Privacy Policy

VERDICT.COM (“VERDICT,” “we,” “us,” or “our”), a Delaware corporation, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered legal research platform at verdict.com and associated services (the “Service”).

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not access or use the Service.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide, including:

• Account Information: Name, email address, and password when you create an account
• Profile Information: Optional information you add to your profile
• Research Queries: Legal questions, search terms, and descriptions of legal issues you submit
• Communications: Messages you send us, feedback, and support requests
• Payment Information: If applicable, billing address and payment method details (processed by third-party payment processors)

1.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Device Information: Browser type, operating system, device type, and unique device identifiers
• Usage Data: Pages viewed, features used, search queries, time spent on pages, and interaction patterns
• Log Data: IP address, access times, referring URLs, and error logs
• Location Data: Country, region, and city based on IP address (used for geographic restrictions and service customization)

1.3 Information from Third-Party Services

We receive information from third-party services we integrate with:

• Authentication Providers: If you sign in via social login (Google, etc.), we receive basic profile information
• Analytics Services: Aggregated usage statistics and performance metrics

1.4 AI Interaction Data

When you interact with our AI-powered features, we collect and process:

• Your queries and prompts submitted to the AI system
• AI-generated responses and outputs
• Conversation history within sessions
• Feedback you provide on AI responses

2. How We Use Your Information

We use collected information for the following purposes:

2.1 Service Provision

• Provide, operate, and maintain the Service
• Process your legal research queries
• Generate AI-powered responses and analysis
• Authenticate your identity and manage your account
• Process transactions and send related information

2.2 Service Improvement

• Analyze usage patterns to improve features and user experience
• Train and improve our AI models and algorithms
• Develop new products, services, and features
• Conduct research and analytics

2.3 Communication

• Send service-related notices and updates
• Respond to your inquiries and support requests
• Send promotional communications (with your consent)

2.4 Safety and Compliance

• Detect, prevent, and address fraud and abuse
• Enforce our Terms of Service and policies
• Comply with legal obligations
• Protect our rights, privacy, safety, or property
• Enforce geographic access restrictions

2.5 Legal Basis for Processing

We process your information based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security, where these interests are not overridden by your rights
• Consent: Processing based on your explicit consent, which you may withdraw at any time
• Legal Obligation: Processing necessary to comply with applicable laws and regulations

3. AI Model Training and Data Use

3.1 How AI Uses Your Data

Our Service uses artificial intelligence, including large language models provided by third parties (such as OpenAI), to process your queries and generate responses. When you submit a query:

• Your query is processed by our systems and may be sent to AI model providers
• AI providers may process this data according to their own privacy policies
• We implement data minimization practices where possible

3.2 Aggregated and De-identified Data

We may use aggregated and de-identified data derived from your use of the Service to improve our AI systems and develop new features. This data cannot reasonably be used to identify you.

3.3 Opt-Out Options

You may request that your data not be used for AI model improvement by contacting us at legal@verdict.com. Note that this may limit certain Service features.

3.4 Automated Decision-Making

While our Service uses AI to process queries and generate responses, we do not engage in fully automated decision-making that produces legal effects or similarly significant effects concerning you. The AI provides informational research results only; it does not:

• Make decisions about your access to the Service based on profiling
• Determine pricing or service levels based on automated analysis
• Take any automated action that has legal consequences for you

All legal decisions should be made by you in consultation with qualified legal counsel, not based solely on AI-generated information.

4. Cookies and Tracking Technologies

4.1 Types of Cookies We Use

4.2 Cookie Consent

When you first visit the Service, you will be presented with a cookie consent banner. You may choose to accept or decline non-essential cookies. Essential cookies cannot be disabled as they are necessary for the Service to function.

4.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block all cookies
• Clear all cookies when you close your browser

Note that blocking cookies may impair Service functionality and your user experience.

4.4 Other Tracking Technologies

We may use web beacons, pixel tags, and similar technologies to track usage and improve Service performance. We also use Vercel Analytics and Speed Insights for performance monitoring.

5. Geolocation Data

5.1 How We Use Location Data

We collect location data (derived from your IP address) to:

• Geographic Restrictions: The Service is available only in the United States. We use location data to enforce this restriction.
• Attorney Matching: With your consent, we use your location to help connect you with attorneys in your area.
• Service Customization: Display relevant jurisdictional information based on your location.

5.2 Location Data Consent

For attorney matching and personalization features, we request your explicit consent before using precise location data. You can withdraw consent at any time through your account settings or by contacting us.

6. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

6.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

6.2 Legal Requirements

We may disclose your information if required by law or if we believe disclosure is necessary to:

• Comply with legal process, court order, or government request
• Enforce our Terms of Service and other agreements
• Protect our rights, property, or safety, or that of our users or others
• Detect, prevent, or address fraud, security, or technical issues

6.3 Business Transfers

If VERDICT.COM is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

6.4 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

7. Data Retention

7.1 Retention Periods

7.2 Deletion

When you request account deletion, we will delete or anonymize your personal information within 30 days, except for information we are required to retain for legal, security, or fraud prevention purposes.

8. Data Security

8.1 Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Access controls and authentication for our systems
• Regular security assessments and monitoring
• Employee training on data protection

8.2 No Guarantee

While we implement reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

8.3 Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users without undue delay, and where feasible, within 72 hours of becoming aware of the breach
• Provide information about the nature of the breach and categories of data affected
• Describe the measures taken or proposed to address the breach
• Provide recommendations for steps you can take to protect yourself
• Notify relevant supervisory authorities as required by applicable law

9. Your Privacy Rights

9.1 General Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent where processing is based on consent

9.2 How to Exercise Rights

To exercise any of these rights, please contact us at legal@verdict.com. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

9.3 Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

10.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for collection, and the categories of third parties with whom we share your information.

10.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

10.3 Right to Correct

You have the right to request correction of inaccurate personal information.

10.4 Right to Opt-Out of Sale/Sharing

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.

10.5 Right to Limit Sensitive Information Use

You have the right to limit the use and disclosure of sensitive personal information.

10.6 Authorized Agents

You may designate an authorized agent to make requests on your behalf. We may require verification of authorization.

10.7 Categories of Information

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, IP address)
• Internet or network activity (usage data, search history)
• Geolocation data (approximate location from IP)
• Professional information (if provided)
• Inferences drawn from the above

11. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

By using the Service, you consent to the transfer of your information to the United States and other jurisdictions. We take steps to ensure appropriate safeguards are in place for international transfers.

12. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected personal information from a child under 18, we will delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@verdict.com.

13. Do Not Track and Global Privacy Control

Some browsers include a “Do Not Track” (DNT) feature that signals to websites that you do not want your online activity tracked. We currently do not respond to DNT signals because there is no industry-standard interpretation.

We do honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat this as a valid opt-out request for the sale or sharing of your personal information under applicable state privacy laws, including the CCPA/CPRA.

14. Third-Party Links and Services

The Service may contain links to third-party websites or services that are not owned or controlled by VERDICT. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective upon posting to the Service with an updated “Last Updated” date. For material changes, we will provide notice via email or prominent notice on the Service.

Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

16. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

17. Jurisdiction-Specific Provisions

17.1 European Economic Area (EEA) Residents

Note: The Service is currently available only in the United States. If we expand to the EEA, additional GDPR-specific provisions will apply, and this section will be updated.

17.2 Nevada Residents

Nevada residents may submit a request to opt out of the sale of covered information (as defined under Nevada law) by emailing legal@verdict.com. Note: We do not currently sell covered information as defined under Nevada law.

17.3 Virginia, Colorado, Connecticut, and Utah Residents

Residents of these states have privacy rights similar to California residents under their respective state privacy laws. Contact us at legal@verdict.com to exercise your rights.

18. Email Communications

We comply with the CAN-SPAM Act and similar email regulations. When we send you emails:

• We use accurate header information and subject lines that reflect the content
• We clearly identify promotional messages as advertisements when applicable
• We include our physical mailing address in commercial emails
• We honor unsubscribe requests within 10 business days
• We do not use deceptive subject lines or misleading “From” names

You may opt out of promotional emails at any time by clicking the “unsubscribe” link in any email or by contacting us. Note that you cannot opt out of transactional emails related to your account or Service usage.

19. Accessibility

VERDICT.COM is committed to ensuring that our privacy practices are accessible to all users, including those with disabilities. We strive to conform to Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards for this Privacy Policy and our Service.

If you need this Privacy Policy in an alternative format (such as large print, audio, or braille), or if you experience any accessibility barriers when trying to exercise your privacy rights, please contact us at legal@verdict.com and we will make reasonable efforts to accommodate your needs.

By using VERDICT, you acknowledge that you have read and understood this Privacy Policy.