processes Customer Content on the firm's behalf to provide the Services, consistent with our agreements with that firm.

If you are an individual whose information appears in a law firm's use of LawWorks (for example, a prospective client, client, witness, opposing party, referral source, or other contact), please direct privacy requests about that information to the relevant law firm first. We will assist our law firm customers as required by our contracts and applicable law.

When LawWorks acts on its own behalf

LawWorks is responsible for information we collect and use for our own purposes, such as operating the Marketing Site, handling sales inquiries, account administration, billing, security, and product improvement.

Information We Collect

The information we collect depends on how you interact with us (Marketing Site vs. Application) and your role (visitor, firm admin, end user, marketplace participant).

Information you provide directly

Marketing / Sales

• Name, email, phone number, job title, firm name and details
• Information submitted through forms (demo requests, contact requests, event registrations, surveys)
• Communications with us (emails, chat, calls, support tickets)

Account and Service administration

• User and admin profile information (name, work email, role, permissions)
• Authentication and access information (e.g., login events; SSO identifiers if used)
• Preferences and settings

Customer Content in the Application

Customer Content may include (depending on firm configuration and use):

• Intake and contact information for prospective clients and other contacts
• Matter/case information, documents, notes, tasks, and communications
• Workflow automation inputs/outputs
• AI-enabled document generation inputs and outputs
• Reporting and business intelligence data
• Referral/leads marketplace submissions and related communications

Payments

• Billing contact information
• Subscription, invoicing, and transaction records
• Marketplace payment details necessary for payment routing and reconciliation (full payment card information is processed by Stripe)

Information collected automatically

• IP address and general location derived from IP
• Device and browser information (browser type, OS, language, time zone)
• Referrer URLs, pages viewed, links clicked, and interaction data
• Application usage telemetry (feature usage, performance data, diagnostics)
• Security and audit log data (authentication events, access history)

Information we receive from third parties

• Firm administrators (e.g., provisioning accounts, assigning roles)
• Integration partners (if you connect third-party tools)
• Stripe (payment status confirmations and limited transaction information)
• Advertising and analytics partners (campaign measurement)

How We Use Information

• Provide, operate, and maintain the Services (accounts, workspaces, core features)
• Authenticate users, enforce permissions, and maintain audit logs
• Provide customer support, onboarding, and training
• Monitor for suspicious activity and protect against fraud, abuse, and security incidents
• Debug, troubleshoot, and improve reliability and performance
• Understand usage to improve features and develop new capabilities
• Generate aggregated statistics and insights for internal business purposes
• Comply with applicable law and enforce our Terms
• Operate and improve the Marketing Site; measure and optimize marketing campaigns

AI-enabled features; benchmarking and improvement suggestions

By default, we do not send a firm's data to external AI model providers for benchmarking. If a firm opts in, we may send de-identified/anonymized information to AI model providers to benchmark performance relative to other firms and generate suggestions to improve performance.

When using AI providers for this purpose, we contractually prohibit them from using the data we provide to train publicly available models.

Cookies, Analytics, Advertising, and Local Storage

The Marketing Site uses cookies, pixels, tag managers, local storage, and similar technologies. These may be set by LawWorks and by third parties.

Tools used on the Marketing Site

• Google Analytics
• Google Tag Manager
• Google Ads (conversion tracking/pixels)
• LinkedIn Ads (pixel/tag)
• Meta Ads (Meta Pixel)

Consent and cookie categories

We use a cookie consent banner that segments cookies by category (for example: strictly necessary, functional, analytics, advertising). You can update your preferences at any time via [Cookie Settings].

Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals where applicable. GPC generally applies to the browser/device where it is enabled.

Managing cookies through your browser

You can also manage cookies through your browser settings, including blocking or deleting cookies. If you block certain cookies, some parts of the Marketing Site or Services may not function properly.

How We Disclose Information

Service providers

We use vendors to help us operate the business and Services (e.g., hosting, security, support tooling, analytics, communications, billing). These vendors are permitted to process information only to provide services to us and are subject to contractual obligations.

Hosting: We host the Services on Amazon Web Services (AWS) in US-East-2.

We do not currently publish a public list of subprocessors. You may request vendor information by contacting [email protected].

Stripe (payments)

We use Stripe to process payments and facilitate marketplace payment flows, including multi-party marketplace transactions. Stripe processes payment information under its own policies.

Third-party integrations

The Services may allow firm admins to enable third-party integrations. When enabled, information may be shared with the integration provider as directed by the firm.

• Integrations are accessed via scoped APIs.
• Integration partners must provide links to their privacy and security practices.
• Some integration processing occurs outside of LawWorks systems and outside our control.

Marketplace

If your firm participates in the marketplace, referrals/leads may be made available to marketplace participants. Information shared depends on what is submitted and the configuration and actions of participating firms.

Legal, safety, and enforcement

We may disclose information if we believe it is reasonably necessary to comply with law, protect rights and safety, or investigate and prevent fraud, abuse, or security threats.

Corporate transactions

Information may be disclosed or transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate protections.

Data Retention

We retain information for as long as reasonably necessary to provide the Services, meet legal and operational requirements, resolve disputes, enforce agreements, and protect the security and integrity of the Services.

• Audit logs: retained for at least the term of the customer relationship plus 180 days, and may be retained longer where permitted and appropriate.
• Customer Content: retained according to our agreements with law firm customers and their use of the Services, subject to technical constraints and legal holds.
• Marketing Site data: retained as needed for analytics, security, and campaign measurement.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information. However, no system can be guaranteed secure. You are responsible for maintaining the confidentiality of your credentials and using available security features.

International Processing (U.S.-Based)

LawWorks is based in the United States and processes information in the U.S. Our infrastructure is U.S.-based (including AWS US-East-2). If you access the Marketing Site or Services from Canada or elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ.

Children's Privacy

The Marketing Site and Services are not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact [email protected].

Your Privacy Rights and Choices

If your information is in a law firm's workspace

If your information is processed as part of a law firm's use of LawWorks, that firm is typically responsible for responding to privacy requests. Please contact the law firm directly first.

If LawWorks processes your information on its own behalf

Depending on applicable law, you may have rights to:

• Access and obtain a copy of certain personal information
• Correct inaccurate personal information
• Delete certain personal information
• Receive information in a portable format (where applicable)
• Opt out of certain processing (such as targeted advertising)
• Not be discriminated against for exercising your rights

How to submit a request

• Email: [email protected]
• Mail: LawWorks Inc., 18650 MacArthur Blvd., Ste 300, Irvine, CA 92612

We may verify your identity and authority to make a request. If we cannot fulfill a request, we will explain why (subject to legal limitations).

Authorized agents

Where permitted, authorized agents may submit requests on your behalf. We may require proof of authorization and identity verification.

Appeals (certain U.S. states)

If applicable law provides a right to appeal, you may appeal by contacting [email protected] with "Privacy Appeal" in the subject line.

"Sale," "Sharing," Targeted Advertising, and Opt-Outs

We do not sell personal information for money. However, use of third-party advertising and measurement technologies on the Marketing Site may be considered "sharing" for cross-context behavioral advertising, or a "sale" under certain U.S. state privacy laws.

You can opt out by:

• Using our Cookie Settings / consent banner controls
• Enabling GPC in your browser (we honor GPC where applicable)
• Blocking advertising cookies via your browser settings

Third-Party Links and Services

The Marketing Site and Services may include links to third-party websites and services, including integration partners. We are not responsible for the privacy practices of third parties. Please review their privacy policies before providing information or enabling integrations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted at https://lawworks.com/privacy with a revised "Last updated" date. If changes are material, we may provide additional notice through the Services or other appropriate means.

Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

• Email: [email protected]
• Phone: (949) 329-2434
• LawWorks Inc., 18650 MacArthur Blvd., Ste 300, Irvine, CA 92612

Additional Disclosures for California Residents (CCPA/CPRA)

This section applies to California residents to the extent the CCPA/CPRA applies to LawWorks' processing when LawWorks acts on its own behalf.

Categories of personal information we may collect

• Identifiers (name, email, IP address, online identifiers)
• Internet or other electronic network activity (browsing and interaction data; usage data)
• Professional or employment-related information (firm role/title)
• Commercial information (subscription and transaction records)
• Inferences (audience segments for campaign measurement)

Sensitive personal information

Customer Content may include sensitive personal information depending on what a law firm submits. We do not use sensitive personal information to infer characteristics for cross-context behavioral advertising.

"Selling" or "sharing"

We do not sell personal information for money. We may "share" personal information for cross-context behavioral advertising through use of advertising and measurement technologies on the Marketing Site, subject to your choices.

How to exercise California rights

Submit requests using the methods in the "Your Privacy Rights and Choices" section above.

Canada (PIPEDA and Provincial Laws)

If you are in Canada, you may have rights to access and correct personal information and, in some cases, withdraw consent (subject to legal and contractual restrictions). LawWorks processes information in the United States. To submit a request, use the methods in the "Your Privacy Rights and Choices" section above. If the information is in a law firm's workspace, contact the law firm directly first.