Legal
Privacy Policy
Last updated: July 29, 2026
1. Who we are
GraySuit, LLC (“GraySuit,” “we,” “us”) operates an online directory that helps members of the public find and connect with verified, independent attorneys in the states where GraySuit operates. GraySuit is not a law firm, is not a lawyer referral service, and does not provide legal advice. This policy covers the graysuitlegal.com website and the GraySuit mobile applications (iOS and Android), which collect and use information in the same ways described here.
2. What information we collect
Attorneys
- Bar number and bar status (used to verify your license).
- Identity and contact details (name, firm, email, phone, office address).
- Billing details, processed by our payment processor (we never store full card numbers).
- Practice metrics — practice areas, structured client ratings, and response times.
- Documents you upload, such as credential PDFs.
Clients & the public
- Contact details you provide (name, email, phone).
- High-level matter information and opposing-party names you submit through intake or booking forms, including your answers to the guided plain-English questions and the ZIP code you enter when searching (kept intentionally limited).
- Consultation booking details (requested times, the attorney involved).
- Usage and lookup logs — pages viewed, searches run, IP address, and device/browser information — used for security and to operate the service.
3. How we use information
We use the information above to:
- Display attorney listings that match the search filters you choose, and deliver your inquiry to the attorney you select.
- Pass your inquiry details to the attorney you contact so they can run their own conflict-of-interest check.
- Process secure transactions and manage attorney subscriptions.
- Verify attorney credentials and bar standing.
- Maintain safety, fraud-prevention, and audit logs.
- Operate, secure, and improve the service.
4. What we share
- Between parties during a match. When you submit an inquiry, intake, or booking to an attorney, the information you provide is shared with that attorney so they can evaluate and respond to your matter.
- Payment processor. Billing and transaction data is processed by Stripe under its own terms; GraySuit does not store full card numbers.
- Service providers. We use vendors for hosting, database/authentication, email, and calendar scheduling, who process data only on our instructions.
- Bot protection (Cloudflare Turnstile). To protect our sign-in forms from automated abuse, we use Cloudflare Turnstile, which silently verifies that a visitor is human — no puzzle is shown. When you submit a sign-in form, Turnstile processes client-side signals such as your IP address, user-agent and browser characteristics, and TLS fingerprint. Cloudflare states it cannot directly identify individuals from these signals, and they are used solely to distinguish humans from bots. This processing is governed by Cloudflare's Turnstile Privacy Addendum.
- Legal & safety. We may disclose information where required by law or to protect the rights and safety of users and the public.
- We do not sell your personal information.
6. Data security & retention
We apply administrative and technical safeguards, including access controls and encryption in transit, and restrict database access. We retain information for as long as needed to provide the service and meet legal, professional-responsibility, and record-keeping obligations, then delete or de-identify it.
7. Your choices
You may request access to, correction of, or deletion of your personal information, subject to our legal and professional-responsibility obligations. To make a request, contact us using the details below.
8. Contact
Questions about this policy? Email graysuitlegal@gmail.com. See also our Terms of Service.