Privacy Policy

1LAW Privacy Policy

Effective date: September 3, 2026 Last updated: September 3, 2026

This Privacy Policy explains how 1LAW, Inc., a Delaware corporation, and its affiliates (collectively, “1LAW,” “we,” “us,” or “our”) collect, use, disclose, retain, and protect Personal Information when you visit 1LAW.com, use our applications, communicate with us, use our artificial-intelligence tools, request legal information or services, or ask to be connected with an attorney or other authorized legal-service provider (collectively, the “Services”).

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a person or household. It does not include information that is lawfully considered deidentified or aggregated under applicable law.

Important summary

• Some Services use automated systems and generative artificial intelligence.
• Your prompts, chat messages, documents, and other submissions may be processed to provide the Services.
• We may create deidentified or aggregated information and use it to train, test, evaluate, secure, and improve our AI and other systems as described in Section 4.
• If you request a connection with an independent attorney, law firm, or authorized legal-service provider, we may disclose your lead information to that provider and may receive compensation. Applicable law may treat that transfer as a “sale” of Personal Information.
• Using a public AI or intake tool does not by itself guarantee confidentiality or create an attorney-client relationship. Do not submit information you consider confidential until you have reviewed the applicable notice and, where relevant, a provider has agreed to represent you.
• You may have rights to access, correct, delete, obtain, or limit certain uses of your Personal Information and to opt out of its sale, sharing, targeted advertising, or certain profiling.

1. Scope and responsible entities

This Policy applies to the Services that link to it. It does not apply to an independent attorney, law firm, legal-service provider, advertiser, or other third party that operates under its own privacy notice, even if you reach that party through 1LAW.

The entity responsible for a particular processing activity depends on the Service:

• 1LAW-operated technology and marketplace: 1LAW, Inc., a Delaware corporation, 311 South State Street, Suite 450, Salt Lake City, Utah 84111 is the controller/business.
• Legal services: legal services are provided independently of 1LAW, Inc. by affiliated or referral attorneys, who are responsible for information processed in that legal-service relationship, subject to professional duties and the applicable engagement agreement.
• Independent provider: once information is transferred at your request to an independent provider, that provider may process it under its own privacy policy, professional duties, and engagement terms.

If these roles overlap, we will apply the protections required by law and any applicable professional obligation.

2. Personal Information we collect

Depending on how you use the Services, we may collect the following categories:

A. Information you provide

• Identity and contact information: name, email address, telephone number, mailing address, state, language preference, account name, and login credentials.
• Legal inquiry and intake information: practice area, description of a legal problem, incident information, jurisdiction, dates, opposing-party information, claim or case status, desired services, and provider preferences.
• Sensitive information you choose to provide: health or treatment information, disability information, financial information, immigration or citizenship information, allegations of criminal conduct, family information, sexual-orientation or relationship information, and other facts that may be sensitive under applicable law.
• Communications and content: prompts, questions, chat transcripts, feedback, survey responses, emails, call recordings where permitted, and files, images, forms, or documents you upload.
• Transaction information: purchases, subscription status, billing contact information, and limited payment transaction details. Payment-card data may be collected directly by our payment processor rather than stored by 1LAW.
• Professional and business information: employer, occupation, company, business needs, and information supplied by attorneys or other providers participating in the Services.

Please do not submit Social Security numbers, full financial-account numbers, account passwords, authentication codes, unredacted government identification, medical records, or other highly sensitive material unless the Service specifically requests it through an approved secure process.

B. Information collected automatically

• device type, browser, operating system, IP address, approximate location derived from IP address, cookie and similar identifiers;
• pages viewed, links selected, referring and exit pages, session dates and times, feature use, ad interactions, and diagnostic data; and
• security, fraud-prevention, and performance information.

C. Information from other sources

We may receive information from service providers, advertising and analytics partners, social networks, referral sources, independent legal-service providers, public sources, and other persons that direct us to contact you. We may combine this information with information collected through the Services.

D. Inferences

We may infer likely interests, service needs, jurisdiction, eligibility indicators, or preferences from other information. An inference is not a legal conclusion, eligibility determination, or guarantee of representation.

3. How we use Personal Information

We may use Personal Information to:

• provide, personalize, maintain, and improve the Services;
• process prompts and generate AI-assisted responses or documents;
• create and administer accounts and transactions;
• respond to inquiries and provide support;
• conduct conflicts, eligibility, jurisdiction, quality, and safety checks;
• match you with or transfer your request to an attorney, law firm, or other authorized legal-service provider when you ask us to do so;
• communicate about your request, account, transaction, or requested provider connection;
• send marketing communications where permitted and honor opt-outs;
• measure engagement, perform analytics, and improve advertising;
• detect, investigate, prevent, and respond to fraud, misuse, security incidents, illegal activity, and violations of our terms;
• comply with law, court orders, regulatory obligations, professional obligations, and recordkeeping requirements;
• establish, exercise, or defend legal claims; and
• create and use Deidentified Data as described below.

We will not use Personal Information for a materially different, unrelated purpose without providing any additional notice or consent required by law.

4. Artificial intelligence and deidentified data

A. AI processing

Some Services use machine learning, large language models, rules-based systems, or other automated technology. To operate these features, we and our contracted technology providers may process prompts, chat messages, uploaded content, generated responses, related usage data, and limited account or device information.

AI output may be reviewed by automated safety systems and, where appropriate, authorized personnel or professional reviewers for quality, security, abuse prevention, support, legal compliance, or service delivery.

B. Training and improvement using Deidentified Data

We may create information from Service interactions that cannot reasonably be used to infer information about, or otherwise be linked to, a particular person or household (“Deidentified Data”). We may use and retain Deidentified Data to develop, train, fine-tune, test, validate, evaluate, benchmark, monitor, secure, research, and improve our artificial-intelligence and machine-learning models, retrieval systems, document tools, safety systems, and other products and services. Deidentified Data may also be used to produce aggregated statistics and understand general legal-information needs.

We publicly commit to:

1. take reasonable technical and organizational measures designed to prevent Deidentified Data from being associated with a particular person or household;
2. maintain and use the information in deidentified form;
3. not attempt to reidentify the information, except for controlled testing designed to determine whether our deidentification process is effective and as otherwise expressly permitted by law; and
4. contractually require recipients of Deidentified Data to follow equivalent restrictions.

Deidentification may include removing or transforming direct and indirect identifiers, reducing detail, filtering unique narratives, separating account data, testing reidentification risk, restricting access, and applying contractual controls. Merely replacing a name with a code is not, by itself, the standard we use for Deidentified Data under this section.

We do not use identifiable legal-intake content to train a general-purpose model for unrelated uses unless we provide clear notice and obtain affirmative consent where required by law. Our service providers may process identifiable content only to provide contracted services to us and may not use it to train their own independent general-purpose models unless we separately disclose and lawfully authorize that practice.

Deidentified and aggregated information may be retained for as long as it remains deidentified and useful for a lawful purpose.

C. Changes to training practices

We will not rely solely on a retroactive policy change to use previously collected identifiable content for a materially expanded AI-training purpose. If additional notice or consent is required, we will provide it before beginning that use.

D. Published legal questions and answers

We publish a library of consumer legal questions and attorney-reviewed answers on our website as general legal information. These pages are public, are indexed by search engines, and may be copied, cached, or summarized by third parties outside our control.

Before a question is published we remove your name, contact details, address, and other direct identifiers, and we remove or generalize details that could identify you indirectly — among them exact dates, employers, schools, small localities, case and docket numbers, and account or financial numbers. We do not publish the contact information you provide, and we do not publish anything from a question we can tell was submitted by a person under 18.

We do not publish every question. We decline to publish, and we remove from the library, matters that remain identifiable on the combination of facts even after editing, and categories where publication could cause harm even to a person who cannot be identified — among them health and treatment facts, sexual offenses, matters involving children, and uncharged criminal conduct. We publish an edited version, not a verbatim transcript, and we may change or omit details for that reason.

If your question appears in the library and you want it taken down, email info@1law.com with enough detail for us to find the page. We will remove it. We will also, on request, tell you whether a page in the library came from your inquiry. Removal takes a page off our website; it cannot retrieve copies already held in search-engine caches or third-party archives.

5. How we disclose Personal Information

We may disclose Personal Information to the following categories of recipients:

A. Service providers and processors

We may disclose information to vendors that host data, process payments, provide communications, analytics, customer support, cybersecurity, identity verification, AI infrastructure, document processing, or other services for us. They may process the information only for contracted purposes and subject to applicable restrictions.

B. Attorneys, law firms, and other legal-service providers

If you ask to be connected with a provider, we may disclose some or all of your Lead Data—such as your name, contact details, location, requested practice area, a summary of your matter, timing, eligibility responses, and communication preferences—to one or more attorneys, law firms, or other authorized legal-service providers (“Professional Recipients”).

We may receive compensation in connection with a provider connection only if you engage that Professional Recipient. We do not charge a per-lead or per-transfer fee for sending your inquiry, and we are not paid merely because your information was disclosed. Applicable privacy law may nonetheless define this disclosure as a sale of Personal Information. We do not sell Personal Information for advertising or marketing purposes. We do not request medical records, health identifiers, or structured health data, and we do not transfer consumer health data through the ordinary provider-connection flow. You may choose to describe health or treatment facts when explaining your legal matter — for example in an injury, disability, or medical-malpractice inquiry — and where you do, we treat that content as sensitive information under this Policy.

We will provide a clear notice and obtain the user direction, consent, or authorization required by applicable law before transferring Lead Data. A Professional Recipient may be an independent business and may use the information to evaluate the inquiry, contact the user, conduct conflicts and eligibility checks, offer services, maintain records, and comply with law and professional duties. Its own privacy notice and engagement terms will apply.

Unless specifically disclosed before the user authorizes the transfer:

• we will not send Lead Data to unrelated providers outside the requested practice area;
• we will not disclose more Lead Data than reasonably necessary for the requested connection;
• we will not sell Social Security numbers, account passwords, financial credentials, authentication codes, or complete payment-card data; and
• we will not sell consumer health data where a separate signed authorization is required unless that authorization has been completed.

C. Advertising, analytics, and social-media partners

We may disclose device, cookie, usage, and advertising information to partners that measure campaigns, provide analytics, deliver advertising, or help us understand the Services. Depending on the technology and applicable law, these disclosures may constitute a “sale,” “sharing,” or targeted advertising even when no money changes hands. You can exercise applicable opt-out rights as described in Section 8.

We do not use sensitive legal-intake content for cross-context behavioral advertising.

D. Corporate transactions

We may disclose information in connection with an actual or proposed financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable confidentiality and legal requirements.

E. Legal, safety, and rights-protection purposes

We may disclose information where we reasonably believe disclosure is necessary to comply with law or valid legal process; respond to regulators; protect a person’s safety; investigate fraud or misuse; enforce agreements; or establish, exercise, or defend legal claims. Where legal professional duties apply, those duties may further restrict disclosure.

F. With your direction or consent

We may disclose information to another recipient when you direct us or provide valid consent.

G. Deidentified or aggregated information

We may disclose Deidentified Data or aggregated information for lawful analytics, research, training, safety, business, or product-improvement purposes, subject to the commitments in Section 4.

6. Lead transfers and independent providers

Requesting a match does not require you to hire any Professional Recipient. 1LAW does not guarantee that a provider will respond, accept the matter, be qualified for a particular issue, or achieve any result. Unless expressly stated in a written engagement agreement, a provider is not 1LAW’s employee or agent, and 1LAW is not a party to the attorney-client or service relationship between you and that provider.

Before authorizing a lead transfer, you should be shown:

• the categories of information to be transferred;
• the identity of the recipient or a sufficiently specific recipient category, as required;
• whether one or multiple providers will receive it;
• the transfer purpose;
• that 1LAW may receive compensation; and
• how the recipient may contact you.

7. Cookies, analytics, and advertising choices

We and our partners may use cookies, pixels, software development kits, local storage, and similar technologies for essential functionality, preferences, analytics, security, and advertising. Where a consent choice is legally required for a nonessential technology, we will obtain it before that technology is used.

You can manage cookies through your browser settings, and you may opt out of provider connections and marketing contact directly in the chat, which is where we collect the information described in this Policy. Browser settings may also block or delete cookies, although parts of the Services may not function correctly. We respond to qualifying opt-out preference signals as explained below. A browser’s legacy “Do Not Track” signal is not necessarily the same as a legally recognized opt-out preference signal.

8. Your privacy rights and choices

Depending on your residence and subject to legal exceptions, you may have the right to:

• confirm whether we process your Personal Information;
• access or obtain a portable copy of certain information;
• correct inaccuracies;
• delete certain information;
• opt out of the sale of Personal Information;
• opt out of sharing for cross-context behavioral advertising or targeted advertising;
• opt out of certain profiling with legal or similarly significant effects;
• limit certain uses or disclosures of sensitive Personal Information;
• withdraw consent where processing is based on consent; and
• appeal our refusal of a request.

Submit a request by emailing info@1law.com with the subject “Privacy Request,” or by calling 888-634-1529. Privacy choices are presented to you in the chat at the point where information is collected, which is where you can decline a provider connection and decline marketing contact. We connect you with a provider only if you consent there. You may also exercise these choices at any time using the contact methods above.

We may need to verify your request using information reasonably related to the request. An authorized agent may submit a request where permitted; we may verify the agent’s authority and, when allowed, confirm the request directly with you. We will respond within the period required by applicable law and explain any right to appeal. We will not unlawfully discriminate against you for exercising a privacy right.

Opt-out preference signals

Where required, we treat a qualifying browser-based universal opt-out signal, including Global Privacy Control, as a request to opt out of sale, sharing, and targeted advertising for the browser or device sending the signal. If you are logged in and applicable law requires it, we will make reasonable efforts to associate the signal with your account. Signals do not necessarily apply across devices or browsers.

Marketing communications

You may unsubscribe from marketing email using the link in the message. You may opt out of marketing texts by replying STOP. We may continue to send nonmarketing service messages where permitted.

Lead-transfer withdrawal

You may withdraw future permission by using the opt-out control in the chat, or by emailing info@1law.com. Withdrawal does not undo a transfer already completed. After a transfer, contact the Professional Recipient directly to exercise rights concerning its copy, unless applicable law requires us to relay the request.

9. State-specific disclosures

A. California

California residents may have the rights described in Section 8. During the preceding 12 months, depending on the Services used, we may have collected the categories listed below. The table must be conformed to actual data-mapping records before publication.

We do not knowingly sell or share the Personal Information of consumers under 16. We do not use or disclose Sensitive Personal Information for purposes that require a right to limit unless the relevant notice and mechanism are provided. The opt-out controls presented in the chat at the point of collection, and the contact methods above, are the methods available.

B. Other U.S. states

Residents of other states with applicable comprehensive privacy laws may exercise the rights available in their state using the methods in Section 8. We will recognize qualifying universal opt-out mechanisms where required.

C. Consumer health data

If we collect consumer health data subject to a state consumer-health privacy law, the applicable Consumer Health Data Privacy Policy and consent will control in the event of a conflict. We will not sell consumer health data where a separate signed authorization is required unless the authorization identifies the data, seller, purchaser, purpose, expiration, revocation method, and other legally required terms.

10. Confidentiality and legal professional obligations

Privacy and attorney-client privilege are different concepts. Public website use, automated chat, or an initial request does not automatically create an attorney-client relationship or guarantee privilege. A relationship exists only as provided in an applicable engagement agreement or express service-specific notice.

However, information may be subject to duties owed to prospective or current clients under professional rules or other law. Where such a duty applies, we will handle the information in accordance with that duty, even if this Policy otherwise permits broader processing. Nothing in this Policy is intended to authorize disclosure prohibited by a binding professional duty.

Until a lawyer or authorized provider confirms the scope of confidentiality and representation, do not provide more information than reasonably necessary to identify the general type of matter, jurisdiction, and desired service. Do not identify an opposing party or upload sensitive documents unless requested through an appropriate process.

11. Data retention

We retain each category of Personal Information only for as long as reasonably necessary for the disclosed purpose, including to provide the Services, complete a requested provider connection, maintain security, meet contractual and professional obligations, resolve disputes, enforce agreements, and comply with law. Retention is determined using the nature and sensitivity of the information, the Service involved, risk of harm, account status, applicable limitation periods, legal holds, professional rules, and regulatory requirements.

• Account and transaction records are generally retained for the account or transaction lifecycle and a reasonable legal and audit period afterward.
• Legal inquiries and chat records are retained according to the applicable service, conflicts, support, safety, and professional-retention requirements.
• Lead-transfer and consent records are retained long enough to document the transfer and authorization and for any period required by telemarketing, health-data, privacy, or professional rules.
• Cookie and analytics data are retained for the duration set by each cookie, which you can inspect and clear through your browser settings.
• Deidentified Data may be retained as described in Section 4.
• Backup copies may remain for a limited period after deletion until overwritten or isolated, unless law requires longer retention.

We will not retain Personal Information for a longer period merely because storage is inexpensive.

12. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information, taking account of its nature and sensitivity. Measures may include access controls, encryption in transit and where appropriate at rest, logging, vendor review, incident response, employee training, and data minimization. No transmission or storage system is completely secure, and we cannot guarantee absolute security.

If a breach occurs, we will investigate and provide legally required notifications within the time and in the manner required by applicable law.

13. Children

The Services are intended for persons age 18 or older. We do not knowingly collect Personal Information from a child under 13 through the Services or knowingly sell or share Personal Information of a person under 16. If you believe a child submitted information, contact us so we can evaluate and take appropriate action.

The chat does not verify age, so a minor can reach it. When we identify an inquiry as coming from someone under 18 — whether at intake or later — we do not publish it in our legal-answers library, and we remove it if it was already published. A parent or guardian may contact info@1law.com to ask what we hold about their child, to have it deleted, or to have a published page removed.

14. International users

The Services are controlled from the United States and are primarily directed to users in the United States. Information may be processed in the United States or other countries where our providers operate. Do not use the Services from another country unless the Services expressly state that they are available there and the required notices and transfer safeguards have been implemented.

15. Changes to this Policy

We may update this Policy. We will post the new version and update the effective date. If a change materially expands how we use or disclose previously collected Personal Information, we will provide additional notice and obtain consent where required rather than relying solely on continued use of the Services.

16. Contact us

Questions and privacy requests may be directed to:

1LAW, Inc. 311 South State Street, Suite 450 Salt Lake City, Utah 84111, United States info@1law.com 888-634-1529 To appeal a denied request, email info@1law.com with the subject "Privacy Appeal"