Privacy Policy

Draft notice

DRAFT — 2026-10-21, version 2026-10-21-draft. This page is illustrative pitch-demo copy for Legalgrads. It is not legal advice, not a legally approved policy, and not a certification of compliance. Licensed counsel must review marketplace classification, advertising, referral compensation, bar rules, privacy, security, and payments before any real launch.

This notice describes what the demo actually does. It does not promise controls that are not built.

Who this covers

This policy is written for Legalgrads. The demo runs entirely in your browser as a static site. There is no Legalgrads account server behind this pitch build. Contact: ryan@legalgrads.com.

Categories we collect in the demo

Account data you type: name, email, password (stored as a demo hash, not bcrypt), role, and an adult confirmation.

Intake and matter data you type: jurisdiction, a short description, budget, messages, appointment status, and reviews. You should not type real secrets.

Technical data stored locally: the demo database (IndexedDB), your role selection, cookie preferences, and, only if you opt in, a local log of fake analytics events.

We do not ask for payment card numbers, government ID numbers, or precise location. Attorney “bar” records are synthetic labels, not real license numbers.

Purposes and sources

The demo uses this information to let you click through search, messaging, booking, engagement, and reviews on one device. That is the only purpose implemented here.

Sources are you, and the fictional seed data that shipped with the site. We do not buy data and we do not receive data from a bar association.

Sharing

The demo does not sell personal information and does not share it with advertising networks. Other people using a different browser cannot see your database.

Inside your own browser, the demo admin role can see demo inquiries, privacy tickets, and the audit log. A client cannot read another client’s inquiries. An attorney sees only their own leads.

A production service that hosted this data on a server would need a separate, counsel-reviewed list of processors, such as a host, email vendor, and payments company. Those vendors are not used here.

Retention and deletion

Data stays in this browser until you clear site data, reset the demo, or use the deletion flow. Reset Demo restores the original fictional seed and removes changes you made.

Account deletion anonymizes your name and email, blanks message text you sent, and unpublishes an attorney profile. A short audit event is retained without your old email. Simulated payment rows have no card data to keep.

Export downloads a JSON file of records linked to your demo user. It does not include other people’s private matters.

Security

The static site is served over HTTPS when hosted on legalgrads.com. The demo database is not encrypted beyond what the browser and the operating system provide. There is no server-side access control because there is no server session. Do not treat this demo as a confidential system.

Production would need encryption in transit and at rest, access control on a server, upload scanning, and security logging. Those controls are described as targets on the Security page and are not all implemented in this pitch build.

Cookies and similar storage

Strictly necessary storage is the demo database, the session key that remembers which demo user you picked, and your cookie choice. It is always on because the demo does not function without it.

Analytics and marketing storage stay off until you opt in. The demo never loads a third-party analytics or advertising script. If you opt in, a button on the cookie settings page writes a fake event to local storage so you can see the gate work.

Your requests

You can submit a demo request for access, correction, deletion, or opt-out of sale or sharing. The request becomes a ticket in the local admin log. A demo admin can complete it or reject it with a reason. That workflow illustrates the process. It is not a determination that any particular state privacy statute applies to Legalgrads.

California residents have statutory rights where the law applies. This draft does not claim that every CCPA/CPRA obligation automatically applies to this project. Counsel should decide applicability, thresholds, and required notices before launch.

History

Effective date of this draft: October 21, 2026. Version 2026-10-21-draft. No earlier public version has been issued. Questions about this draft: ryan@legalgrads.com. Legalgrads does not publish a street address or telephone number in this demo, and it does not claim any regulator, bar association, or certification has approved the product.