Scope of this notice

This notice explains how RecourseLink handles information for public browsing, accounts, situation checks, saved history, private readiness, contact intake, purchase history, privacy requests, evidence workflows, AI-assisted features, and attorney-sharing workflows.

RecourseLink separates public source-backed information from private user records. Private facts, contact details, evidence files, and attorney disclosures are handled only through the account workflow and consent scope selected by the user.

Information categories

• Public browsing data needed for security, diagnostics, abuse prevention, and basic analytics.
• Account data such as email, phone, authentication status, agreement versions, and communication preferences.
• Legal Passport matching facts, limited to minimum-necessary structured fields selected by the user.
• Consent receipts with text version, scope, timestamp, source URL, brand identity, opt-in method, and revocation records.
• Evidence metadata and files only after explicit consent and the related evidence workflow is used.
• Attorney profile and verification records for firms that apply to use attorney SaaS tools.
• Payment metadata from Stripe or equivalent processor, but not raw card numbers stored by RecourseLink.
• For a purchased Snapshot only after separate authorization: the confirmed business/entity name used to prepare a shared CourtListener RECAP metadata index entry; the non-sensitive fields from the exact confirmed intake; up to six candidates retrieved from that index; and the bounded AI comparison result.
• Support records, privacy request records, security logs, fraud-prevention records, and consent/audit records.

Use limits

Use of personal information is limited to claim discovery, source-backed matching, account security, consent/audit records, user-controlled attorney sharing, billing, support, legal compliance, fraud prevention, and product reliability.

RecourseLink does not sell claimant PII, publish private issue reports, publish Evidence Vault materials, train public AI models on private user facts, or share attorney-facing lead details without user consent and required access controls.

Public source-backed claim pages do not include private user reports, private evidence, account records, or membership lists.

Do Not Sell or Share My Personal Information

RecourseLink does not sell your personal information and does not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA and comparable state laws. We also do not sell or share claimant facts, evidence files, or attorney-sharing records. We do not receive any referral fee or share of a legal fee.

Because we do not sell or share personal information, there is no sale or share for you to opt out of. You can still exercise your related privacy rights — including the rights to know/access, delete, correct, and limit the use of sensitive personal information — from your account privacy page, or by contacting support. We will not discriminate against you for exercising any privacy right.

We recognize the Global Privacy Control (GPC) browser opt-out signal. Because we do not sell or share your personal information for cross-context behavioral advertising, no additional opt-out action is required to honor it.

Privacy choices and requests

Users may request access, deletion, correction, export, opt-out of sale/share where applicable, limitation of sensitive-data use where applicable, consent revocation, and communication opt-out. RecourseLink handles privacy requests through the protected account privacy page and support review.

Some requests may require identity verification, account security review, legal retention review, fraud-prevention review, or manual processing. RecourseLink may retain security, billing, consent, legal, audit, and dispute records where allowed or required.

Retention and deletion

The default posture is minimum necessary retention, user export/delete where legally required, and limited retention of security, consent, billing, legal hold, and audit records.

Service providers and payment processing

RecourseLink may use service providers for hosting, authentication, payment processing, security, analytics, support, communications, and authorized AI processing that are necessary for the product. Payment card details are processed by Stripe or another payment processor; RecourseLink should not receive or store raw card numbers.

For the current Claim Readiness Snapshot, a scheduled authenticated process uses the confirmed business/entity name to add or refresh public RECAP federal docket metadata in a shared RecourseLink index. Public docket metadata and its source provenance may be retained, refreshed independently of a purchase, and reused for other searches; the consent-bound authorization ledger remains private. OpenAI does not retrieve CourtListener data or receive database access. RecourseLink deterministically retrieves up to six candidates, and OpenAI processes only those candidates plus the authorized non-sensitive intake fields. The OpenAI request is sent with provider storage disabled and excludes uploaded documents, contact/payment data, medical details, privileged communications, account or claim numbers, and full court filings. CourtListener remains a third-party public-record repository, not an official court system.

Service-provider use does not authorize selling private user facts, evidence, or attorney-sharing records.

Review basis

This notice is aligned to RecourseLink product controls, FTC privacy and data security guidance, state privacy-rights concepts including CCPA/CPRA rights to know, delete, correct, opt out, limit sensitive personal information, and avoid discrimination for exercising privacy rights, plus the platform's sensitive-data, SMS, attorney-sharing, and evidence-access limits.