Privacy Policy

Who we are

TortMatics (tortmatics.com) is a brand of FusionByte Media LLC (“TortMatics,” “we,” “us”). We publish information about legal claims and, when you ask, connect you with participating law firms and intake partners. We are not a law firm. For privacy questions, email privacy@tortmatics.com or write to FusionByte Media LLC, 5830 E 2nd St, Casper, Wyoming 82609, US.

If you live in Washington, Nevada, or Connecticut, or share health information with us, also read our Consumer Health Data Privacy Policy, which controls for that data.

What we collect and where it comes from

We collect information directly from you, from your device, and from service providers that help us run the site.

• Identifiers: name, email address, phone number, IP address, and a reference number we assign.
• Location: state and ZIP code you enter, and approximate location inferred from IP address. We do not collect precise geolocation.
• Your request: answers to screening questions, approximate dates, and any notes you write.
• Sensitive personal information: depending on the campaign, your answers can reveal health information (a diagnosis, treatment, medication, device, or exposure), information about sexual assault or abuse, or information about a child. We collect it only with your consent and use it only to handle your request.
• Consent records: the exact wording of each statement you agreed to, when you agreed, and a TrustedForm certificate (from ActiveProspect) that independently records the web session in which you agreed.
• Internet and device activity: browser and device type, pages visited on our site, the page you arrived from, advertising click identifiers and campaign parameters (such as gclid or UTM tags), and whether your browser sends a Global Privacy Control signal.
• Inferences: whether your request appears to fit the criteria a participating firm is reviewing (“screening result”).
• Law firm contacts: for firms that contact us about partnerships, business contact details and the campaigns and states they are interested in.

We do not ask for Social Security numbers, medical record numbers, insurance ID numbers, or file uploads, and we ask you not to send them.

How we use it

• To review your request against what participating firms are evaluating.
• To deliver your request to participating firms when you direct us to, and to contact you about it.
• To keep records that prove your consent and to honor opt-outs and privacy requests.
• To prevent fraud, spam, and duplicate submissions, and to secure our systems.
• To measure whether our advertising works, using only a generic “lead” signal — never your answers or health information (see “Advertising”).
• To comply with law, respond to legal process, and establish or defend legal claims.

We use sensitive personal information only for the purposes above that are necessary to provide the service you asked for. We do not use it to build advertising audiences or to infer characteristics about you.

Who receives it

• Participating law firms and intake partners for the campaign you selected, listed on our partner list. They pay TortMatics for advertising and intake services. We share your request with them only when you direct us to by checking the sharing consent box.
• Service providers that process data for us under contracts limiting their use of it: website hosting (Vercel), database (Neon), content management (Sanity), sign-in for our staff (Clerk), bot protection (Cloudflare Turnstile), consent certification (ActiveProspect TrustedForm), and email delivery (Resend).
• Advertising platforms (such as Google and Meta), which receive only a generic conversion signal with a click identifier and technical information — never your answers, campaign, condition, or hashed contact details for health-related campaigns.
• Authorities and others when required by law, to protect rights and safety, or as part of a merger, acquisition, or sale of assets (subject to this policy).

“Sale” and “sharing” of personal information

Because participating law firms pay TortMatics, delivering your request to them may be considered a “sale” of personal information under some state laws, even though you ask us to make that delivery. In the past 12 months we have “sold” identifiers, location, your request details, sensitive personal information (as directed by you), and inferences to participating law firms and intake partners. Where our advertising measurement counts as “sharing” for cross-context behavioral advertising, we have “shared” identifiers and internet activity with advertising platforms.

You can opt out of sale and sharing at any time on our Do Not Sell or Share My Personal Information page or with a Global Privacy Control signal. We do not knowingly sell or share the personal information of anyone under 16. Maryland residents: we do not sell sensitive data about you. Washington and Nevada residents: we sell consumer health data only with your signed authorization.

Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of sale and sharing for that browser and, if we know who you are, for you. We do not send advertising signals for visits with GPC enabled.

Advertising and cookies

We do not place advertising pixels on our intake forms and we never send screening answers, health information, or the name of a condition or campaign to advertising platforms. Our site uses cookies and similar technologies that are necessary for security (Cloudflare Turnstile), consent certification (TrustedForm), and remembering unsubmitted answers in your browser for up to 30 minutes. See Data security.

How long we keep it

• Request details and contact information: 3 years after our last contact with you, then deleted or de-identified.
• Consent records and TrustedForm certificates: 5 years after our last contact with you.
• Washington and Nevada authorizations to sell consumer health data: 6 years from signature.
• Records of privacy requests and opt-outs: at least 24 months (Virginia text opt-outs: 10 years).
• Unsubmitted answers saved in your browser: 30 minutes.

We may keep information longer if the law requires it or it is needed for a legal claim.

Your rights

Depending on where you live — including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — you may have the right to:

• know what personal information we collect, use, disclose, sell, and share, and get a copy (portability);
• correct inaccurate information;
• delete your information;
• opt out of sale, sharing, and targeted advertising;
• limit the use of sensitive personal information, and withdraw consent to its processing;
• receive a list of the third parties to which we disclosed your information (where state law provides it);
• appeal our decision on your request; and
• not be discriminated against for exercising any of these rights.

How to make a request: use our privacy request form or email privacy@tortmatics.com. We will confirm receipt within 10 business days and respond within 45 days (we may extend once by 45 days and will tell you why). We verify requests by matching the email address or phone number you used; we may ask for a code sent to that address. An authorized agent may submit a request with your signed permission, and we may ask you to confirm it directly. When you ask us to delete your information or opt out, we also tell the law firms that received your request.

Appeals: if we deny your request, reply to our decision or email privacy@tortmatics.com with the subject “Appeal.” We will respond within 45 days (60 days in some states). If you are not satisfied, you may contact your state attorney general.

Calls, texts, and email

We and participating firms call or text you only as described in the consent you gave. You can stop at any time by replying STOP, telling the caller, or emailing support@tortmatics.com; see Communications consent. Every marketing email includes an unsubscribe link.

Children

This site is for adults. We do not knowingly collect personal information from children under 13 or sell or share information of anyone under 16. A parent or legal guardian may submit a request about a child; we collect only what is needed about the child and no contact details for the child. If we learn a child submitted information, we delete it.

Security

We protect information with encryption in transit and at rest, access controls, and logging. No system is perfectly secure; if a breach affects you, we will notify you as the law requires. See Data security.

Changes

We will update this policy when our practices change and at least once every 12 months. The effective date above shows the latest version. If a change is material, we will post a notice on this site.

Contact

FusionByte Media LLC (TortMatics), 5830 E 2nd St, Casper, Wyoming 82609, US · privacy@tortmatics.com · General questions: support@tortmatics.com