AccidentPath
Legal

Privacy Policy

How we collect, use, disclose, sell, and share your information.

DRAFT - counsel to confirm

DRAFT - counsel to confirm. This policy reflects AccidentPath's Lane A model (an attorney-advertising and lead-generation platform - not a State-Bar-certified section 6155 lawyer referral service). Final wording is subject to California counsel review before launch. Items in [brackets] are placeholders the business will complete.

Effective: [EFFECTIVE_DATE] - Last updated: [LAST_UPDATED_DATE]

This Privacy Policy explains how [ENTITY_NAME] ("AccidentPath," "we," "us," or "our") collects, uses, discloses, sells, and shares personal information when you visit accidentpath.com or use our intake and educational tools. AccidentPath is not a law firm and does not provide legal advice. We operate an educational hub and an attorney-advertising / lead-generation service. Attorneys who advertise with us may pay a marketing fee.

1. Who We Are and How to Reach Us

The business that controls your information is [ENTITY_NAME], located at [ENTITY_ADDRESS]. For privacy questions or to exercise your rights, email privacy@accidentpath.com. For general support, email support@accidentpath.com.


2. Scope

This policy covers personal information we collect through the Site and Services from California residents and other visitors. It does not cover attorneys or law firms that participate in our network (a separate notice governs that relationship), or third-party websites we link to, including attorney firm websites.


3. Information We Collect

You can browse our educational content, tools, and attorney directory without submitting any personal information. We collect contact and accident/injury details only if you choose to enter them in the intake wizard.

Identifiers: name, email, and phone number (all optional), IP address, and online/device identifiers set by our analytics providers. Internet and network activity: pages viewed, referring URL, intake-wizard answers, and tool interactions. Coarse geolocation: the city and state of your accident that you enter, and approximate location inferred from your IP. Inferences: practice-area and urgency categorization derived from your answers.

Sensitive personal information (SPI): your described injuries, your medical-treatment status, and any free-text description of your accident. Under the CPRA this is health information collected and analyzed about you and is treated as sensitive personal information. We also record TCPA consent audit data (whether you consented, the version of the consent text, the date/time, and the IP address at consent).

We do not collect government IDs, payment-card or financial-account numbers, precise (GPS-level) geolocation, biometric or genetic data, or the contents of your private messages. We do not knowingly collect information from children (see Minors).


4. How We Collect Information

Directly from you when you complete the intake wizard, contact us, or otherwise submit information. If you provide a phone number, we require your affirmative TCPA consent first.

Automatically through cookies and similar technologies (see our Cookie Policy) and server logs, including Google Analytics. We do not buy personal information about you from data brokers.


5. How We Use Your Information

To connect you with attorneys who advertise with us: if you submit contact information, we use your accident, injury, location, and contact details to identify participating attorneys who handle matters like yours and to make your inquiry available to them so they can contact you. This is the core purpose of the Service.

To operate, secure, and debug the Services; to route and process your submission through our third-party workflow tool; to analyze and improve the Site with analytics; to communicate with you about your inquiry (including, where you consented, by call, text, and email); to maintain a consent audit trail; and to comply with law and enforce our terms.

Sensitive PI - limited purposes: we use your sensitive personal information only to connect you with an appropriate attorney and enable that attorney to evaluate and contact you, plus the operational and legal purposes reasonably necessary to deliver that service. We do not use your sensitive PI to infer characteristics about you for advertising.


6. Who We Disclose Information To

Attorney partners who advertise with us: on your intake submission - including your name, email, phone, city/state, accident type and date, and your injuries, medical-treatment status, and accident description (sensitive PI) - so a participating attorney can evaluate and contact you. Because these attorneys pay AccidentPath a marketing/participation fee, we treat this disclosure as a "sale" and/or "sharing" under the CPRA and give you the right to opt out.

Service providers and processors: our third-party workflow-automation processor (which routes and processes your submission for us), our database host (Supabase), our application host and CDN (Vercel), our analytics provider (Google Analytics 4), and our rate-limiting service (Upstash Redis). These act as service providers under contracts that limit their use of the data to performing services for us.

Legal, safety, and corporate transactions: to regulators, courts, or law enforcement when required by law or to protect our rights and users, and to a successor entity in connection with a merger, acquisition, financing, or sale of assets.


7. Do We "Sell" or "Share" Your Information?

Yes. We treat our disclosure of your intake information to paid attorney partners as a "sale" and/or "sharing" of personal information, including sensitive personal information, under the CPRA. We do this so those attorneys can contact you about your inquiry, and those attorneys pay us to advertise in our network.

You have the right to opt out. Use the "Do Not Sell or Share My Personal Information" link in our footer or the methods in "Your California Privacy Rights." We have not sold or shared personal information about consumers we know to be under 16 years of age.


8. How Long We Keep Your Information

We keep each category of personal information only as long as reasonably necessary for the purpose it was collected, then delete or de-identify it. [RETENTION_PERIODS - the business will set and honor real retention periods for intake submissions, TCPA consent audit records, workflow-tool data, analytics, and server logs before launch.]

Once your inquiry has been made available to an attorney partner, that attorney holds their own copy as an independent business, and our deletion cannot reach into their systems.


9. Your California Privacy Rights

If you are a California resident, the CCPA/CPRA gives you the right to know, delete, and correct the personal information we hold; to opt out of the sale/sharing of your personal information; to know whether we sell/share; to data portability; and to limit our use and disclosure of your sensitive personal information. We will not discriminate or retaliate against you for exercising any of these rights.

Right to limit sensitive PI: because we collect sensitive personal information (your injuries, medical-treatment status, and accident description), you may direct us to limit our use of that information to what is necessary to connect you with an attorney and the other permitted purposes.

To submit a request, email privacy@accidentpath.com with the subject line of the right you are exercising, or use the "Do Not Sell or Share My Personal Information" control in our footer. We will confirm receipt within 10 business days and respond within 45 calendar days (extendable once by up to 45 more days). Opt-out and limit requests take effect within 15 business days.


10. Global Privacy Control (GPC)

We honor the Global Privacy Control (GPC) signal as a valid opt-out of both analytics and the sale or sharing of your information. You can also opt out any time at accidentpath.com/do-not-sell, and exercise your rights to know, delete, or correct your data at accidentpath.com/privacy-rights.


11. Security

We use administrative, technical, and organizational measures designed to protect your personal information, including transport encryption (HTTPS/TLS), access-controlled cloud infrastructure, rate limiting, and limiting internal access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If you believe your information has been compromised, contact privacy@accidentpath.com.


12. Minors

The Services are intended for adults (18+). We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of consumers under 16. If you believe a child under 13 has provided us information, contact privacy@accidentpath.com and we will delete it.


14. Changes to This Policy

We may update this policy. We will change the "Last updated" date above and, for material changes, provide additional notice as required by law. Your continued use of the Services after an update means you accept the updated policy to the extent permitted by law.


15. Notice at Collection

At or before the point we collect your information (the intake wizard), we provide a just-in-time Notice at Collection: we collect the categories described above (including sensitive health/injury information); we use them for the purposes described above; we sell/share identifiers, coarse geolocation, inferences, and sensitive PI with paid attorney partners; and you can opt out and limit as described in "Your California Privacy Rights."


16. Contact Us

For privacy inquiries, email privacy@accidentpath.com or write to [ENTITY_NAME], [ENTITY_ADDRESS].