We take reasonable steps to protect user privacy consistent with the guidelines set forth in this Policy and with applicable U.S. state and federal laws. WE TAKE THESE PRECAUTIONS IN AN EFFORT TO PROTECT YOUR INFORMATION AGAINST SECURITY BREACHES. HOWEVER, THIS IS NOT A GUARANTEE THAT SUCH INFORMATION MAY NOT BE ACCESSED, DISCLOSED, ALTERED, OR DESTROYED BY BREACH OF SUCH FIREWALLS AND SECURE SERVER SOFTWARE. BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU UNDERSTAND AND AGREE TO ASSUME THESE RISKS.
In this Policy, “user” or “you” means any individual using the Service. This Policy forms part of and is incorporated into our Terms of Service published at http://www.xira.com/tos (the “Terms of Service”).
• To Whom Does this Policy Apply?
Clients: “Clients” are users who use the Service for the purpose of connecting with attorney users (“Attorneys”), and who may engage Attorneys for the provision of legal services through the Service.
Attorneys: “Attorneys” are attorney users who use the Service to identify prospective Clients and for facilitation of the provision of legal services they provide to Clients.
• What Information Do We Collect?
Limited Personal Information Collected from All Users: All information which can be used to personally identify an individual is referred to in this Policy as “Personal Information.” We may collect certain Personal Information about you in connection with your use of the Service. If you communicate with us by email but do not otherwise register to use the Service, we will collect your email address.
Attorney Users: If you register to use the Service as an Attorney, we will collect a username and password from you. We will also collect information through our online registration form, such as your name, email address, mailing address, phone number, photograph and optional video recording, and additional information about your professional background, including bar registration number and states of admission (“Attorney Profile Information”). Once XIRA has verified bar admission and attorney registration information, Attorneys may provide additional professional information to their XIRA Attorney Profile Information including practice areas and educational information, and may link their XIRA profile to social media profiles including those on Facebook and LinkedIn, and import calendar information from third party calendar applications. XIRA will not view, collect or download any information from your calendar and will only access it to determine if your calendar shows you as free or busy. Xira will not modify your calendar in any way except to add, reschedule or cancel meetings and events scheduled on Xira. If you choose to link your XIRA profile to your social media profiles, you understand that the information these sites provide to XIRA is governed by their privacy policies and your account settings on those sites. If you provide documents which include Personal Information in connection with your provision of services through the Service (“Attorney Documents”), those documents will be stored with a third-party contractor engaged to provide services on our behalf (“Contractor”) contracted by XIRA for hosting services and shared with the XIRA users you have designated, if any. You may also provide information about your Clients to the Service which includes Personal Information.
Client Users: If you register to use the Service as a Client, we may collect information including your name, email address, mailing address, phone number, username and password. If you directly disclose Personal Information or personally sensitive data through public areas of the Service or messages with other users, this information may be collected and used by others. If you provide documents which include Personal Information through the Service in connection with your receipt of services through the Service (“Client Documents”), those documents will be stored with a third-party Contractor contracted by XIRA for hosting services and shared with the XIRA users you have designated, if any. If you contact XIRA or another user and disclose additional Personal Information, we may store that information.
Web Tracking Information and Cookies: We and our Contractors may use web tracking technologies such as cookies, pixel tags and clear GIFs in order to operate the Service efficiently and to collect data related to usage of the Service. Such collected data (“Web Tracking Information”) may include the address of other websites you have visited, the type of browser you are using, your Internet Protocol (IP) address, device model, device ID and other unique device identifiers, what pages in the Service you visit and what links you clicked on, and whether you opened email communications we sent to you. We and our Contractors may also use web tracking technologies that are placed in web pages on the Service or in email communications to collect information about actions that you take when you interact with the Service or such email communications. We do not correlate Web Tracking Information to individual user Personal Information. Some Web Tracking Information may include data, such as IP address data, that is unique to you. We use this information not to identify individual users, but to analyze trends, administer the Service, track users’ movements around the Service, and gather demographic information about our user base as a whole which provides us with the ability to determine aggregate information about our user base and usage patterns.
Payment Information: If you make transactions through the Service, you will be required to provide payment information, such as your credit or debit card number and other card information; other account and authentication information; and billing and contact details, to help process your transactions as further detailed in User Payment Information below.
• How Do We Use the Information We Collect?
Personal Information: We will use and store your Personal Information for the purpose of delivering the Service, and to analyze and enhance the operation of the Service. We may also use your Personal Information for the internal operational and administrative purposes of the Service, including to facilitate provision and receipt of services between Attorneys and Clients. If you become a registered User, we will use your Personal Information including your name and e-mail address to communicate with you regarding the functionality of the Service, including to send you messages regarding service requests and new messages in your account from other Users.
User Payment Information: If you make or receive payments on or through the Service, we may use Personal Information that you provide for one-time and recurring billing purposes according to the terms pertaining to such payment. If we (or our payment processor) have trouble processing a payment, such information may be used to contact you. Payment card information is sent in encrypted format and is used only to send to our payment card processor, for the purposes of collecting or remitting payment for services ordered. We do not make this information visible to anyone other than our payment card processor and do not communicate it over a non-encrypted connection. The full payment card number is not seen by anyone inside XIRA, once entered and submitted, except by the payment card processor for the purposes of authorizing, clearing and reversing charges to your payment card.
Web Tracking Information: We use Web Tracking Information to administer the Service and to understand how well the Service is working, to store your user preferences, and to develop statistical information on usage of the Services. This allows us to determine which features visitors like best to help us improve the Service, to personalize your user experience, and to measure overall effectiveness.
Aggregate and De-Identified Information: We will also create statistical, aggregated and/or de-identified data relating to our users and the Service for analytical and commercial purposes. Aggregated and/or de-identified data is derived from Personal Information but in its aggregated and/or de-identified form, it does not duplicate or reveal any Personal Information or relate to or identify any individual. This data is used to understand our customer base and to develop, improve and market our services.
Promotional Communications: If you register and provide your email address, we may send you administrative and promotional emails.
Account Closure: If any of your account information appears to be incorrect, please contact us and let us know. If you close your account, we will delete any Personal Information associated with your account, including Client information, except for information that we are required to retain for our business records. Other information you submitted to us that is not associated with you personally may not be deleted.
• What Information Do We Disclose to Third Parties?
Personal Information. We will not disclose your Personal Information to any third parties except as follows:
(i) If you are a Client and engage an Attorney to perform services on your behalf via the Service, we may disclose your name, email address, other contact information, and Client Documents you submit through the Service related to the matters for which you have engaged the Attorney, to such Attorney.
(ii) If you are an Attorney, we may disclose your Attorney Profile Information to Clients who may engage or have engaged you to perform services on their behalf, and, with your permission, we may disclose Attorney Documents which include your Personal Information to your Clients.
(iii) To third-party Contractors, such as analyzing data and usage of the Service, hosting and operating the Service, providing marketing, payment processing or support and maintenance services for the Service or providing customer service. We enter into agreements with all Contractors that require Contractors to use the Personal Information they receive only to perform services for us.
(iv) When we have your consent to share the information.
Web Tracking Information: We disclose Web Tracking Information to Contractors, in order to analyze the performance of the Service and the behavior of users, and to operate and improve the Service.
Aggregate and De-Identified Information: We may disclose aggregated and/or de-identified data that does not contain Personal Information to any third parties, such as Contractors, business partners, marketers, and funding sources, in order to describe our business and operations or to notify you about products and services that may be relevant to you.
Additional Disclosures: We reserve the right to disclose any information we collect in connection with the Service, including Personal Information: (a) to any successor to our business as a result of any merger, acquisition, asset sale or similar transaction; (b) to protect against or prevent fraud or unauthorized transactions; and (b) any law enforcement, judicial authority, or governmental or regulatory authority, to the extent required by law or if in our reasonable discretion disclosure is necessary to enforce or protect our legal rights or to protect third parties.
• Privacy Settings/Opt Out
If you would like your name and email address permanently removed from our database, please contact us at email@example.com. We will promptly delete your name and email address and you will no longer receive email from XIRA. Your removal from the mailing list or database will not remove data you have submitted to us or records of past use of the Service, nor delete information stored in our data backups and archives. Such data will be maintained and/or deleted in the ordinary course of XIRA’s business.
If you wish to opt out of promotional emails (but would not like to have your information permanently removed from our database), you may do so by following the “unsubscribe” instructions in the email, or by modifying your account settings. All users receive administrative emails, and so you cannot opt out of them while you remain registered.
If you have provided Client Documents or Attorney Documents to XIRA, you may remove those documents from the Service at any time. Your removal of such documents will not delete information stored in our third-party storage Contractor’s data backups and archives. Such information will be deleted in the ordinary course of the storage Contractor’s business.
Security: We use reasonable security precautions to protect the security and integrity of your Personal Information in accordance with this Policy and applicable law. However, no internet transmission is completely secure, and we cannot guarantee that security breaches will not occur. Without limitation of the foregoing, we are not responsible for the actions of hackers and other unauthorized third parties that breach our reasonable security procedures.
Minors: XIRA does not knowingly collect or maintain personally identifiable information from persons under 18 years of age, and no part of the Service is directed at persons under 18. If you are under 18 years of age, then please do not use the Service. If XIRA learns that personally identifiable information of persons less than 13 years of age has been collected, then XIRA will take the appropriate steps to delete this information. To request the deletion of any such information, please contact us at firstname.lastname@example.org.
Your California Privacy Rights: On September 27, 2013, California enacted A.B. 370, amending the California Online Privacy Protection Act to require website operators like us to disclose how we respond to “Do Not Track Signals”; and whether third parties collect personally identifiable information about users when they visit us.
(2) We do not authorize the collection of personally identifiable information from our users for third party use through advertising technologies.
California Civil Code Section § 1798.83 permits users of our Website that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@xira.. Please note that we are only required to respond to one request per user each year.
• Contact Information
Effective Date of this Policy: June 18, 2020