Privacy Policy

Counsel Contacts LLC (“Counsel Contacts,” “we,” “us”) operates a subscription database of publicly available contact information for attorneys at major US law firms, used by legal recruiters and other business professionals. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the rights you have.

Two groups of people are covered by this policy, and we have separate sections for each:

• Subscribers — people who sign up for and use the Service.
• Attorneys in the database — practicing attorneys whose public business information appears in the Service.

When you create an account or use the Service, we collect:

• Account information: your email address and password (stored as a cryptographic hash; we do not see it in plain text).
• Billing information: your payment card details are collected and stored by Stripe, our payment processor. We never see or store your full card number; we only retain the last four digits, card brand, expiration, and a Stripe identifier.
• Usage information: search queries, filters applied, attorneys viewed or exported, and timestamps. Used to provide the Service, enforce usage limits, and improve the product.
• Technical information: IP address, user agent, device and browser type, pages visited, and referrer. Collected automatically when you use the Service.
• Product analytics and session recordings: pages viewed, links and buttons clicked, and recordings of your interactions with the Service (mouse movement, clicks, page navigation). Recordings mask the contents of password and other text input fields, and we exclude administrative pages from recording entirely. We use this information to understand how the Service is used, debug problems, and improve the product. We do not use it to identify you to third parties or for advertising.
• Communications: if you email us, we keep a record of that correspondence so we can respond and follow up.

The core product of Counsel Contacts is a database of publicly available business contact information for practicing attorneys. For each attorney in the database, we may collect:

• Name
• Law firm and office location
• Title (e.g., Partner, Associate, Counsel)
• Practice areas
• Work email address and work phone number
• Business biographical information (law school, graduation year, bar admissions, and similar professional facts)
• A link to the attorney’s profile on the firm’s website

We do not knowingly collect sensitive personal information, home addresses, personal email addresses, personal phone numbers, or information about minors.

Where this information comes from. We collect attorney information exclusively from public sources such as law firm websites, public bar association directories, and publicly available professional directories. We do not purchase data from consumer data brokers, and we do not scrape private or authenticated sources.

We use the information we collect to:

• Provide and operate the Service.
• Authenticate users and secure their accounts.
• Process payments and send billing-related emails (receipts, trial-ending notices, failed-payment alerts).
• Respond to support questions and data-subject requests.
• Monitor, debug, and improve the Service.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with our legal obligations and enforce our Terms of Service.

We do not sell or rent personal information. We do not use subscriber information or attorney information to train machine learning models, and we contractually restrict our subscribers from doing so.

If you are located in the European Union, the United Kingdom, or another jurisdiction that requires us to identify a lawful basis for processing personal data, we rely on the following:

• Performance of a contract — to provide the Service to our subscribers.
• Legitimate interests — to operate, secure, and improve the Service; to maintain an accurate business directory of publicly available information; and to market our Service to professionals who may benefit from it. We balance these interests against the privacy rights of the individuals concerned and will not process data where our interests are overridden by those rights.
• Legal obligation — to comply with applicable laws and respond to lawful requests.
• Consent — where we ask for it and you provide it (for example, to send optional marketing email). You can withdraw consent at any time.

We share information with a small number of service providers who help us operate the Service. Each is bound by confidentiality and data-protection obligations:

• Stripe — payment processing and subscription billing.
• Supabase — cloud database and authentication.
• Vercel — application hosting and performance analytics.
• Resend — transactional email delivery.
• Upstash — rate-limiting infrastructure.
• Sentry — error monitoring.
• PostHog — product analytics and session recording, hosted in the United States.

We may also disclose information if we are required to do so by law, subpoena, or valid legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Counsel Contacts, our users, or others.

If Counsel Contacts is involved in a merger, acquisition, or sale of all or substantially all of its assets, information we hold may be transferred as part of that transaction. We will notify you before that happens.

You can access and update your account information at any time from Settings → Profile. You can cancel your subscription from Settings → Billing. You can delete your account entirely from Settings → Profile; when you do, we cancel any active subscription and delete your account and associated Customer Data, except where we must retain information to comply with legal obligations (for example, billing records).

Depending on where you live, you may also have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent where we rely on it. To exercise any of these rights, email support@counselcontacts.com. We will respond within 30 days.

If your business contact information appears in Counsel Contacts and you would like us to correct or remove it, you can:

• Email support@counselcontacts.com from a work email address that matches the record, with “Opt out” in the subject line. We may ask for reasonable verification if the request comes from an address that doesn’t match the record we hold.
• Include your name and firm so we can locate the right record, and tell us whether you want the record corrected (and how) or removed entirely.

We will process your request within 30 days and, for removal requests, will take reasonable steps to prevent re-inclusion of your record in future updates of our database.

California residents (CCPA/CPRA): you have the right to know what personal information we hold about you, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of your personal information. We do not sell personal information and do not share it for cross-context behavioral advertising. To exercise your rights, contact us at the address above.

European Union, United Kingdom, and similar jurisdictions: you have the right to access, correct, erase, or restrict processing of your personal data; to object to processing based on legitimate interests; to data portability; and to lodge a complaint with your local data protection authority.

We use a small set of cookies and similar technologies:

• Strictly necessary: authentication and session cookies set by Supabase so you stay logged in. These cannot be turned off.
• Analytics: Vercel Analytics and Vercel Speed Insights, which collect aggregated, anonymized information about how the Service is used.
• Product analytics and session recording: PostHog, which sets cookies to recognize returning visitors, tie usage events to your account once you sign in, and record your interactions with the Service as described under “Information we collect about Subscribers.” Password and other text input fields are masked in recordings, and administrative pages are excluded.
• Consent (EEA, UK, and Switzerland): two small cookies — cc_geo_consent_required (a flag set by our edge layer recording whether your jurisdiction requires prior consent for analytics) and cc_analytics_consent (your accept/decline response). These are used solely to remember your choice so we don’t prompt you again on every page.
• Security: rate-limiting and abuse- prevention infrastructure provided by Upstash.

Visitors in the EEA, UK, and Switzerland: we show a consent banner on your first visit and do not load PostHog analytics or session recording until you accept. If you decline, those cookies are not set. To change your choice later, clear the cc_analytics_consent cookie in your browser settings and reload the page; the banner will reappear.

Most browsers let you refuse or delete cookies, but turning off strictly-necessary cookies will break sign-in and authenticated features of the Service.

We retain subscriber account information for as long as your account is active and for a reasonable period afterward to comply with legal and accounting obligations (for example, retaining billing records for up to seven years). We retain attorney contact information for as long as it is publicly available and relevant to the Service, subject to any removal request you make.

We use reasonable administrative, technical, and physical safeguards to protect the information we hold, including encryption in transit and at rest, hashed passwords, role-based access control, rate limiting, and error monitoring. No system is perfectly secure, however, and we cannot guarantee absolute security.

Counsel Contacts is based in the United States, and our service providers process information in the United States and other countries. Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards (such as the Standard Contractual Clauses) to protect that data.

The Service is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe we have collected information from a child under 16, please contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, for logged-in subscribers, post a notice in the Service or send an email to the address on your account.

Counsel Contacts LLC
Privacy questions and data-subject requests: support@counselcontacts.com