HeyCounsel Privacy Policy

Last Updated: March 15, 2026

We use technologies such as Sentry, in order to better understand our users’ needs and to optimize this service and experience. These are services that help us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build, maintain and debug our service. They use tracking and session recording technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. They store this information on our behalf in a pseudonymized user profile. For further details, please see Sentry’s privacy policy at https://sentry.io/privacy/.

This privacy notice for Hey Counsel, Inc. (“Company,” “we,” “us,” or “our”), describes how and why we may collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@heycounsel.com.


1. Summary of Key Points

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by reading the full sections below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Hey Counsel, Inc. and the Services, the choices you make, and the products and features you use. If you use the Matching Service, we may also process information about your legal needs, practice areas, bar admissions, and professional qualifications.

Do we process any sensitive personal information? We generally do not process sensitive personal information. However, if you use the Matching Service, the descriptions of legal needs you provide may incidentally contain information that could be considered sensitive. We process such information solely for the purpose of facilitating the Matching Service and treat it with heightened care.

Do we receive any information from third parties? We do not receive any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. Where we rely on your consent to process your information, you have the right to withdraw that consent at any time. We process your information only when we have a valid legal basis to do so, such as your consent, performance of a contract with you, compliance with our legal obligations, or our legitimate interests (where not overridden by your rights).

In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties. If you use the Matching Service, your information may be shared with other users of the Matching Service as described below (e.g., Client User legal need descriptions may be shared with Member Lawyers, and Member Lawyer profile information may be shared with Client Users).

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by emailing us at support@heycounsel.com or by using the rights request mechanisms described in Section 8 below. We will consider and act upon any request in accordance with applicable data protection laws. Under GDPR, we will respond within 30 days. Under CPRA, we will acknowledge receipt within 10 business days and respond within 45 calendar days.

Want to learn more about what Hey Counsel, Inc. does with any information we collect? Review the privacy notice in full.

2. What Information Do We Collect?

Personal information you disclose to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

Information Collected Through the Matching Service

If you use the Matching Service, we may collect additional information depending on whether you are a Client User or a Member Lawyer:

Client User Information. When Client Users use the Matching Service, we collect information submitted through the intake form, which may include: descriptions of legal needs and matters; the type of legal service sought; preferred geographic location of counsel; budget or fee preferences; industry or business type; and any other information the Client User provides to facilitate matching.

Member Lawyer Information. When Member Lawyers create or maintain their profiles for the Matching Service, we collect information including: practice areas and legal specialties; bar admissions and jurisdictions of licensure (self-reported); years of experience; geographic service areas; professional biography and credentials; profile photographs; firm or practice name; and any other information the Member Lawyer provides in their profile or Proposals.

Proposals and Communications. We collect the content of Proposals submitted by Member Lawyers to Client Users through the Matching Service, as well as any messages exchanged between Client Users and Member Lawyers through on-platform messaging features.

Sensitive Information. We generally do not intentionally collect sensitive personal information. However, descriptions of legal needs submitted by Client Users through the Matching Service may incidentally contain information that could be considered sensitive under certain privacy laws (for example, information related to legal disputes, health matters, or financial circumstances). We process such information solely to facilitate the Matching Service and do not use it for any other purpose. We encourage Client Users to provide only the level of detail necessary to facilitate matching and to avoid including unnecessary sensitive personal details in their submissions.

Payment Data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.

Information Automatically Collected. When you visit our Services, we automatically collect certain information about your device and usage. This includes your IP address, browser type and version, device type and identifiers, operating system, referring URLs, pages visited, time and date of visits, and geographic location (country level). We collect this information through Sentry (for error monitoring and debugging) and Google Analytics (for understanding usage patterns). For details on Sentry’s data practices, see https://sentry.io/privacy/. For details on Google Analytics, see https://policies.google.com/privacy.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

3. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. Where we rely on consent, you may withdraw it at any time.

We process your personal information for a variety of reasons, depending on how you interact with our Services. For each processing activity, we identify the lawful basis under applicable law (e.g., contract performance, legitimate interest, consent, or legal obligation), including:

4. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. The categories of third parties we may share personal information with are as follows:

Cloud Computing Services Communication & Collaboration Tools Data Analytics Services Data Storage Service Providers Payment Processors Performance Monitoring Tools Sales & Marketing Tools Website Hosting Service Providers User Account Registration & Authentication Services

Artificial Intelligence and Machine Learning Service Providers. We share information with third-party AI and machine learning service providers (currently Anthropic and OpenAI) that help us operate the Matching Service, including generating algorithmic suggestions. These providers process information under our instructions and in accordance with their own privacy policies and our data processing agreements.

We also may need to share your personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

Advertising and analytics partners. We share device identifiers and browsing data with Google (via Google Ads and GA4) and LinkedIn (via LinkedIn Insight Tag) for targeted advertising. EU/EEA sharing occurs only after consent. US sharing is active by default (opt out anytime). Under certain state laws, this may constitute a “sale” or “sharing” of personal information — see Section 8 for opt-out details.

Other Users. When you share personal information (for example, by posting comments, contributions, or other content to the Services) or otherwise interact with public areas of the Services, such personal information may be viewed by all users and may be accessible to other users of the Services. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile.

Sharing Through the Matching Service

The Matching Service involves specific types of information sharing between users:

Client User Information Shared with Member Lawyers. When a Client User submits a legal need through the Matching Service, information about that legal need (including matter descriptions, legal service type, geographic preferences, and other submitted details) may be shared with Member Lawyers who are suggested as potential matches or who may view the request through the Matching Service. Client Users should be aware that the information they submit may be visible to multiple Member Lawyers.

Member Lawyer Information Shared with Client Users. Member Lawyer profile information (including name, practice areas, bar admissions, geographic locations, professional biography, and other profile details) is made available to Client Users through the Matching Service directory and search results.

Proposals. When a Member Lawyer submits a Proposal to a Client User, the contents of that Proposal are shared with the Client User.

Contact Information. When a Client User and Member Lawyer mutually decide to proceed with a potential engagement, we may share contact information (such as email addresses and phone numbers) between the parties to facilitate direct, off-platform communication. Once contact information has been shared and communications move off-platform, HeyCounsel does not monitor or control those communications.

By using the Matching Service, you consent to the sharing of your information as described in this section. If you do not wish to have your information shared through the Matching Service, you should not use the Matching Service. Member Lawyers who wish to limit the information visible in their profiles may update their profile settings, though certain basic information (such as name and practice areas) is required for participation in the Matching Service.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: We use cookies and similar technologies for operational and advertising purposes, such as maintaining your session, debugging our Services, and advertising our Services.

We use cookies and similar technologies on our Services for the following purposes:

How to manage cookies: Most web browsers allow you to control cookies through their settings. You can typically set your browser to refuse all cookies, accept all cookies, or notify you when a cookie is set. Please note that disabling essential cookies may prevent you from using certain features of our Services. For more information about cookies and how to manage them, visit www.allaboutcookies.org.. Consent model: EU/EEA users must opt in before non-essential cookies activate (via our cookie banner). Where law requires, US users may opt out at any time using our cookie banner, browser settings, or by emailing support@heycounsel.com.

6. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). The following retention periods apply to the categories of personal information we collect:

With respect to the Matching Service, we retain Client User legal need submissions and Member Lawyer Proposals for as long as the associated user accounts remain active, or as otherwise necessary to fulfill the purposes described in this notice. When a Client User or Member Lawyer account is terminated, we will delete or de-identify Matching Service data in accordance with our standard data retention practices, subject to any legal obligations requiring longer retention.

7. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented commercially reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

Data Breach Notification. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law. Where required (such as under GDPR Article 34 or applicable state breach notification laws), we will notify affected individuals without undue delay and provide information about the nature of the breach, the data affected, and the steps we are taking in response. We will also notify relevant regulatory authorities as required by law.

8. Do We Collect Information from Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at support@heycounsel.com.

9. What Are Your Privacy Rights?

In Short: Depending on your location, you may have specific rights regarding your personal information, including the right to access, correct, delete, port, and restrict processing of your data, as well as the right to object to processing and to opt out of certain data uses.

Rights for Individuals in the EU/EEA (GDPR)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:

To exercise these rights, contact us at support@heycounsel.com. We will respond within 30 days of receiving your request. If we need additional time (up to 60 additional days for complex requests), we will inform you of the extension and the reasons.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section “How Can You Contact Us About This Notice?” below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, replying “STOP” or “UNSUBSCRIBE” to the SMS messages that we send, or by contacting us using the details provided in the section “How Can You Contact Us About This Notice?” below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

Account Information: If you would at any time like to review or change the information in your account or terminate your account, you can: Log in to your account settings and update your user account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Matching Service Data: If you are a Client User, you may request deletion of your legal need submissions and any associated Matching Service data by contacting us at support@heycounsel.com. If you are a Member Lawyer, you may update your Matching Service profile at any time through your account settings. Please note that information already shared with other users through the Matching Service (such as Proposals sent to Client Users or legal need descriptions viewed by Member Lawyers) may not be retrievable after sharing.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

If you have questions or comments about your privacy rights, you may email us at support@heycounsel.com.

10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Our site listens for these signals and implements them where required by law.

11. Supplemental Privacy Notice for California Residents

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

This section supplements the rest of this privacy notice and applies solely to California residents. It describes our practices regarding personal information as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CPRA”).

Your Rights Under CPRA. As a California resident, you have the following rights:

How to Exercise Your Rights. To exercise any of the rights described above, you may submit a request by emailing support@heycounsel.com. We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 calendar days. If we need additional time, we will notify you of an extension of up to 45 additional days. We will verify your identity before fulfilling your request. You may also designate an authorized agent to submit a request on your behalf.

If you are under 18 years of age, reside in California, and have a registered account with Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g., backups, etc.).

12. Supplemental Notice for Users in the EU/EEA

If you are located in the European Economic Area, the following additional information applies to you.

Data Controller. The data controller responsible for your personal data is Hey Counsel, Inc., 8605 Santa Monica Boulevard #89054, West Hollywood, CA 90069, USA. Email: support@heycounsel.com.

Lawful Bases for Processing. We process your personal data on the following lawful bases: (a) performance of a contract with you (to provide our Services and the Matching Service); (b) our legitimate interests (to improve our Services, prevent fraud, and ensure security), provided these interests are not overridden by your rights; (c) your consent (for marketing communications and event-based third-party sharing); and (d) compliance with legal obligations.

International Transfers. Your personal data is primarily stored and processed in the United States. When we transfer your personal data from the EEA to the United States, we rely on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission to provide adequate protection for your data. Our third-party service providers (including Stripe, Sentry, Anthropic, and OpenAI) may also process your data in the United States, subject to their own data processing agreements and transfer mechanisms.

EU Representative. Pursuant to Article 27 of the GDPR, Hey Counsel, Inc. is in the process of appointing a representative in the European Union. Until a representative is formally designated, EU/EEA users may direct privacy inquiries to support@heycounsel.com, and we will respond in accordance with applicable GDPR timelines.

13. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

14. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at support@heycounsel.com or contact us by post at: 8605 Santa Monica Boulevard #89054, West Hollywood, CA, 90069

15. How Can You Review, Update, or Delete the Data We Collect from You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please email support@heycounsel.com.

Under GDPR, we will respond to your request within 30 days. Under CPRA, we will acknowledge your request within 10 business days and respond substantively within 45 calendar days. We may extend these timelines where permitted by law, and will notify you if we do so.