Privacy Policy

1. Scope of This Policy

This Policy applies to information collected through the TortLogix website (tortlogix.com), our consumer-facing educational and intake portals, our conversational AI medical triage tools, our e-signature and retainer-routing workflows, and any related services (collectively, the "Services"). It applies to two categories of people: (a) prospective claimants who interact with our consumer-facing intake flows, and (b) representatives of law firms who use our Services to source, verify, and receive case referrals.

2. Information We Collect

Depending on how you interact with us, we may collect:

• Identity & contact information: full name, mailing address, email address, phone number, date of birth.
• Case-specific and medical intake information: self-reported diagnosis or condition, prescription and treatment history, dates of exposure or medical intervention, hospitalization records referenced during intake, and related injury details relevant to a specific litigation docket.
• Consent and verification records: TCPA express-consent timestamps, IP address, device and browser metadata, TrustedForm™ certificate data, Jornaya lead ID lineage, and video/session replay of the consent interaction.
• Retainer and signature data: e-signature records, executed retainer agreements, and associated audit trails.
• Law firm client information: firm name, work email, direct phone number, desired docket criteria, monthly volume targets, and CRM/practice-management platform details.
• Technical data: cookies, log files, referring URLs, and analytics identifiers collected through our website.

3. Sources of Information

We collect information directly from you when you submit an intake form, complete our conversational AI triage flow, execute an e-signature, or fill out our firm inquiry form. We also receive information from marketing and advertising partners who refer traffic to our educational consumer portals, from consent-verification vendors (such as TrustedForm and Jornaya), and, where applicable, from publicly available records used to validate case eligibility.

4. How We Use Information

We use the information we collect to:

• Qualify prospective claimants against a specific law firm's case-acceptance criteria;
• Generate, document, and preserve TCPA-compliant consent records;
• Facilitate e-signature execution of retainer agreements between claimants and independent licensed counsel;
• Transmit signed retainers, intake questionnaire responses, and compliance certificates to the applicable law firm's CRM or practice-management system;
• Operate, maintain, and improve our intake infrastructure and AI triage tools;
• Communicate with law firm clients regarding docket capacity, billing, and account administration;
• Detect fraud, duplicate submissions, and non-qualifying leads; and
• Comply with applicable law, regulatory requests, and legal process.

5. TCPA Consent, Call/SMS Recording & Verification Data

Where you submit contact information through our intake flows, we generate an independent, cryptographically verifiable consent record for each individual submission on a strict one-to-one basis. This record may include a timestamped IP address, a rendered snapshot or video replay of the consent screen you viewed, the specific disclosure language you agreed to, and a unique lead identifier. These records are created and retained specifically to document express written consent under the Telephone Consumer Protection Act (TCPA) and are made available to the receiving law firm to support their own compliance obligations.

6. Health & Medical Information

Because our Services support mass tort intake, we may collect self-reported health information, such as a diagnosis, prescription history, or treatment dates, that is necessary to determine whether you meet a litigation docket's qualifying criteria. TortLogix is not a covered entity or business associate under HIPAA, and information you provide through our intake flows is not protected by HIPAA's Privacy Rule. We nonetheless treat this information as sensitive: we limit access on a need-to-know basis, use it solely to evaluate case eligibility and route qualifying retainers, and disclose it only as described in this Policy. By submitting medical or health-related information through our Services, you consent to its collection, use, and disclosure as described here.

7. How We Share Information

We do not sell prospective claimants' personal information to unrelated third parties for their own independent marketing purposes. We do share information in the following circumstances:

• With the receiving law firm: once a retainer is executed, we transmit the signed agreement, intake responses, and consent/compliance certificates directly to the applicable firm's CRM (e.g., Filevine, Litify, SmartAdvocate, Clio, Salesforce) or via secure webhook/API.
• With service providers: vendors that support e-signature, hosting, consent verification (TrustedForm, Jornaya), SMS/email delivery, and workflow automation (e.g., Zapier/Make), who are contractually restricted to using the data solely to provide services to us.
• For legal and safety reasons: where required to comply with a subpoena, court order, or other legal process, or to protect the rights, property, or safety of TortLogix, our clients, or others.
• In connection with a business transaction: if TortLogix is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

8. Disclosures to Law Firm Clients

Law firms that receive a signed retainer and associated intake data through our Services become independent controllers of that information for their own case-handling purposes. Their subsequent use, retention, and disclosure of your information is governed by their own privacy practices and their professional obligations as licensed counsel, not by this Policy. We encourage you to direct any questions about how a specific firm uses your information to that firm directly.

9. Cookies & Tracking Technologies

Our website uses cookies, pixels, and similar technologies to operate core functionality, remember preferences, measure site performance, and support attribution for marketing partners who refer traffic to our consumer portals. You can control cookies through your browser settings; disabling certain cookies may limit functionality of the intake forms or e-signature flow.

10. Data Retention

We retain consent and verification records (including TrustedForm/Jornaya certificates and e-signature audit trails) for as long as reasonably necessary to support the compliance obligations of the receiving law firm and to defend against potential TCPA or consumer-protection claims, which may extend beyond the applicable statute of limitations. We retain other intake and case-qualification data only as long as necessary to fulfill the purposes described in this Policy, after which it is securely deleted or de-identified, unless a longer retention period is required by law.

11. Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit, access controls limiting internal data access on a need-to-know basis, and secure webhook/API delivery to law firm CRMs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your Privacy Rights

Depending on your state of residence, you may have the right to request access to, correction of, or deletion of your personal information; to opt out of certain disclosures; and to receive a copy of the information we hold about you in a portable format. To submit a request, contact us using the information in Section 17. We will verify your identity before fulfilling a request and will respond within the timeframe required by applicable law. If you submitted information as part of a signed retainer, some requests may need to be directed to the receiving law firm once your information has been transferred to them.

13. State-Specific Disclosures

California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to know what personal information we collect, to request deletion or correction of that information, to opt out of the "sale" or "sharing" of personal information (as those terms are defined under California law), and to limit the use of sensitive personal information. We do not sell personal information for money. To the extent our advertising and referral arrangements constitute a "sale" or "sharing" under CPRA, you may opt out by contacting us at the address in Section 17.

Other States

Residents of other states with comprehensive privacy laws (including but not limited to Virginia, Colorado, Connecticut, Utah, and Texas) may have similar rights to access, correct, delete, and port their personal information, and to opt out of targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects. We honor applicable requests consistent with the law of your state of residence.

14. Children's Privacy

Our Services are intended for individuals who are at least 18 years old. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18 without appropriate consent, we will delete that information promptly.

15. International Users & Data Transfers

Our Services are directed to individuals and law firms located in the United States and are hosted and processed in the United States. If you access our Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those of your jurisdiction.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the revised policy on this page and update the "Last updated" date above. Material changes will be communicated through reasonable means, such as a notice on our website.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

TortLogix Operations LLC
Attn: Privacy Officer
Email: privacy@tortlogix.com
Website: tortlogix.com