Legal

Privacy Policy

Last updated: July 29, 2026

1. Who we are

GraySuit, LLC (“GraySuit,” “we,” “us”) operates an online directory that helps members of the public find and connect with verified, independent attorneys in the states where GraySuit operates. GraySuit is not a law firm, is not a lawyer referral service, and does not provide legal advice. This policy covers the graysuitlegal.com website and the GraySuit mobile applications (iOS and Android), which collect and use information in the same ways described here.

2. What information we collect

Attorneys

  • Bar number and bar status (used to verify your license).
  • Identity and contact details (name, firm, email, phone, office address).
  • Billing details, processed by our payment processor (we never store full card numbers).
  • Practice metrics — practice areas, structured client ratings, and response times.
  • Documents you upload, such as credential PDFs.

Clients & the public

  • Contact details you provide (name, email, phone).
  • High-level matter information and opposing-party names you submit through intake or booking forms, including your answers to the guided plain-English questions and the ZIP code you enter when searching (kept intentionally limited).
  • Consultation booking details (requested times, the attorney involved).
  • Usage and lookup logs — pages viewed, searches run, IP address, and device/browser information — used for security and to operate the service.

3. How we use information

We use the information above to:

  • Display attorney listings that match the search filters you choose, and deliver your inquiry to the attorney you select.
  • Pass your inquiry details to the attorney you contact so they can run their own conflict-of-interest check.
  • Process secure transactions and manage attorney subscriptions.
  • Verify attorney credentials and bar standing.
  • Maintain safety, fraud-prevention, and audit logs.
  • Operate, secure, and improve the service.

4. What we share

  • Between parties during a match. When you submit an inquiry, intake, or booking to an attorney, the information you provide is shared with that attorney so they can evaluate and respond to your matter.
  • Payment processor. Billing and transaction data is processed by Stripe under its own terms; GraySuit does not store full card numbers.
  • Service providers. We use vendors for hosting, database/authentication, email, and calendar scheduling, who process data only on our instructions.
  • Bot protection (Cloudflare Turnstile). To protect our sign-in forms from automated abuse, we use Cloudflare Turnstile, which silently verifies that a visitor is human — no puzzle is shown. When you submit a sign-in form, Turnstile processes client-side signals such as your IP address, user-agent and browser characteristics, and TLS fingerprint. Cloudflare states it cannot directly identify individuals from these signals, and they are used solely to distinguish humans from bots. This processing is governed by Cloudflare's Turnstile Privacy Addendum.
  • Legal & safety. We may disclose information where required by law or to protect the rights and safety of users and the public.
  • We do not sell your personal information.

5. Cookies & local storage

In plain English:GraySuit uses only the storage it needs to sign you in, keep the site secure, and remember the choices you make on this page. If you allow it, we also remember your selected state so you don't have to pick it every visit. We run no advertising, analytics, or tracking, and we never sell or share your personal information. Non-essential storage is off until you turn it on, and you can change your mind anytime: .

What we store

ItemPurposeCategoryPartyDuration
Supabase auth session (e.g. sb-…-auth-token)Keeps you signed in after you log in.Strictly necessaryFirst-partySession + token refresh; cleared on sign-out
Cloudflare Turnstile (may set cf_*)Confirms you're human on sign-in forms (no puzzle). Loads only when you submit.Strictly necessary (security)Third-party (Cloudflare)Short-lived
gs_cookie_consent (local storage)Remembers your cookie choices on this page.Strictly necessaryFirst-partyUntil you clear it / a policy update re-prompts you
gs_embedded (session storage)Detects the in-app browser to adjust the layout. Not tracking.Strictly necessary (session)First-partyCurrent browser session
graysuit_selected_state / currentLegalJurisdiction (local storage)Remembers your selected state across visits.Functional (opt-in)First-partyUntil you clear it or withdraw functional consent
Stripe Checkout cookiesProcessing your payment — set on Stripe's own hosted checkout pages, not on GraySuit.PaymentThird-party (stripe.com)Per Stripe's policy

Categories

  • Strictly necessary— sign-in, security/anti-abuse, the in-app-browser layout flag, and remembering your cookie choices. Always on; the site can't work without them, so they aren't toggleable.
  • Functional — remembering your selected state across visits. Off by default; turn it on under “Your privacy choices.” If you leave it off, the site still works — you'll just pick your state again.
  • Analytics & advertisingnone today.GraySuit runs no analytics, advertising, or tracking. If we ever add any, it will be off until you opt in here, and we'll re-prompt you first.

California (CCPA/CPRA)

GraySuit does not sell or shareyour personal information (including for cross-context behavioral advertising), so no separate “Do Not Sell or Share My Personal Information” process is required. You can still review and change your storage choices anytime via .

Cookie policy version 1. A material change increases this version and asks you to review your choices again.

6. Data security & retention

We apply administrative and technical safeguards, including access controls and encryption in transit, and restrict database access. We retain information for as long as needed to provide the service and meet legal, professional-responsibility, and record-keeping obligations, then delete or de-identify it.

7. Your choices

You may request access to, correction of, or deletion of your personal information, subject to our legal and professional-responsibility obligations. To make a request, contact us using the details below.

8. Contact

Questions about this policy? Email graysuitlegal@gmail.com. See also our Terms of Service.