Privacy Policy

This Privacy Policy describes how Attorney Armor ("Attorney Armor", "we", "us") collects, uses, and safeguards information when you use our cybersecurity assessment platform. This page is maintained by Attorney Armor and reflects our current practices; it is not a certification or legal advice.

Information we collect

• Account data — name, work email, firm, and authentication identifiers.
• Assessment data — domains, hosts, and configuration metadata you submit for scanning.
• Billing data — processed by Stripe; we never store full card numbers.
• Usage data — product telemetry, device and browser metadata, and security logs.
• Cookies — strictly necessary cookies for authentication and security, plus optional analytics cookies you can decline via the cookie banner.

How we use information

• To operate, secure, and improve the Attorney Armor platform.
• To deliver assessment results, reports, and account communications.
• To meet legal, audit, and contractual obligations.

Sharing & subprocessors

We do not sell or "share" (as defined under CPRA) personal information for cross-context behavioral advertising. We share data only with vetted subprocessors that support hosting, authentication, payments, and analytics, and with authorities where legally required. See the current list in our Data Processing Addendum.

Retention

Assessment artifacts are retained for the life of your subscription plus 90 days, unless you request earlier deletion. Billing records are retained as required by law.

Your rights (GDPR / UK GDPR)

If you are in the EEA, UK, or Switzerland, you have rights of access, rectification, erasure, restriction, portability, and objection. Our lawful bases are contract performance, legitimate interests in securing the platform, and consent for optional cookies. You may lodge a complaint with your local supervisory authority. Attorney Armor has not yet appointed an EU/UK Article 27 representative; EEA/UK customers should contact us directly for now.

US state privacy rights (CA, CO, CT, VA, UT, TX & others)

Depending on your state, you may have rights to know, access, correct, delete, port, opt out of targeted advertising or sale/sharing, and limit use of sensitive personal information. Attorney Armor does not sell or share personal information and does not engage in targeted advertising. To exercise any right, contact our privacy team. You may also designate an authorized agent. We will not discriminate against you for exercising a right.

"Do Not Sell or Share My Personal Information"

We do not sell or share personal information. If our practices ever change, this section and a footer link will be updated to provide an opt-out.

Children

The service is intended for businesses and is not directed to children under 16. We do not knowingly collect data from children.

International transfers

Data may be processed in the United States and other jurisdictions. Where required, we rely on Standard Contractual Clauses and the UK Addendum.

Changes

We will post updates on this page and revise the "Last updated" date above. Material changes will be communicated to account administrators.

Contact

Attorney Armor · Mailing address available on request.
Privacy questions: contact us.