Privacy Policy

1. Introduction

Terms.Law ("we," "our," or "us") is operated by Sergei Tokmakov, Esq., a California-licensed attorney (Bar #279869). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at terms.law and use our services, including our AI-powered document generators, intake forms, and consultation scheduling.

By using our website, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use our website.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily submit through our website, including:

• Intake form submissions: Name, email address, phone number, and case or matter description when you submit a contact or intake form.
• Consultation scheduling: Name, email address, and selected appointment time when you book a consultation through our scheduler integration.
• Document generator inputs: Information you enter into our AI-powered tools (demand letter generators, contract generators, and other document generators) to produce legal documents.
• Communications: Any messages you send to us via email or contact forms.
• Electronic signing: If you are invited to sign an engagement letter or another document electronically through a private signing workroom, we collect the details you enter for the document (such as your full legal name, mailing address, and employer name), the email address we verify before you sign, your typed signature and consent to electronic records, and the date, time, network address, and browser information at the moment of signing. These become part of the signed record.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies and similar technologies:

• Google Analytics (ID: G-901N2Y3CDZ): We use Google Analytics to collect usage data such as pages visited, time on site, bounce rate, referring URLs, browser type, device type, screen resolution, and approximate geographic location (city/region level). Google Analytics uses cookies to track interactions. This data is aggregated and does not personally identify you.
• Server logs: Our hosting and infrastructure provider, Cloudflare, automatically collects server logs that may include your IP address, browser user agent, operating system, referring page, pages requested, and timestamps.
• Cloudflare data: We host and serve this website on Cloudflare (static hosting on Cloudflare R2 and application logic on Cloudflare Workers) and use Cloudflare for DNS, CDN, and security. Cloudflare may process IP addresses and related metadata to provide hosting, DDoS protection, bot detection, performance optimization, and web application firewall services.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your legal inquiries and evaluate potential matters for representation.
• To schedule and conduct consultations via scheduler.
• To generate legal documents based on your inputs through our AI-powered tools.
• To communicate with you about your inquiry, appointment, or our services.
• To analyze website traffic and usage patterns to improve our website and services.
• To maintain the security and integrity of our website.
• To comply with legal obligations, court orders, and professional conduct rules.

4. AI-Powered Tools and Chat Assistant

Our website features AI-powered tools, including demand letter and contract generators and an AI chat assistant (the "AI Legal Analyst"). When you use these tools:

• The information you enter is processed in real time to generate your requested document or response. To generate responses, the AI chat assistant and some tools send your inputs to a third-party AI provider (currently OpenAI) to produce the output, subject to that provider's terms.
• We do not use your inputs to train or fine-tune AI models.
• Generated documents are produced for your personal use and are not persistently stored on our servers after generation unless you affirmatively submit them through a separate intake form, chat handoff, or consultation request.
• A log of an AI chat conversation, together with any email address or matter description you provide in it, may be retained for a limited period (see Section 8) so we can operate the service, respond to your inquiry, and follow up. When you ask us to follow up, we may send ourselves a notification by email or messaging so your request is not missed.
• These tools provide general, attorney-supervised legal information and starting-point templates. They do not constitute legal advice, and their use does not create an attorney-client relationship.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for the following purposes:

• Analytics cookies: Google Analytics cookies (_ga, _gid, _gat) to understand how visitors interact with our site. These cookies expire after 14 months or sooner.
• Security cookies: Cloudflare cookies (__cflb, __cf_bm) for security, bot detection, and load balancing.
• Third-party cookies: scheduler may set cookies when you interact with our scheduling widget.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling cookies may affect some website functionality. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

6. Third-Party Services

We use the following third-party services that may collect or process your data according to their own privacy policies:

• Google Analytics (web analytics): Google Privacy Policy
• Cloudflare (website hosting on Cloudflare R2 and Workers, DNS, CDN, and security): Cloudflare Privacy Policy
• OpenAI (AI processing for our chat assistant and document generators): OpenAI Privacy Policy
• Resend (transactional email used to deliver inquiry and lead notifications to us): Resend Privacy Policy
• Telegram (internal alerts to us about new inquiries): Telegram Privacy Policy
• Scheduling and payment tools: If you book a paid session or pay a fee, your name, email, selected time, and payment details are handled by the applicable third-party scheduling or payment provider (for example, PayPal) under that provider's own privacy policy. We do not receive or store full payment card numbers.

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

7. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: With the third-party vendors described in Section 6, solely as necessary to operate our website and deliver our services.
• Legal requirements: When required by law, subpoena, court order, or governmental regulation.
• Protection of rights: To protect the rights, safety, or property of Terms.Law, our users, or the public.
• Professional obligations: As required by the California Rules of Professional Conduct or the California Bar.
• Business transfers: In connection with a merger, acquisition, or sale of assets, provided the successor entity agrees to honor this Privacy Policy.

8. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy:

• Intake and matter data: Retained for the duration of any resulting attorney-client relationship and, after a matter concludes, for a limited period consistent with our professional record-keeping obligations, generally at least five years. Client trust-account and related financial records are retained for at least five years as required by the California Rules of Professional Conduct (Rule 1.15). Your file belongs to you: on request, and subject to any records we are required to retain, we will return or delete your documents at the close of the matter.
• Electronic signature records: Documents executed through our electronic signing workroom, together with their signature, consent, and verification records (including the email verification, date and time, and network address at signing), are retained for as long as reasonably necessary to prove and administer the agreement, generally for the duration of the engagement plus the matter-record retention period described above.
• AI chat assistant logs: Conversation logs from the AI chat assistant, including any email address or matter description you provide in the chat, are retained for a limited period, currently about 90 days, then automatically deleted, unless the inquiry becomes a matter, in which case the retention above applies.
• Analytics data: Google Analytics data is retained according to our configured retention period (currently 14 months).
• Server logs: Retained by Cloudflare according to its standard retention policies.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• HTTPS/TLS encryption for all data transmitted between your browser and our website.
• Cloudflare security services including DDoS protection, web application firewall, and bot mitigation.
• Access controls limiting who can view personal information submitted through our website.
• Secure hosting on Cloudflare's infrastructure (Cloudflare R2 storage and Cloudflare Workers).

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal and professional retention obligations.
• Opt-out of tracking: Opt out of Google Analytics tracking using the Google Analytics Opt-out Add-on.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal information is collected, used, shared, or sold.
• The right to delete personal information held by us (subject to exceptions).
• The right to opt out of the sale or sharing of personal information.
• The right to non-discrimination for exercising your privacy rights.
• The right to correct inaccurate personal information.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA. To exercise any of your rights, please contact us using the information in Section 14.

11. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Because there is no accepted standard for how to respond to DNT signals, our website does not currently respond to DNT browser signals. However, you can opt out of Google Analytics tracking as described in Section 5.

12. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated "Last Updated" date. Your continued use of the website after changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically.

14. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us: