Privacy Policy

Data Controller & Introduction

AttorneyQnA is an online attorney directory and legal Q&A platform operated by Wild Web Ventures LLC, a New Mexico limited liability company ("we," "us," "our"). We are the data controller responsible for personal data collected through this website.

We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and the rights you have over it.

By using AttorneyQnA, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

Information We Collect

We collect information you provide directly to us, as well as information generated automatically when you use the Service:

Information you provide:

• Identity data: name, email address, phone number.
• Account credentials: username, hashed password.
• Attorney profile data: photo, biography, practice areas, education, bar admissions, office locations, and spoken languages.
• Communications: questions you post publicly, answers you submit, messages sent to attorneys, and support inquiries.
• Payment data: billing name and address, subscription plan. Card details are processed directly by our payment processor and never stored on our servers.

Information collected automatically:

• Usage data: pages visited, search queries, clicks, time on page, and referring URL.
• Device & network data: IP address, browser type and version, operating system, and device type.
• Cookies & similar technologies: see our Cookie Policy for full details.

How We Use Your Information

We use the information we collect for the following purposes:

• To create, authenticate, and maintain your account.
• To display and manage attorney and firm profiles.
• To operate the Q&A system and connect users with licensed attorneys.
• To process subscription payments and manage billing.
• To send transactional emails (account verification, password reset, subscription receipts).
• To send service-related announcements and, where you have opted in, product updates.
• To detect fraud, abuse, and violations of our Terms of Use.
• To monitor and improve Service performance, reliability, and features.
• To comply with applicable U.S. laws and respond to lawful requests from authorities.

Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contractual necessity: Processing required to deliver the Service you have signed up for (account management, subscription billing).
• Legitimate interests: Fraud detection, security monitoring, platform analytics, and improving the Service, provided these interests are not overridden by your rights.
• Legal obligation: Compliance with applicable laws, regulatory requirements, and lawful legal processes.
• Consent: Marketing communications and non-essential cookies, where we rely on your opt-in consent, which you may withdraw at any time.

Sharing of Information

We do not sell your personal data. We share your information only in the following circumstances:

• With attorneys you contact: When you send a message through an attorney's profile, your name and message are shared with that attorney.
• With service providers: We engage vetted third-party providers for hosting, email delivery, payment processing, and analytics. These providers access data only as necessary to perform their services and are bound by confidentiality obligations.
• With analytics services: Aggregated, anonymized usage data may be shared with analytics tools to help us understand how the Service is used.
• For legal compliance: We may disclose information when required by law, court order, subpoena, regulatory request, or to protect the rights, property, or safety of Wild Web Ventures LLC, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service and comply with our legal obligations. Specific retention periods:

• Active accounts: Retained indefinitely while the account is active.
• Inactive accounts: Accounts with no login activity for 36 consecutive months are flagged for deletion after a 30-day notice period.
• Financial records: Retained for a minimum of 7 years to comply with U.S. tax and accounting regulations.
• Legal hold: Data subject to a legal hold or regulatory inquiry is retained for the duration of the hold.

Upon account deletion, your personal data is removed from active databases within 30 days. Residual copies in backups may persist for up to 90 additional days before being purged.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

California residents (CCPA): You have the right to know what personal information we collect, disclose, or sell; the right to delete personal information; and the right to non-discrimination for exercising your rights. We do not sell personal information.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or such shorter period as required by applicable law). We may need to verify your identity before processing your request.

Security Measures

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• TLS/HTTPS encryption for all data in transit.
• bcrypt password hashing — plaintext passwords are never stored.
• Role-based access controls limiting who can access personal data internally.
• Regular security reviews and vulnerability scanning.
• Server-side firewall and intrusion detection.

No security system is impenetrable. We cannot guarantee absolute security, but we work continuously to protect your data. If you become aware of a security issue, please report it immediately to [email protected].

Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at [email protected] and we will take immediate steps to remove that information.

International Data Transfers

Wild Web Ventures LLC is headquartered in the United States. If you are accessing the Service from outside the United States — including from the European Economic Area, United Kingdom, or Canada — your personal data will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For transfers from the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses approved by the European Commission, or other lawful transfer mechanisms in effect at the time of transfer.

Cookies & Tracking

We use cookies and similar tracking technologies to operate the Service, remember your preferences, and understand how visitors interact with our platform. For a detailed breakdown of the specific cookies we use, their purposes, and how to manage them, please review our Cookie Policy.

You can control non-essential cookies through your browser settings or by adjusting your cookie preferences at any time.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by:

• Posting a notice on the Service for at least 30 days before the changes take effect.
• Sending an email notification to the address associated with your account (for material changes).

The "Last updated" date at the top of this page reflects when the most recent revision was made. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

Contact Us

For privacy-related questions, to exercise your data rights, or to report a concern, please contact our privacy team:

We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 days. For EEA residents: if you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.