PRIVACY POLICY

1. INFORMATION WE COLLECT

When you use LAW, we may collect the following information:

• Account information: Name and email address provided during registration or checkout.
• Payment information: Payment details are tokenized via Authorize.net Accept.js. Card numbers are tokenized client-side and never transmitted to or stored on our servers. We retain only the transaction ID, last four digits, and billing address for record-keeping.
• Search queries: Queries submitted to the LAW search engine are logged and anonymized for service improvement.
• Standard web logs: IP addresses, browser type, operating system, and access timestamps collected through standard server logs.

2. HOW WE USE INFORMATION

We use collected information exclusively for the following purposes:

• To provide and deliver the services you request, including research memos, document audits, filing packages, and intelligence reports.
• To process payments and maintain transaction records.
• To improve search quality, relevance, and the accuracy of our primary source database.
• To communicate with you about your orders, account status, and service updates.

3. WHAT WE DO NOT DO

Gage Green Group commits to the following:

• We do not sell, rent, or trade your personal data to any third party.
• We do not share your search queries with third parties.
• We do not track you across other websites or applications.
• We do not use your data for advertising, ad targeting, or behavioral profiling.
• We do not use third-party analytics or tracking services.

4. PAYMENT SECURITY

All payments are processed through Authorize.net using Accept.js technology. This means:

• Your credit or debit card data is tokenized directly in your browser before any data is transmitted. Your full card number never touches our servers.
• Authorize.net is PCI-DSS Level 1 compliant, the highest level of payment security certification.
• We store only the payment token, transaction ID, last four digits of the card, and billing address required for record-keeping and dispute resolution.

5. DATA RETENTION

• Account data is retained for as long as your account remains active. You may request deletion at any time.
• Search queries are anonymized after 90 days. Anonymized data cannot be linked back to your account.
• Payment records are retained for 7 years in compliance with IRS record-keeping requirements and applicable tax law.
• Server logs are retained for 30 days and then permanently deleted.

6. YOUR RIGHTS

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you.
• Deletion: Request permanent deletion of your account and associated personal data.
• Correction: Request correction of any inaccurate personal data.
• Opt-out: Opt out of non-essential communications at any time.
• Portability: Request your data in a machine-readable format.

To exercise any of these rights, contact us at law@gagegreengroup.com. We will respond within 30 days.

7. COOKIES

LAW uses essential cookies only. These are strictly necessary for the operation of the platform, including session management and authentication.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We do not use Google Analytics, Facebook Pixel, or any similar tracking technology.

8. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
• Right to Opt-Out: We do not sell personal information. There is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, contact law@gagegreengroup.com. We will verify your identity and respond within 45 days.

9. INTERNATIONAL USERS (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on (a) your consent, (b) performance of a contract (providing services you requested), and (c) our legitimate interest in improving the platform.
• Right to Restrict Processing: You may request that we limit how we use your data.
• Right to Object: You may object to processing based on legitimate interest.
• Right to Lodge a Complaint: You have the right to file a complaint with your local data protection authority.
• Data Transfers: Your data is stored on servers in the United States. By using LAW, you consent to the transfer of data to the United States.

Data Protection Contact: law@gagegreengroup.com

10. ATTORNEY-CLIENT PRIVILEGE AND CONFIDENTIALITY

LAW is a legal intelligence platform, not a law firm. However, we recognize that users may submit sensitive legal information through intake forms, case management tools, and document generation features.

• All case data, intake submissions, and generated documents are encrypted in transit (TLS 1.3) and at rest.
• Case data is accessible only to the authenticated account holder and authorized platform administrators.
• We will not disclose user case data to any third party except as required by law or court order.
• Upon account deletion, all associated case data, documents, and intake submissions are permanently removed within 30 days.

11. CHILDREN

LAW is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a user under 18, we will promptly delete that information.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users via email. The updated policy will be posted on this page with a revised effective date. Your continued use of LAW after any changes constitutes your acceptance of the updated policy.