Privacy Policy

Effective Date: August 10, 2026

At OAK.LEGAL, we respect your privacy and are committed to protecting the information entrusted to us. This Privacy Policy explains how OAK.LEGAL (“OAK.LEGAL,” “we,” “our,” or “us”) collects, uses, discloses and protects information when you visit our website, create an account or use the OAK.LEGAL platform and related services (collectively, the “Services”).

This Privacy Policy applies to information collected through the OAK.LEGAL website, platform and related Services. It does not necessarily apply to information collected by third-party websites or services that may be linked to or integrated with OAK.LEGAL.

By accessing or using the Services, you acknowledge that you have reviewed this Privacy Policy.

1. Information We Collect

We may collect information that you provide directly to us, information generated through your use of the Services and information received from third parties as necessary to provide and support the Services.

Information You Provide

Depending on how you use the Services, we may collect:

Name
Email address
Phone number
Firm or organization name
Business address
Professional information
Bar or licensing information
Login credentials and account information
User preferences and account settings
Information provided when contacting customer support
Information submitted through forms or other communications
Other information you voluntarily provide to OAK.LEGAL

Firm and User Information

Organizations using OAK.LEGAL may provide information about their employees, contractors, attorneys, staff members and other authorized users.

This information may include names, email addresses, roles, professional credentials and other information necessary to create and manage user accounts.

Organizations are responsible for ensuring that they have the appropriate authority to provide information about their users to OAK.LEGAL.

Information Entered Into the Platform

Users may submit, upload, store or otherwise process information through the OAK.LEGAL platform as part of their use of the Services.

This may include information relating to clients, matters, cases, documents, contacts, communications and other information entered by an authorized user.

This information may contain confidential, personal or sensitive information depending on how the customer uses the Services.

Customers are responsible for determining what information they submit to the platform and for ensuring that their use of the Services complies with applicable laws, regulations and professional obligations.

Technical and Usage Information

When you access or use the Services, we may automatically collect certain technical and usage information, which may include:

Internet Protocol (IP) address
Browser type and version
Device type
Operating system
General geographic information derived from your IP address
Pages or areas of the Services accessed
Dates and times of access
Login and authentication activity
Platform interactions and usage information
Error logs and diagnostic information
Other technical information necessary to operate, secure and improve the Services

Payment and Billing Information

When you purchase a subscription or make a payment, we may collect information necessary to process and manage your subscription.

Payment card information may be collected and processed directly by our third-party payment processor. OAK.LEGAL does not need to receive or store your full payment card number in order to process subscription payments.

Billing information may include transaction details, subscription information, billing history and other information necessary to manage your account.

2. How We Use Information

We may use information collected through the Services to:

Create and manage user accounts
Verify account and professional information
Provide, operate and maintain the Services
Provide customer support
Process subscriptions and payments
Manage billing and account activity
Authenticate users and maintain account security
Monitor and prevent unauthorized access, fraud and abuse
Troubleshoot technical issues
Maintain and improve the performance and functionality of the Services
Develop and improve features and products
Communicate with customers and users regarding their accounts or the Services
Send service-related notices, updates and administrative communications
Respond to inquiries and requests
Comply with applicable laws and legal obligations
Protect the rights, safety and security of OAK.LEGAL, our customers and others
Enforce our Terms & Conditions and other applicable agreements
Carry out other purposes disclosed at the time information is collected or with your consent

We may also use information in aggregated or de-identified form for purposes such as analyzing trends, measuring usage and improving the Services, provided that the information is no longer reasonably capable of identifying an individual.

3. How We Share Information

We do not sell or rent personal information.

We may disclose information in the following circumstances:

Service Providers

We may share information with trusted third-party service providers that perform services on our behalf, such as hosting, infrastructure, security, payment processing, email delivery, analytics, customer support and other business operations.

These service providers are permitted to access information only as reasonably necessary to perform services for OAK.LEGAL and are subject to applicable contractual obligations.

Customer-Directed Sharing

Information submitted to the platform may be accessed, shared or managed by authorized users within the organization that maintains the applicable OAK.LEGAL account.

Customers are responsible for determining which individuals are authorized to access information within their organization.

Legal Requirements

We may disclose information when we reasonably believe disclosure is necessary to:

Comply with applicable law, regulation, legal process or governmental request
Respond to a subpoena, court order or other legal process
Protect the rights, property or safety of OAK.LEGAL, our customers or others
Detect, investigate or prevent fraud, security incidents or other unlawful activity
Enforce our Terms & Conditions or other agreements

Business Transfers

If OAK.LEGAL is involved in a merger, acquisition, financing, reorganization, sale of assets or similar transaction, information may be transferred as part of that transaction, subject to applicable legal requirements.

With Your Consent

We may share information for other purposes when you direct us to do so or provide your consent.

4. Data Security

OAK.LEGAL maintains administrative, technical and organizational safeguards designed to protect information processed through the Services.

Security measures may include access controls, authentication, encryption, monitoring, logging, backups and other safeguards appropriate to the nature of the information and the Services.

However, no method of transmission over the internet or method of electronic storage is completely secure.

While we take reasonable measures to protect information, we cannot guarantee that information will never be accessed, disclosed, altered or destroyed as a result of a security incident or other event beyond our reasonable control.

5. HIPAA and Protected Health Information

Depending on how the Services are used, customers may submit information that is subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) or other privacy and data protection laws.

Where applicable, OAK.LEGAL may enter into a separate Business Associate Agreement (“BAA”) with a customer.

When a BAA applies, the BAA governs the parties' respective obligations regarding protected health information (“PHI”) to the extent of any conflict between the BAA and this Privacy Policy.

Customers are responsible for determining whether their use of the Services involves PHI or other regulated information and for complying with applicable legal, regulatory and professional requirements.

OAK.LEGAL does not provide legal or compliance advice and does not represent that use of the Services alone will satisfy a customer's HIPAA or other regulatory obligations.

6. Cookies and Tracking Technologies

OAK.LEGAL may use cookies and similar technologies to operate the Services, maintain sessions, remember preferences, understand how the Services are used and improve website and platform performance.

These technologies may collect information such as browser type, device information, pages visited, interactions and other technical information.

We may also use analytics or similar technologies provided by third-party service providers.

You may be able to manage or disable certain cookies through your browser settings. Disabling cookies may affect the functionality of certain portions of the Services.

7. Communications

We may send communications related to your account and use of the Services, including:

Account confirmations
Security notifications
Billing and subscription notices
Service updates
Technical notices
Customer support communications
Changes to our policies or agreements

These communications are necessary for the operation and administration of your account and generally cannot be opted out of.

Where permitted by applicable law, we may also send promotional or marketing communications.

You may opt out of marketing communications by following the unsubscribe instructions included in those communications or by contacting us directly.

Opting out of marketing communications will not prevent us from sending necessary transactional or service-related communications.

8. Data Retention

We retain information for as long as reasonably necessary to:

Provide and maintain the Services
Maintain customer and account records
Comply with legal, regulatory or contractual obligations
Resolve disputes
Enforce our agreements
Detect and prevent fraud or security incidents
Maintain legitimate business records

The length of time information is retained may vary depending on the type of information, the nature of the relationship with the customer and applicable legal or contractual requirements.

Following cancellation or termination of an account, information may remain stored for a period of time in accordance with OAK.LEGAL's applicable retention practices and legal obligations.

9. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information.

These rights may include the ability to:

Request access to personal information we maintain about you
Request correction of inaccurate or incomplete information
Request deletion of personal information, subject to applicable exceptions
Request information about how your personal information is used or disclosed
Opt out of certain marketing communications
Exercise other rights provided by applicable privacy laws

To submit a privacy-related request, contact us using the information provided in the Contact Us section below.

We may need to verify your identity before completing certain requests.

Certain information may not be eligible for deletion or other requests where we are required or permitted to retain it by law, for legitimate business purposes or pursuant to contractual obligations.

10. Information Submitted on Behalf of Others

OAK.LEGAL customers may submit information about other individuals, including clients, contacts, employees or other third parties.

If you submit information about another person through the Services, you are responsible for ensuring that you have the appropriate authority or legal basis to provide that information to OAK.LEGAL and use the Services for that purpose.

Where applicable, the organization that controls the account may be responsible for responding to requests concerning information submitted through its account.

11. Third-Party Services

The Services may integrate with or rely on third-party products and services.

These may include payment processors, hosting providers, analytics services, communication providers, authentication services, security services and other technology providers.

Third-party services may collect or process information in accordance with their own privacy policies and terms.

OAK.LEGAL is not responsible for the privacy practices of third-party services that operate independently from OAK.LEGAL.

We encourage you to review the privacy policies of third-party services before using them.

12. Third-Party Links

The Services or our website may contain links to third-party websites or services.

These websites are not controlled by OAK.LEGAL, and this Privacy Policy does not apply to information collected through those third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit.

13. Children's Privacy

The Services are intended for professional and business use by law firms and other authorized organizations and are not directed toward children as users.

However, information relating to children or minors may be submitted to or processed through the Services by authorized customers in connection with their professional activities and use of the platform.

OAK.LEGAL does not knowingly permit children to create or maintain user accounts for the Services.

Customers are responsible for ensuring that their collection and submission of information relating to children complies with applicable laws and regulations.

14. Account and Organizational Responsibility

OAK.LEGAL provides Services to organizations, including law firms, that may establish accounts and authorize users to access the platform.

Where an organization controls an account, that organization may be responsible for determining:

Which users may access the account
What information users may submit
How information is used within the organization
How long information should be retained
Whether information may be shared with other authorized users
Compliance with applicable legal and professional obligations

If you access OAK.LEGAL through an organization, certain requests concerning your information may need to be directed to that organization.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, legal requirements or other circumstances.

When we make changes, we will update the Effective Date at the top of this Privacy Policy.

Where required by applicable law, we may provide additional notice of material changes through the Services, by email or through other reasonable means.

Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by applicable law.

16. Contact Us

If you have questions about this Privacy Policy, would like to submit a privacy-related request or have concerns about how your information is handled, please contact us at:

OAK.LEGAL
Email: info@oak.legal