Privacy Policy — Lexroute

1. Who we are

Lexroute ("we", "us") operates an online case-intake service that connects people considering a personal-injury claim with independently licensed attorneys. We are not a law firm, do not provide legal advice, and do not represent anyone in a legal matter. Submitting an intake does not create an attorney-client relationship.

2. Information we collect

Through the intake we collect:

Case details: case type, incident date/window, state, city, ZIP, liability facts you provide.
Health-related information: whether you were injured, treatment level (none / doctor / urgent care / ER / hospitalized), whether treatment is ongoing.
Contact information: name, phone, email, preferred contact time, preferred language.
Free-text notes you choose to include.
Technical data: IP address, browser user-agent, timestamps, and event logs necessary to operate and secure the service.

Health information collected here is not Protected Health Information under HIPAA — we are not a covered entity or business associate — but we handle it with equivalent care.

3. How we use it

Route your case to attorneys licensed in your state who handle your case type.
Let those attorneys contact you about representation.
Operate, secure, and improve the service (fraud prevention, abuse monitoring).
Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not use your intake for marketing lists, and we do not share it with anyone outside the matched attorney(s) and our infrastructure providers.

4. Who sees your information

Matched attorney(s): up to three attorneys per case receive your intake so they can decide whether to claim it. Only one attorney at a time holds an active claim.
Our administrators: a small number of authorized personnel for support and abuse review.
Infrastructure providers (hosting, database, email/SMS delivery) that process data on our behalf under contract.

5. Retention

Active cases: retained while at least one attorney holds an active claim, plus 30 days after final disposition.
Closed / unmatched cases: retained 180 days, then contact fields (name, phone, email, free-text notes) are purged; a de-identified record (case type, state, timing, disposition) may be kept for statistical and abuse-prevention purposes.
Event / audit logs: retained up to 24 months for security and dispute resolution.
Backups: encrypted backups may retain records for up to 35 days beyond the schedules above before rolling off.

6. Your rights & delete-my-data

You can, at any time, request that we:

Confirm what information we hold about your case.
Correct inaccurate information.
Delete your case and personal information from active systems.
Stop routing your case to attorneys.

Self-service: open your case page from the confirmation link we emailed you. From that page you can update your contact details, release any attorney holding your case, or use "Delete my data" to purge the case immediately.

By request: email privacy@lexroute.example from the address on file and we will verify and process within 30 days. Deletion is honored in production systems immediately and rolls off backups on the schedule above.

7. Security

Data is transmitted over TLS and stored in an encrypted, access-controlled database. Attorney and administrator access is scoped by role-based permissions. No system is perfectly secure; contact us immediately if you suspect unauthorized access to your case.

8. Children

The service is intended for adults. If a case involves a minor, it should be submitted by a parent or legal guardian.

9. Changes

We will post material changes to this policy on this page and update the "Last updated" date above.

10. Contact

Privacy questions or requests: privacy@lexroute.example.