Privacy Policy

From claimants

• Identifiers: name, email, phone number, date of birth, and address.
• Government identification documents you choose to upload (driver's license, passport, or birth certificate), including for any additional plaintiffs you add.
• Claim information: incident date, location, case type, your description of what happened, injuries, and treatment received.
• Medical and health-related information contained in what you upload or describe (a sensitive personal information category under the CPRA).
• Photographs and documents you upload, including injury photos and incident evidence.
• Account and technical data: login credentials (hashed), IP address, device and browser information, and usage logs.

From attorneys

• Name, firm, email, phone, and California State Bar number.
• Bar license status retrieved from the State Bar of California's public licensee records.
• Subscription and billing records (payment card data is handled by our payment processor; we never store full card numbers).
• Bidding and platform activity logs.

• To create and operate your account.
• To organize and present anonymized case information to attorneys on the marketplace.
• To release a claimant's identity, contact information, and uploaded documents to the attorney who wins that listing — this is the core purpose of the service, and we ask for your explicit consent at intake.
• To verify attorney licensure and prevent fraud, duplicate submissions, and misuse.
• To process attorney subscription and per-bid payments.
• To send service communications about your account and your submission.
• To comply with legal obligations and respond to lawful requests.

We do not use your information to train third-party AI models. AI features on the platform summarize and score the material you submit for the purpose of presenting it on the marketplace.

• Before an attorney wins your listing: attorneys see anonymized case details only — case type, general location, incident date, your description with identifying details removed, injuries, the AI summary and score, whether each evidence category exists (yes/no), and how many additional plaintiffs there are. They do not see your name, contact information, documents, or images.
• After an attorney wins your listing: that single attorney receives your name, contact information, and the materials you uploaded, so they can contact you and evaluate whether to offer representation.
• Service providers: hosting, database, storage, email delivery, and payment processing vendors, under contracts that limit them to processing on our behalf.
• Legal: when required by law, subpoena, or court order, or to protect rights and safety.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not distribute your submission to multiple attorneys as a shared lead. Each listing goes to one winning attorney.

Health information, government identifiers, and identification documents are sensitive personal information under the CPRA. We use them only for the purposes described above — never to infer characteristics about you and never for advertising. You may limit our use of sensitive personal information by contacting us, though doing so may prevent us from listing your case.

VerdictExchange is not a healthcare provider or health plan and is generally not a HIPAA covered entity. Medical records you upload are still treated as confidential and protected under this policy and under California's Confidentiality of Medical Information Act.

When you submit a case, you consent to being contacted by the attorney who wins your listing at the phone number and email you provide, including by call and SMS, and you consent to receiving service messages from us. Message and data rates may apply. You may opt out at any time by replying STOP to a text, using the unsubscribe link in an email, or emailing us. This consent is not a condition of any purchase, and claimants never pay us anything.

• Case submissions that are never listed or never win a bid: deleted 12 months after submission.
• Case submissions delivered to a winning attorney: retained for 3 years to resolve disputes over the transaction, then deleted.
• Identification documents and injury images: deleted 12 months after the listing closes.
• Attorney account, billing, and bid records: retained as required for tax and accounting purposes, generally 7 years.
• You may request earlier deletion at any time (see Your rights).

Access to submitted documents is restricted by row-level security rules so that only you, our review staff, and the attorney who wins your listing can reach your materials. Data is encrypted in transit and at rest, uploads are served through short-lived signed links rather than public URLs, and administrative access is logged. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you as required by California Civil Code sections 1798.29 and 1798.82.

Under the CCPA/CPRA you have the right to:

• Know what personal information we have collected, used, and disclosed about you.
• Access a portable copy of your personal information.
• Correct inaccurate personal information.
• Delete your personal information, subject to legal retention exceptions.
• Limit our use and disclosure of sensitive personal information.
• Opt out of sale or sharing — we do neither, but the right stands.
• Not be discriminated against for exercising any of these rights.

To exercise a right, email privacy@verdictexchange.com from the address on your account, or use the deletion controls in your account settings. We will verify your identity and respond within 45 days, with one 45-day extension where permitted. An authorized agent may submit a request on your behalf with written permission.

Minors: we do not knowingly collect information directly from anyone under 16. A parent or guardian may submit a claim on behalf of a minor.

We use only cookies and local storage that are strictly necessary to keep you signed in and to keep the platform secure. We do not use advertising or cross-site tracking cookies, so there is nothing to opt out of via a Global Privacy Control signal — but we honor GPC signals regardless.

We will post any updated policy here with a new "last updated" date and, for material changes, notify account holders by email.

Privacy questions or requests: privacy@verdictexchange.com