Privacy Policy

Effective date and scope

Effective Date: August 17, 2026

Last Updated: August 17, 2026

LegaHelps ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at legahelps.com (the "Site") or use our platform, which includes lead management services for individuals seeking legal help and case management services for law firms and legal professionals (collectively, the "Services").

Our platform serves two distinct groups: (1) individuals seeking legal assistance ("Prospects"), who use our lead management and AI intake features; and (2) law firms and legal professionals ("Subscribers"), who use our case management features to organize and manage their practices. This Privacy Policy addresses how we handle information for both groups.

By accessing our Site or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1.1 Prospect Information (Lead Management)

When individuals use our lead management features to seek legal help, we may collect:

• Name, email address, phone number, and mailing address
• Details about your legal matter, claims, disputes, or circumstances
• Documents, evidence, or materials you upload or share
• Location and demographic information
• Conversations and interactions with Lega, our AI intake assistant
• Medical records, injury information, insurance details, and employment information (if relevant to your legal matter)
• Any other information you choose to provide

1.2 Subscriber Information (Case Management)

When law firms and legal professionals register for and use our case management features, we may collect:

• Firm name, contact name, title, and role
• Business email address, phone number, and mailing address
• Billing and payment information
• Account credentials and user roles for Authorized Users
• Any other information you choose to provide

1.3 End User Information (Case Management)

Subscribers may submit information about their own clients and contacts ("End Users") into our case management features. This information may include:

End User information is provided to us by Subscribers. We process such information solely as a service provider on behalf of the Subscriber. The Subscriber is the controller of End User information, and we act as a processor. If you are an End User and have questions about how your information is used, please contact the Subscriber (the law firm) directly.

• Names, contact information, and demographic details
• Details about legal matters, claims, disputes, or cases
• Documents, evidence, correspondence, and case materials
• Communication records and case notes
• Any other information the Subscriber chooses to enter

1.4 Information Automatically Collected

When you visit our Site or use our Services, we may automatically collect certain information about your device and usage, including:

We collect this information using cookies, browser storage, web beacons, and similar tracking technologies. For more information, see Section 10 (Cookies and Tracking Technologies).

• IP address and approximate geolocation
• Browser type, version, and language
• Operating system and device type
• Pages visited, time spent on pages, and navigation paths
• Referring URLs and exit pages
• Date and time of visits
• Feature usage and interaction patterns within the Services

1.5 AI Interaction Data

Our Services include AI-powered features, including Lega, an AI-guided intake assistant. When Prospects or Subscribers interact with AI features, we collect and process the content of those interactions. This data is used to organize and summarize legal matter information for review by legal teams. We do not use individual Prospect matter data or Subscriber case data to train generalized third-party AI models. We may use de-identified, anonymized, or aggregated data solely to improve the accuracy and performance of our AI systems.

2. How We Use Information

We use the information we collect for the following purposes:

• To provide and manage our Services: Operating the lead management platform, facilitating connections between Prospects and legal professionals, providing case management tools to Subscribers, and fulfilling our contractual obligations.
• To connect Prospects with legal help: Organizing Prospect intake information and sharing it with appropriate law firms, legal professionals, or legal service providers who may be able to assist.
• To communicate with you: Responding to inquiries, sending account notifications, service updates, billing information, and support responses. This includes communications by phone, text message, and email.
• To improve our Site and Services: Analyzing usage patterns, troubleshooting issues, enhancing user experience, and improving AI features.
• For security and fraud prevention: Detecting and preventing unauthorized access, abuse, or illegal activities.
• To comply with legal obligations: Meeting applicable legal, regulatory, and compliance requirements.
• To enforce our rights: Protecting our legal rights, property, and safety, and that of our users and third parties.

3. How We Share Information

We do not sell personal information. We may share information in the following circumstances:

3.1 Prospect Information Shared with Legal Professionals

The primary purpose of our lead management features is to organize Prospect information and share it with appropriate law firms, legal professionals, or legal service providers ("Legal Teams") who may be able to assist. When you use our lead management features, you expressly consent to our sharing of your intake information, including details about your legal matter, with Legal Teams. These Legal Teams are independent third parties, and their use of your information is governed by their own privacy policies and professional obligations.

3.2 Service Providers and Subprocessors

We may share information with trusted third-party service providers and Subprocessors who perform services on our behalf, such as:

These service providers and Subprocessors are contractually obligated to protect your information and use it only for the purposes for which we disclose it to them. A current list of our Subprocessors is available upon request.

• Cloud hosting and infrastructure providers
• AI and machine learning platform providers
• Analytics and performance monitoring services
• Email, SMS, and communication platforms
• Customer relationship management (CRM) systems
• Payment processing services

3.3 Business Transfers

If LegaHelps or IOT Operations is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. We will notify affected users of any such change in ownership or control.

3.4 Legal Compliance and Protection

We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose information to:

If we receive a legal request for Prospect, Subscriber, or End User information, we will attempt to notify the affected user or Subscriber unless prohibited by law or court order. We will not voluntarily disclose case management data to law enforcement or government authorities except as required by law.

• Enforce our agreements and policies
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or others
• Investigate and prevent fraud or illegal activity

4. Important Disclaimers for Prospects

If you are a Prospect using our lead management features, please be aware of the following:

• No Attorney-Client Relationship: Using our lead management features, including interacting with Lega, does not create an attorney-client relationship between you and LegaHelps, IOT Operations, or any Legal Team. An attorney-client relationship is only formed through a direct written engagement agreement between you and a specific legal professional or law firm.
• Not Legal Advice: Lega is an AI-powered intake assistant, not a licensed attorney. Nothing provided through our lead management features constitutes legal advice, legal opinion, or legal representation.
• Confidentiality Limitations: Information transmitted through our lead management features may not be protected by attorney-client privilege or work-product doctrine. Do not share information that you would not want disclosed to third parties.
• Legal Team Independence: Legal Teams who receive your information are independent third parties. We do not control their actions, advice, or handling of your information.
• Not a Lawyer Referral Service: LegaHelps is not a lawyer referral service. We do not recommend, endorse, or select specific attorneys for Prospects. We provide a technology platform to facilitate connections between Prospects and Legal Teams.

5. Attorney-Client Privilege and Confidentiality for Subscribers

We understand that Subscribers may store End User information in our case management features that is subject to attorney-client privilege, work-product doctrine, or similar legal protections. We acknowledge the following:

However, Subscribers acknowledge that the transmission and storage of information through cloud-based services involves inherent risks, and we cannot guarantee that information will never be subject to disclosure. Subscribers are responsible for assessing whether our case management features meet their ethical and professional obligations.

• We do not access, review, or use Subscriber case data or End User matter data for any purpose other than providing the Services
• We do not train generalized AI models using Subscriber case data or End User information
• We implement technical and organizational measures designed to protect the confidentiality of information stored in our case management features
• We will not waive or assert any claim of privilege over Subscriber or End User information
• If we receive a legal request seeking disclosure of privileged case data, we will attempt to notify the Subscriber promptly so that the Subscriber may seek appropriate protective relief

6. Sensitive Information and Medical Records

Because our Services involve legal intake and case management, you may voluntarily provide sensitive information, including:

By providing such information, you consent to our collection and processing of it as described in this Privacy Policy. We handle medical records and health information with heightened security measures and restrict access to authorized personnel only. If you are a Prospect, please consider the confidentiality limitations described in Section 4 before sharing sensitive information through our lead management features.

• Details about legal disputes, financial matters, and employment information
• Health information, medical records, and injury details (if relevant to your legal matter)
• Insurance policy details and claim information
• Other personally sensitive topics

7. Data Security

We implement appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include:

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect information, we cannot guarantee its absolute security.

• Encryption of data in transit (SSL/TLS) and at rest
• Access controls, multi-factor authentication, and role-based permissions
• Regular security assessments, vulnerability scanning, and penetration testing
• Employee training on data protection and confidentiality
• Incident response and business continuity planning

8. Data Retention

We retain Prospect information for as long as necessary to fulfill the purposes for which it was collected, including connecting Prospects with Legal Teams and complying with legal obligations. Prospect information is generally retained for the duration of the intake process and any subsequent legal engagement, plus a reasonable period thereafter for record-keeping purposes.

Subscriber account information and End User case data are retained for as long as the Subscriber maintains an active account and as necessary to fulfill the purposes for which it was collected. Upon termination of a Subscriber's account, we will securely delete or return the Subscriber's data, including End User information, within ninety (90) days unless otherwise required by law, court order, or as necessary to resolve disputes. Subscribers are responsible for exporting their data prior to account closure if they wish to retain it.

9.1 Prospect Rights

Prospects have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to legal exceptions)
• Request a portable copy of your personal information
• Opt out of marketing communications
• Object to certain processing activities

9.2 Subscriber Rights

Subscribers have the right to:

• Access the personal information we hold about them
• Request correction of inaccurate or incomplete information
• Request deletion of their account and associated data (subject to legal exceptions)
• Request a portable copy of their data
• Opt out of marketing communications
• Object to certain processing activities

9.3 End User Rights

End Users should direct requests regarding their personal information to the Subscriber (the law firm) that collected their information. Because we process End User information as a service provider on behalf of Subscribers, we are generally not able to respond directly to End User requests. We will cooperate with Subscribers to facilitate End User rights requests as required by applicable law.

9.4 For California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to know: Request disclosure of the categories and specific pieces of personal information we collect.
• Right to delete: Request deletion of your personal information.
• Right to opt out of sale: We do not sell personal information.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the site recognize your device and store information about your preferences or past actions.

10.2 How We Use Cookies

We use cookies and similar technologies to:

• Enable essential website and platform functionality
• Maintain your session and authentication
• Analyze site traffic and user behavior
• Remember your preferences

10.3 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site and Services.

11. Children's Privacy

Our Site and Services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete that information promptly. If you are between 13 and 18 years of age, you may use our Services only with the involvement and consent of a parent or guardian.

12. Third-Party Links

Our Site may contain links to third-party websites, services, or resources, including Legal Team websites. We are not responsible for the privacy practices, content, or security of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the "Effective Date" at the top of this policy and may notify users by email or through a notice on our Site.

Your continued use of our Site or Services after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

LegaHelps (a service of IOT Operations)

6 Centerpointe Drive, Suite 700

La Palma, California 90623

United States

Email: neelima@iotoperations.com

Phone: 657-777-3324

This Privacy Policy was prepared for LegaHelps and is effective as of the date stated above.