Scope of this notice
This notice explains how RecourseLink handles information for public browsing, accounts, situation checks, saved history, private readiness, contact intake, purchase history, privacy requests, evidence workflows, AI-assisted features, and attorney-sharing workflows.
RecourseLink separates public source-backed information from private user records. Private facts, contact details, evidence files, and attorney disclosures are handled only through the account workflow and consent scope selected by the user.
Information categories
- Public browsing data needed for security, diagnostics, abuse prevention, and basic analytics.
- Account data such as email, phone, authentication status, agreement versions, and communication preferences.
- Legal Passport matching facts, limited to minimum-necessary structured fields selected by the user.
- Consent receipts with text version, scope, timestamp, source URL, brand identity, opt-in method, and revocation records.
- Evidence metadata and files only after explicit consent and the related evidence workflow is used.
- Attorney and firm application records, practice interests, identity and license references, official-source verification results, public-discipline review evidence, firm-affiliation and signer-authority evidence, reviewer notes, verification-cycle receipts, recheck dates, and operational alerts.
- Attorney conflict-safety records, including versioned agreement acceptance, the displayed organization shell, firm-boundary and authorized-conflict-officer versions, a firm-controlled search fingerprint, a bounded outcome, revocation history, and access-control evidence. Attorneys are instructed not to give RecourseLink client lists, internal match identities, waivers, or confidential conflict-system records.
- Payment metadata from Stripe or equivalent processor, but not raw card numbers stored by RecourseLink.
- For a purchased Claim Clarity Report only after separate authorization: the confirmed business or entity name, the authorized non-sensitive fields from the exact confirmed intake, relevant public federal court-record information and source details, and the AI-assisted comparison result.
- If a person chooses the optional Claim Clarity voice note and gives separate microphone authorization: one private recording staged before payment, sent to OpenAI only after successful payment to create a draft transcript; a bounded transcription receipt; and the transcript the owner reviews and confirms. A report can be purchased without a recording. Staged audio is deleted after successful transcription or staging expiration, is not a voiceprint, and is not treated as evidence.
- Support records, privacy request records, security logs, fraud-prevention records, and consent/audit records.
Cookies and analytics
RecourseLink uses essential first-party cookies for sign-in, account security, and protected sessions. These cookies are necessary for the service and are not used for advertising.
Public pages use Vercel Web Analytics in its current cookieless, privacy-focused configuration to understand basic site use. RecourseLink does not use advertising cookies, cross-site behavioral tracking, or marketing pixels. Because there are no optional marketing cookies to accept, the site does not show a misleading “Accept cookies” banner.
If RecourseLink later adds optional cookies, they will remain off until a visitor makes a clear choice, with equally accessible accept and reject controls.
Use limits
Use of personal information is limited to claim discovery, source-backed matching, account security, consent/audit records, user-controlled attorney sharing, billing, support, legal compliance, fraud prevention, and product reliability.
RecourseLink does not sell claimant PII, publish private issue reports, publish Evidence Vault materials, train public AI models on private user facts, or share attorney-facing lead details without user consent and required access controls.
Public source-backed claim pages do not include private user reports, private evidence, account records, or membership lists.
Do Not Sell or Share My Personal Information
RecourseLink does not sell your personal information and does not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA and comparable state laws. We also do not sell or share claimant facts, evidence files, or attorney-sharing records. We do not receive any referral fee or share of a legal fee.
Because we do not sell or share personal information, there is no sale or share for you to opt out of. You can still exercise your related privacy rights — including the rights to know/access, delete, correct, and limit the use of sensitive personal information — from your account privacy page, or by contacting support. We will not discriminate against you for exercising any privacy right.
We recognize the Global Privacy Control (GPC) browser opt-out signal. Because we do not sell or share your personal information for cross-context behavioral advertising, no additional opt-out action is required to honor it.
Privacy choices and requests
Users may request access, deletion, correction, export, opt-out of sale/share where applicable, limitation of sensitive-data use where applicable, consent revocation, and communication opt-out. RecourseLink handles privacy requests through the protected account privacy page and support review.
Some requests may require identity verification, account security review, legal retention review, fraud-prevention review, or manual processing. RecourseLink may retain security, billing, consent, legal, audit, and dispute records where allowed or required.
Retention and deletion
The default posture is minimum necessary retention, user export/delete where legally required, and limited retention of security, consent, billing, legal hold, and audit records.
Attorney credential, firm-authority, agreement, conflict, access, and reviewer records may be retained when needed to document verification decisions, scheduled rechecks, revocations, professional-safety controls, security investigations, disputes, legal obligations, or the integrity of prior access decisions. A privacy request does not silently erase an access or consent audit trail when retention is permitted or required; RecourseLink reviews those records under the applicable request, role, and legal-hold rules.
Service providers and payment processing
RecourseLink may use service providers for hosting, authentication, payment processing, security, analytics, support, communications, and authorized AI processing that are necessary for the product. Payment card details are processed by Stripe or another payment processor; RecourseLink should not receive or store raw card numbers.
For the current Claim Clarity Report, RecourseLink uses the confirmed business or entity name and other authorized non-sensitive intake fields to research relevant public federal court records. Public court-record information and source details may be retained, refreshed independently of a purchase, and reused for research; the consent record remains private. OpenAI processes only the authorized non-sensitive intake fields and relevant public-record information and does not receive database access. Provider storage is disabled for the request, which excludes uploaded documents, contact or payment data, medical details, privileged communications, account or claim numbers, and full court filings. Third-party public court-record sources are not official court systems and may be incomplete.
A voice note is optional. If the account owner chooses one, the owner records alone before checkout. RecourseLink stages that audio privately for no more than 24 hours and does not ask OpenAI to transcribe it unless payment succeeds. The owner must review and correct the machine draft before report research begins. The staged audio is deleted after successful transcription or when the staging period expires; RecourseLink does not create a voiceprint, treat the transcript as evidence, or share it with an attorney. Calls, meetings, and recordings of other people are not accepted.
Service-provider use does not authorize selling private user facts, evidence, or attorney-sharing records.
Review basis
This notice is aligned to RecourseLink product controls, FTC privacy and data security guidance, state privacy-rights concepts including CCPA/CPRA rights to know, delete, correct, opt out, limit sensitive personal information, and avoid discrimination for exercising privacy rights, plus the platform's sensitive-data, SMS, attorney-sharing, and evidence-access limits.