What we collect
- Account data: your name and email, either from the social account you sign in with (Google or Facebook) or entered when you create an account with email and password. Passwords are stored only as salted hashes.
- Request data: your state, city, practice area, your description of the matter, the names of other parties, your answers to the intake assistant, and the summary you approve.
- Messages and documents you exchange with Providers through the Service.
- Provider data: professional details, license numbers, phone number, billing records (card details are held by Stripe, not us), and any time records you enter in Billable hours, which are visible only to you.
- Technical data: essential cookies, IP address and device information used for security and to record consent choices.
How we use it
- To run the Service: prepare your summary, match your request, deliver quotes, messages and documents.
- To verify Providers and keep the Service safe.
- To send transactional messages about your account and requests.
- To send advertising emails to Clients who have agreed to receive them. We may choose which ads to send based on your state and the practice areas of your requests. We never use the contents of your matter (your description, answers, summary, messages or documents) to target advertising.
Who we share it with
- Matched Providers receive your approved summary and the other parties' names, without your name or contact details. The Provider you hire receives your name and email.
- Invited attorneys. For requests created on or after September 23, 2026, a redacted version of your summary (practice area, city and state, and a short description with names, contact details, addresses, exact dates and other identifying details removed) may be emailed to attorneys licensed in that state who are not yet on FindLegal, inviting them to join. They see your full summary only after registering.
- Service providers that process data for us: hosting, email delivery (Amazon SES), AI processing of intake conversations (Anthropic), and payments for Provider subscriptions (Stripe).
- Advertisers never receive your personal information. We do not sell personal information and do not share it for cross-context behavioral advertising.
- Authorities, where required by law or to protect someone's safety.
Information about attorneys
To prevent duplicate accounts and invite attorneys to respond to client requests, we keep attorneys' public licensing records obtained from official sources (for example, state open-data registers and official rosters) and business contact details and practice areas published on their own websites. These records are not shown on FindLegal. Attorneys can stop invitations with the link in any invitation email, and can ask us to delete their record at the privacy address below.
Security
Data is encrypted in transit. Documents are encrypted at rest and available only to you and the Provider you hired. No system is perfectly secure — please don't upload identifiers such as Social Security numbers unless your Provider asks for them.
Retention
We keep account and request data while your account is open and for a limited period afterwards for legal and security purposes. Records of consent and unsubscribe choices are kept so we can prove we honoured them.
Your choices and rights
- Unsubscribe from advertising emails at any time (see our Terms for how this affects free Client access).
- Download your account data or delete your account under Manage account → Personal data.
- Depending on your state (for example California, Colorado, Virginia and others), you may have rights to know, access, correct, delete and port your personal information, and to opt out of sale, sharing or targeted advertising. We don't sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising a privacy right. Contact privacy@findlegal.net; we may need to verify your identity.
Children
The Service is not for anyone under 18.
Contact
FindLegal · privacy@findlegal.net