Privacy Policy

We collect only what is necessary to provide and improve UnpackLaw:

• Account data: If you create an account, we collect your email address to send magic-link login emails and law-change alerts you configure.
• Usage analytics: Anonymous data such as pages visited, search queries (not linked to your identity), jurisdiction selected, and feature usage. This helps us understand which legal topics are most needed.
• Technical data: IP address, browser type, and device type collected automatically by our hosting infrastructure for security and performance monitoring.

We do not collect Social Security numbers, financial account numbers, government IDs, or any sensitive personal information.

We use collected data exclusively to:

• Authenticate your account and deliver login links via email
• Send law-change alerts and notifications you have opted into
• Improve search relevance and content coverage based on aggregate usage patterns
• Monitor for abuse, security incidents, and platform stability

We do not sell your data. We do not use your data for targeted advertising. We do not share individual user data with third parties except as described in this policy.

UnpackLaw uses minimal browser storage:

• Session cookie: A secure, HTTP-only cookie to maintain your login session. Expires when you sign out or after 30 days of inactivity.
• Preference storage: Your selected state/jurisdiction is stored in localStorage so it persists across visits. No personal data is stored here.
• Analytics: We use privacy-respecting, cookie-less analytics where possible. No third-party advertising cookies are set.

You can clear cookies and local storage at any time through your browser settings without losing access to the site.

We use a small number of trusted third-party services:

• Resend — transactional email delivery (login links, law-change alerts). Your email address is transmitted to Resend solely to deliver messages you request. Resend's privacy policy governs their handling of this data.
• Hosting infrastructure — our VPS provider processes traffic logs as part of normal hosting operations.

We do not embed social-media tracking pixels, Google Analytics, or any advertising networks.

We retain data only as long as necessary:

• Account data: Retained while your account is active. Deleted within 30 days of an account deletion request.
• Usage analytics: Aggregate anonymized data retained indefinitely. Raw session logs purged after 90 days.
• Email logs: Delivery records retained for 90 days for troubleshooting, then purged.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of non-essential communications

To exercise any of these rights, email us at support@unpacklaw.com. We will respond within 30 days. We do not charge for reasonable requests.

For privacy questions or requests, contact us at support@unpacklaw.com. We aim to respond within 5 business days.