Legal
Privacy Notice
Last updated: June 2026 (DRAFT)
1. What we collect
Account information you provide (name, email, firm, role); attorney verification materials (bar number, jurisdictions, insurance declaration); client matter intake content; usage and security telemetry (IP, browser, timestamps).
2. How we use it
To verify attorneys, route qualified intakes, send service emails (verification decisions, insurance reminders, billing notices, intake delivery), prevent abuse, and meet legal obligations. We do not sell personal data and we do not use intake content for advertising.
3. Who can see your information
Client intake records are visible only to the client who created them and the attorney(s) the client consented to share with. Attorney verification status and profile details are visible to the public directory once published. Append-only audit records (verification events, billing events, credit transactions, lead receipts, email events) are visible only to STX.ESQ staff for compliance review.
4. Security
Data is encrypted in transit (TLS) and at rest. Privileged operations are performed server-side under a service role; client code never receives admin credentials. Insurance declaration documents are served only via short-lived signed URLs (≤ 15 minutes).
5. Retention
Append-only compliance records are retained for at least seven years. Account and profile data may be deleted on written request, subject to legal-hold obligations.
6. Your choices
You can request access, correction, or deletion of your personal data. Attorneys can toggle intake acceptance off at any time without deleting their account.
7. Cookies & analytics
We use first-party cookies for authentication and minimal analytics necessary to operate the service. We do not use third-party advertising cookies.
8. Children
The service is not directed to children under 18 and we do not knowingly collect their personal information.
9. Contact
Email info@stx.ai for any privacy request. See also our Terms.