Privacy Policy

Last updated: March 26, 2025

MDL Match ("we," "our," or "us") operates the mdlmatch.ai website and API service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Law firm name and contact information
• Billing information (processed securely via Stripe)

Case Data

When you use our matching service, you submit case details for analysis. Case data is:

• Stored securely in your account for case history and tracking
• Used solely to provide matching results and improve your experience
• Never shared with third parties
• Never used to train AI models
• Deletable upon request

Usage Data

We automatically collect certain information when you access our service:

• IP address and device information
• Browser type and version
• Pages visited and features used
• Query volume and API usage metrics

How We Use Your Information

We use your information to:

• Provide and maintain our service
• Process case matching requests
• Send account-related communications
• Process payments and manage subscriptions
• Improve and optimize our service
• Detect and prevent fraud or abuse

Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted via TLS/SSL encryption
• Data at rest encrypted
• Access controls and authentication via Clerk
• Infrastructure hosted on Vercel and Neon (both SOC 2 compliant)
• Regular security reviews

Data Retention

We retain your account information and case history for as long as your account is active. You may delete individual cases from your dashboard or request full account deletion at any time by contacting us.

Third-Party Services

We use the following third-party services:

• Stripe — Payment processing
• Clerk — Authentication and identity management
• Vercel — Hosting and infrastructure
• Neon — Database services
• AI service providers — Case analysis and matching (case data is processed but not retained by these providers)

Each of these services has their own privacy policies governing data handling.

Your Rights

You have the right to:

• Access and receive a copy of your data
• Correct inaccurate personal information
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise these rights, contact us at intake@mdlmatch.ai.

California Privacy Rights

California residents have additional rights under the CCPA, including the right to know what personal information we collect and how it's used, and the right to opt out of the sale of personal information. We do not sell personal information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, contact us at:

• Email: intake@mdlmatch.ai
• Mail: MDL Match, San Francisco, CA