Data Usage & Buyer Responsibility Policy
How partners may and may not use consumer information delivered by TortMatics.
Effective Sep 23, 2026
Permitted use
Partner may use a lead only to evaluate the consumer's request for the campaign they selected, to contact that consumer about it within the scope of their consent, and to represent them if they agree.
Prohibited use
- No resale, sharing, co-registration, or transfer of leads to anyone else, including affiliated firms not named on the TortMatics partner list.
- No use for other campaigns, marketing lists, data enrichment, or analytics profiles.
- No uploading of consumer data to advertising platforms (no Customer Match, custom audiences, or lookalikes), especially for health-related leads.
- No autodialed, prerecorded, or AI-voice calls or texts unless the lead carries TCPA consent naming Partner.
Contact rules
- Call or text only 9 a.m.–8 p.m. in the consumer's local time, Monday–Saturday; no more than three attempts in 24 hours.
- Scrub against the National DNC Registry, state lists, and your internal list at least every 31 days, and check the Reassigned Numbers Database.
- Identify your firm at the start of every contact. Never imply you are TortMatics, a court, or a government agency.
- Honor opt-outs made by any reasonable means within 24 hours and report them to TortMatics; retain Virginia STOP requests for 10 years.
- Respect solicitation blackout periods: no targeted outreach within 30 days of an accident or disaster where state rules require it (including Florida and New York; 31 days in Texas), or within 45 days of an aviation or rail disaster under federal law.
- Intake staff must not give legal opinions until a lawyer is involved, and must be supervised by a lawyer.
Retention and deletion
- Delete leads you don't retain as clients within 90 days of delivery, except consent records you must keep for five years.
- Keep Washington and Nevada sale authorizations for six years.
- Act on deletion, access, correction, and opt-out requests TortMatics forwards within 10 business days, and confirm completion.
Security and incidents
Protect lead data with encryption in transit and at rest, multi-factor authentication, and least-privilege access. Notify TortMatics at privacy@tortmatics.com within 48 hours of discovering any unauthorized access to TortMatics-sourced data.
Enforcement
Violations allow TortMatics to suspend delivery immediately and terminate for cause.