Privacy Policy

Information You Provide Directly

When you create an account, claim a profile, or use our services, we may collect:

• Account information: name, email address, and password when you register
• Profile information: for attorneys, bar license number, state, firm name, phone number, website, bio, and practice areas
• Payment information: billing name, billing address, and payment card details (processed and stored by our payment processor, Stripe Inc.; we do not store full card numbers)
• Communications: messages you send through the Platform, support requests, and feedback
• User-generated content: reviews, endorsements, and other content you submit

Information We Collect Automatically

When you access the Platform, we automatically collect certain technical information, including:

• Log data: IP address, browser type and version, operating system, referring URLs, pages viewed, and time/date of visits
• Device information: hardware model, unique device identifiers, and mobile network information
• Usage data: features used, search queries, attorney profiles viewed, and in-session behavior
• Cookies and similar technologies: session cookies, persistent cookies, and pixel tags (see Section 6 below)

Information from Third Parties

We may receive information about you from:

• Authentication providers: if you sign in via Google OAuth, we receive your name, email address, and profile picture from Google
• Public bar association records: attorney name, firm, address, license status, and bar number from publicly available state bar databases
• Analytics partners: aggregated usage and behavioral analytics from third-party analytics services

We use the information we collect for the following purposes:

• Providing services: to create and manage your account, display attorney profiles, process payments, and deliver the features of the Platform
• Verification: to verify attorney bar credentials and validate claimed profile information against state bar records
• Communication: to send transactional emails (account confirmations, billing receipts, security alerts), respond to inquiries, and send service announcements
• Marketing: with your consent, to send you newsletters, platform updates, and promotional materials about Lexoor services (you may opt out at any time)
• Personalization: to tailor search results, recommendations, and the user experience based on your usage patterns and preferences
• Security and fraud prevention: to detect, investigate, and prevent unauthorized access, fraudulent activity, and violations of our Terms of Service
• Legal compliance: to comply with applicable laws, regulations, legal process, and governmental requests
• Analytics and improvement: to analyze how users interact with the Platform, identify technical issues, and improve our services and features
• Business operations: for internal record-keeping, audit purposes, and to protect our legal rights and interests

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:

• Attorney profiles (public): attorney profile information. including name, firm, address, practice areas, bio, and contact details. is publicly displayed on the Platform. Attorneys control the information displayed on their claimed profiles.
• Service providers: we share information with trusted third-party vendors who assist us in operating the Platform, including cloud hosting providers (Supabase), payment processors (Stripe Inc.), email delivery services, and analytics providers. These vendors are contractually bound to process data only as instructed by Lexoor.
• Legal obligations: we may disclose information if required to do so by law, court order, or other governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Lexoor, our users, or the public.
• Business transfers: in the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify affected users via email and/or a prominent notice on the Platform.
• With your consent: we may share information with third parties when you have given us your explicit consent to do so.

We retain your personal information for as long as your account is active or as needed to provide you with services. If you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain certain information to comply with legal obligations, resolve disputes, enforce agreements, or for legitimate business purposes such as fraud prevention.

Attorney profile data sourced from public records may be retained in aggregated or anonymized form even after account deletion. Billing and transaction records are retained for a minimum of seven (7) years as required by applicable tax and financial regulations.

We implement commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit using TLS/SSL, encryption of sensitive data at rest, access controls limiting data access to authorized personnel, and regular security assessments.

Payment processing is handled exclusively by Stripe Inc., which is PCI DSS compliant. We do not store full payment card numbers on our servers.

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information. In the event of a data breach that is reasonably likely to result in harm to affected users, we will notify affected users as required by applicable law.

We use cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies: required for the Platform to function properly, including authentication, session management, and security features. These cannot be disabled.
• Analytics cookies: help us understand how users interact with the Platform, which pages are visited most, and how users navigate. We use this data to improve the Platform.
• Preference cookies: remember your settings and preferences, such as theme selection (light or dark mode) and language preferences.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. We do not currently respond to "Do Not Track" browser signals, but we respect applicable privacy laws that provide similar protections.

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access: the right to request a copy of the personal information we hold about you
• Correction: the right to request correction of inaccurate or incomplete information
• Deletion: the right to request deletion of your personal information, subject to certain exceptions
• Portability: the right to receive your personal information in a structured, machine-readable format
• Objection: the right to object to our processing of your personal information in certain circumstances
• Opt-out of marketing: you may unsubscribe from marketing emails at any time using the unsubscribe link in those emails or by contacting us at contact@lexoor.com

To exercise any of these rights, please contact us at contact@lexoor.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect about you, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To submit a CCPA request, contact us at contact@lexoor.com with the subject line "CCPA Request."

Texas Residents (TDPSA)

Texas residents have rights under the Texas Data Privacy and Security Act (TDPSA), including rights of access, correction, deletion, and portability. To exercise your rights under the TDPSA, contact us at contact@lexoor.com with the subject line "Texas Privacy Request."

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at contact@lexoor.com.

We offer sign-in through Google OAuth. When you use a third-party authentication provider, that provider may collect information about you in accordance with their own privacy policy. Lexoor receives only the information necessary to create or link your Lexoor account (typically your name, email address, and profile picture). We encourage you to review the privacy policies of any third-party authentication providers you use.

The Platform may contain links to third-party websites, including attorney firm websites and external resources. We are not responsible for the privacy practices of those third-party sites. We encourage you to review the privacy policies of any website you visit through links on our Platform.

Lexoor is operated in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Platform, you consent to the transfer of your information to the United States. We take appropriate steps to ensure that international transfers comply with applicable data protection laws.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the revised policy on this page with an updated "Last updated" date. For material changes, we will provide notice via email to registered users or a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy team:

We take all privacy inquiries seriously and will respond within 30 business days.