Privacy Policy

Scope

This Privacy Policy explains how FirmsVault handles personal information when people visit our public website, request a demonstration, interact with the FirmsVault legal directory, submit a profile claim, or otherwise contact us. It also explains, at a high level, how information may be handled when FirmsVault provides software services to law-firm customers.

When a law firm or other customer uses FirmsVault to manage client, matter, document, billing, payment, trust-accounting, or similar information, the customer generally determines why that information is processed. Processing of customer-controlled data is also governed by the applicable customer agreement and data-processing terms.

Information we may collect

We collect information that you choose to provide and limited technical information generated when you use our services.

• Contact and business information, such as your name, work email address, law firm, role, and firm size when you request a demonstration or contact us.
• Directory information, including firm details, profile-claim information, and information used to evaluate whether a person is authorized to manage a listing.
• Account and authentication information for users who access authenticated FirmsVault services.
• Usage, device, browser, network, security, and diagnostic information reasonably needed to operate, protect, and improve the service.
• Customer-controlled content submitted through the FirmsVault platform, subject to the customer agreement and the customer's instructions.

How we use information

We use personal information for legitimate business and service purposes, including to provide and secure FirmsVault, respond to requests, operate directory and profile-claim workflows, administer accounts, support customers, prevent abuse, maintain audit and security records, improve reliability and usability, and meet legal obligations.

• We should not collect sensitive information merely because it might be useful later. Production systems should limit collection and retention to information that has a defined operational, security, contractual, or legal purpose.
• Demo-request information is intended for responding to the request and related business communications; it should not be placed into public profiles.

Service providers and disclosures

FirmsVault may use service providers that support hosting, security, communications, analytics, payments, identity, customer support, or other platform operations. Providers should receive only the information reasonably necessary for their assigned function and should be governed by appropriate contractual and security controls.

We may also disclose information when required by law, to protect rights or security, in connection with a corporate transaction, or with the direction or consent of the person or customer that controls the information.

Directory data

Public directory listings may include information obtained from public or third-party business sources, information supplied by a law firm, and status information generated by FirmsVault. The Directory Standards page explains the meaning of listing states and how firms can request corrections or claim eligible profiles.

FirmsVault should distinguish source-derived information from information supplied or controlled by a firm and should maintain internal provenance where practical.

Cookies and similar technologies

FirmsVault may use cookies, local storage, and similar technologies that are necessary for authentication, security, preferences, reliability, and product operation. If optional analytics or advertising technologies are introduced, the production implementation and this policy should be updated to describe them and provide any choices required by applicable law.

Retention and security

We retain information for as long as reasonably necessary for the purposes described in this policy, including contractual, security, backup, dispute-resolution, and legal requirements. Retention periods may differ by data type and customer configuration.

FirmsVault uses administrative, technical, and organizational safeguards designed to protect information. No security program can guarantee that every incident will be prevented, so security statements should describe actual controls rather than promise absolute security.

Your choices and privacy requests

Depending on where you live and the context in which information is processed, applicable law may provide rights to request access, correction, deletion, portability, restriction, or other treatment of personal information. Requests concerning customer-controlled legal matter data may need to be directed to the law firm or organization that controls that data.

To make a privacy request or ask a question, contact hello@firmsvault.com. FirmsVault may need to verify a request before acting on it.

Children

The public FirmsVault website and business account-registration experience are not designed for children to create business accounts on their own. Law-firm customers may lawfully maintain information about minors within legal matters; that customer-controlled information is handled according to the customer agreement, the firm's instructions, and applicable law.

Changes to this policy

We may update this Privacy Policy as FirmsVault, our data practices, or applicable requirements change. The effective date should be updated when material revisions are published. Material product changes that affect privacy should be reviewed against this policy before release.

Contact

Questions or privacy requests may be sent to hello@firmsvault.com. Before public launch, FirmsVault should also publish the correct legal entity name and business mailing address here after counsel confirms them.