ClassAct Privacy Policy

1. Introduction

This Privacy Policy describes how ClassAct Technologies Inc. ("ClassAct," "we," "us," or "our") collects, uses, and protects information when you use our website (https://classact.app) and mobile application ("Services"). By accessing or using the Services, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect the following types of information in connection with your use of the Services:

• Account Information: Name, email address, phone number, and firm affiliation.
• Usage Data: Device identifiers, log data, and analytics metrics.
• Uploaded Content: Documents, photos, and information submitted through intake forms or uploads.
• Mobile App Permissions: Camera, photo library, and file access for document upload; notification settings for case updates.
• Information from Third Parties: We may also receive limited plaintiff or case information from law firms or trusted partners acting on your behalf, consistent with this Policy.

3. How We Use Information

We process collected information to operate, maintain, and improve our Services, including to:

• Facilitate plaintiff intake, document collection, and case tracking.
• Communicate with users about case updates and account activity.
• Ensure security, compliance, and fraud prevention.
• Analyze usage to enhance performance and reliability.

We process personal information only as necessary to perform our contractual obligations, comply with legal requirements, or for our legitimate business interests such as platform improvement and security.

4. HIPAA-Aligned Safeguards

ClassAct uses administrative, technical, and physical safeguards consistent with HIPAA standards, including encryption at rest and in transit, access controls, and audit logging. We maintain Business Associate Agreements (BAAs) with any partners who process health-related or personally identifiable information in support of the Services.

5. Data Sharing and Subprocessors

We do not sell personal data. We share information only with trusted service providers who assist in hosting, communications, analytics, or support operations. Each subprocessor is contractually bound to confidentiality and data protection standards. A current list of subprocessors is available upon request at support@classact.app.

6. Data Retention

We retain user data for the duration of a firm's active subscription and as required by law. Upon termination or deletion request, we securely delete or anonymize data within 30 days unless otherwise legally required.

7. Your Rights and Access Requests

If you wish to access, correct, export, or delete your personal information, please email privacy@classact.app. We will respond to all verified requests within 30 days. For security, we may require identity verification before fulfilling a request.

8. Data Security

We use industry-standard security practices including encryption, intrusion detection, and role-based permissions to protect stored data. No system is completely secure; users are responsible for safeguarding their login credentials and reporting any suspected unauthorized access immediately.

9. Children's Privacy

Our Services are not directed to children under 18. We do not knowingly collect data from minors. If we learn that a child under 18 has provided personal information, we will delete it promptly.

10. Changes to this Policy

We may update this Privacy Policy periodically. The revised version will be effective upon posting to our website, with the updated date noted above.

11. Contact Us

For questions about this Privacy Policy or our data practices, please contact:

ClassAct Technologies, Inc.
286 Saint Johns Pl., #2C
Brooklyn, NY 11238
Email: support@classact.app
Website: https://classact.app

12. Governing Law

This Policy and any disputes arising under it are governed by the laws of the State of Delaware, without regard to conflicts of law principles.