PRIVACY POLICY

Last Updated: April 14, 2026

Introduction

This Privacy Policy ("Policy") explains how Enzio.ai, Inc. and our affiliates ("Enzio.ai," "we," "us," or "our") collects, stores, uses, and discloses personal data about you, how we use it, how and when it may be shared, the rights and choices you have with respect to your personal data, how we communicate with you, and how you can make requests or submit inquiries to us about your personal data.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not use the Platform. This Policy should be read together with our Terms of Service, AI Disclosure and Consent Agreement, and any other applicable policies referenced herein.

CONTENTS

About Us

What This Policy Covers

How Is This Policy Updated

Information We Collect

How We Use Your Personal Data

Disclosure of Personal Data

How We Protect Your Personal Data

Cookies and Other Information Collection Tools

Social Media and Other Third-Party Links and Services

Retention of Personal Data

Your Privacy Rights and Choices

Children’s Privacy

International Data Transfers

Contact Us

Region-Specific Terms

ABOUT US

Enzio.ai is a technology platform that connects users seeking legal services with U.S. licensed attorneys. We are not a law firm and do not provide legal advice. Legal services are provided by the attorneys who use our Platform, and your attorney-client relationship is with your assigned attorney and their law firm, not with Enzio.ai.

WHAT THIS POLICY COVERS

This Policy applies to personal data we collect online, including personal data we collect through our websites, https://enzio.ai and any sub- or affiliated sites (collectively the “Sites”), in connection with any other products and services we provide you that reference this Policy (together with the Sites, the “Services”), and any other interactions you may have with us.

In this Policy, “personal data” means any information that identifies, relates to, describes, is reasonably capable of being associated with or reasonably can be used to identify an individual or household and other data that is linked to personal data or is otherwise defined as “personal data,” “personal information,” or “personally identifiable information” by applicable laws.

This Policy does not apply to any products, services, websites, or content that are offered by third parties or have their own privacy policy.

HOW IS THIS POLICY UPDATED

We may modify this Policy from time to time. If we make changes, we will revise the “Last Updated” date at the top of the Policy on our Sites and use reasonable efforts to provide you with additional notificationnotice, such as by sending you an email notification. We encourage you to review this Policy each time you visit our Sites or use our Services to stay informed of our privacy practices and the choices available to you.

INFORMATION WE COLLECT

The personal data we collect about you depends on how you interact with us or use the Platform. We describe below the categories of personal data we collect and the sources of this information.

Information We Collect from Customers

We collect personal data from you when you use our Services, or otherwise communicate with us.

Types of personal data we may collect include:

1. Contact information such as your first and last name, job title, email address, telephone number, and mailing address;
2. Government-issued identification such as a social security number, driver’s license, or state-issued identification number;
3. Basic information such as the company you work for;
4. General Location Information such as city and state of access location and county of residence;
5. Payment Information such as your credit card or bank account number, which we may share with our third-party payment processors as described in this Policy;
6. Communications with us, including through meetings with our representatives, visits to our offices, presentations by us, website forms, and contact with our service;
7. Social and community content such as posts, photos, videos, or audio files that you may provide through our social media pages and our community pages; and
8. Any additional Information that you choose to provide.

In some cases, we may also collect information you provide about others. We will use this information to fulfill your requests and. We will not send communications to your contacts unrelated to your requests unless they separately create an account, engage with us, or consent to receive communications from us.

Information We Collect From Legal Professionals

• Contact information such as your first and last name, job title, email address, telephone number, and mailing address;
• Government-issued identification for identity verification purposes;
• Employment history and education information, such as degrees received and dates of graduation)
• Professional information such as bar number, states licensed in, practice area, and malpractice insurance details.

Information Collected Automatically When You Interact with Us

We, and our service providers, may automatically log personal data about you, your computer or mobile device, and your interaction over time with the Services, such as:

• Device information. We may collect information about your device(s) such as Internet Protocol (“IP”) addresses, browser type and version, domain names, access times, log information, error messages, device type, unique device identifiers, operating system, information about your use of the Site, data regarding network connected hardware and other technical information such as protocol status and sub-status, bytes sent and received and server information.
• Transaction Information. We may collect information when you conduct transactions through our Site or otherwise purchase Services from us.
• Pseudonymous Identifiers. We may collect pseudonymous identifiers such as unique cookies and device identifiers (as described further below), mobile device identifiers, and other identifiers derived from email addresses, phone numbers, or your device information.
• Usage information. We may collect information about your use of the Services, such as the pages you viewed, the Services you used or interacted with, referring website addresses, and details about any links or communications you interacted with.
• Information Collected by Cookies and Other Tracking Technologies. Please see our cookie policy in the section “Cookies and Other Information Collection Tools” for more details on the information our service providers and we collect about you.
• Marketing and Preferences Information. We may collect information about your preferences for receiving communications from us, your responses to surveys, promotions, or offers, and your interactions with our marketing materials.
• Geolocation Information. We may automatically collect approximate or precise location data from your device or IP address, depending on your device and app settings.
• Log and Diagnostic Information. We may automatically collect technical logs and diagnostic data, such as error reports, crash dumps, performance data, and information about how the Services are functioning.
• Security Data. We may collect information such as error logs, authentication data, and information used by our payment processors to detect and prevent fraud.

Information We Collect From Other Sources

We may also collect personal data about you from other sources, including publicly available databases, and combine that with information we collect through the Services. For example, we may use cookies, tracking pixels, or similar technologies to analyze our Sites. We, our service providers, and third-party services may automatically collect information about your usage of the Sites, including the areas or pages you visit, the amount of time spent on the Sites, the number of times you return to the Sites, and other related usage data.

We may also collect and use data generated by or collected from your use of our AI-powered legal document generation services, including but not limited to: document inputs, prompts, queries, generated outputs, user feedback, correction history, and interaction logs. This data may be used to train, fine-tune, evaluate, and improve our large language model (“LLM”) and related artificial intelligence systems.

Information Generated by AI Processing

The Platform uses artificial intelligence as a core component of its services. This section supplements the disclosures in our AI Disclosure and Consent Agreement and provides additional information about how your personal information is processed by AI systems.

We may also derive information or draw inferences about you based on the personal data we collect or have otherwise received about you, including through AI processing.

All AI-generated content is preliminary and subject to mandatory attorney review, revision, and approval before delivery to you.

Information We Infer or Derive

We may derive information or draw inferences about you based on the personal data we collect or have otherwise received about you.

HOW WE USE YOUR PERSONAL DATA

Depending on how you interact with us and the Services you or your organization utilize, we use your personal data:

• Provide and Improve Products and Services. To provide, activate, operate, maintain, develop, enhance, improve, support, troubleshoot, and manage our Services and your accounts on our Services, monitor and analyze trends, usage, and activities, and to perform services requested by you;
• Respond to You. To provide support for Services and respond to your requests, inquiries, comments, and concerns;
• Service Communications. To notify you about changes, updates, and other announcements related to our Services and send you technical notices, updates, security alerts, safety and support messages, and other transactional or relationship messages;
• Personalize Your Experience. To customize our product offerings and present you with tailored content and recommendations, and otherwise personalize your experience while using our Services;
• Safety and Security. For safety and security, including to detect and protect against fraud or illegal activities, security incidents, and harm to rights, property, or the safety of Enzio.ai users of our Services or others;
• Advertising and Marketing. To provide you with advertising, promotional messages, and other information about products, events, and services of ours, our affiliates, and third parties, such as event sponsors;
• Research and Development. To conduct research and development and develop new products and services;
• Corporate Transactions. To process personal data in the context of a merger, consolidation, reorganization, sale of our assets, financing, or acquisition of all or a portion of our business by another company, or other corporate transactions;
• Comply with Legal and Financial Obligations. To comply with our legal and financial obligations (including complying with court orders, discovery requests, subpoenas, and other legal obligations), resolve disputes, enforce our agreements, and exercise our legal rights;
• Your Consent. To process your personal data in accordance with your consent or when you intentionally direct or instruct us to do so; and
• Other Notified Purposes. To carry out any other purpose conveyed to you at the time the information was collected.

DISCLOSURE OF PERSONAL DATA

We may disclose your personal data as follows or as otherwise described in this Policy:

• Affiliates and Subsidiaries. We disclose your personal data to our affiliates and other organizations under common control for the purposes described in this Policy.
• Third Parties You Intentionally Interact With. We disclose your personal data to third parties when you use our Services to intentionally interact with them or direct us to interact with them.
• Vendors and Service Providers. We disclose your personal data to our vendors and service providers to perform the functions for which we engage them, including, but not limited to, payment processing, website hosting and development, identity verification, security and fraud prevention, and email marketing.
• Corporate Transactions. We disclose your personal data as part of, in connection with, or during negotiations of, any merger, sale of our assets, financing, or acquisition of all or a portion of our business to another company, or other corporate transactions.
• Analytics Providers. We disclose personal data to our analytics partners, such as Google Analytics (you can read more about our use of Google Analytics in the Cookies and Other Information Collection Tools section below).
• Professional Advisors. We disclose your personal data to our professional advisors, such as our lawyers, accountants, financial advisors, insurance advisors, and other advisors, in connection with the management of all or a part of our business or operations.
• Third-Party Partners. We disclose your personal data to unaffiliated third-party companies we partner with, such as our service providers and partners, who provide certain services or experiences to you.
• Aggregated, Anonymized, or De-Identified. We disclose aggregated, anonymized, or de-identified information, which cannot reasonably be used to identify you;
• Law Enforcement and Individuals Involved in Legal Proceedings. We disclose your personal data when we believe doing so is reasonably necessary to comply with applicable law or legal process or other legal reasons, including:
  • When we reasonably believe disclosure is required to comply with a subpoena, court order, or other applicable law, regulation, or legal process;
  • To enforce, remedy, or apply our agreements and contractual rights;
  • To protect our property (including intellectual property) or protect the rights, property, or safety of others;
  • To support external auditing, compliance, and corporate governance functions; and
  • To prevent, detect, and remedy fraud, cybersecurity attacks, or illegal activity.
• With your Consent or Direction. We disclose personal data with your consent or at your direction, including if we notify you that your personal data will be shared in a particular manner and you provide such personal data.

With Your Assigned Attorney

When you are matched with an attorney through the Platform, we share your intake information, AI-generated summaries, draft documents, and communications with your assigned attorney and their law firm so they can provide legal services to you. Once an attorney-client relationship is established, this sharing is conducted under the direction of your attorney pursuant to the Kovel doctrine, as described in our AI Disclosure and Consent Agreement.

HOW WE PROTECT YOUR PERSONAL DATA

We implement commercially reasonable physical, technical, and procedural measures to help protect personal data from unauthorized access or use; however, the transmission of information via the internet is not completely secure or private. If you have questions about the security of personal data we collect, please get in touch with us using the information provided below.

COOKIES AND OTHER INFORMATION COLLECTION TOOLS

What are cookies? A cookie is a small file containing a string of characters that is sent to your computer when you visit a website or use an online service. When you visit the website or use the online service again, the cookie allows that website or online service to recognize your browser or device. Cookies may store unique identifiers, user preferences, and other information.

The type of cookies we may use includes:

• Necessary Cookies. These cookies are strictly necessary for our Services to function properly. These cookies ensure basic functionalities and security features of the Sites.
• Functional Cookies. Functional cookies help to perform certain functionalities like sharing the content of the Sites on social media platforms, collecting feedback, and other third-party features. 
• Performance Cookies. Performance cookies are used to understand and analyze key performance metrics of the Sites, which helps deliver a better user experience for visitors.
• Analytics Cookies. Analytical cookies are used to understand how visitors interact with the Sites. These cookies help provide metrics such as the number of visitors, bounce rate, traffic source, etc.
• Advertisement Cookies. Advertisement cookies are used to deliver relevant ads and marketing campaigns to visitors. These cookies track visitors across websites and collect information to provide customized ads.
• Duration of Cookies. We may use “session cookies” or “persistent cookies.” Session cookies are temporary and expire once you close your browser or once your session ends. Persistent cookies remain on your device for much longer or until you or your browser erases them. Persistent cookies have varying durations, depending on their expiration dates.
• Why do we use them? Our business partners and we use cookies to collect information about you so we can provide the experiences you request, recognize your visit, track your interactions, improve your experience, and detect and prevent fraud. We may use cookies provided by third-party partners such as analytics providers, customer relationship management platforms, or payment processors.

How do I control cookies? You can limit online tracking by:

• Blocking cookies in your browser. Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org.
• Browser-specific controls. Use the following links to learn more about how to control cookies and online tracking through your browser:
  • Firefox
  • Chrome
  • Microsoft Edge
  • Safari (Mac)
  • Safari (Mobile/iOS)
• Blocking advertising ID use in your mobile settings. Your mobile device settings can provide functionality to limit the use of the advertising ID associated with your mobile device for interest-based advertising purposes.
• Using privacy plug-ins or browsers. You can block our websites from setting cookies used for interest-based ads by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third-party cookies/trackers.
• Advertising industry opt-out tools. You can also use these opt-out options to limit the use of your information for interest-based advertising by participating companies:
  • Digital Advertising Alliance for Websites: optout.aboutads.info
  • Network Advertising Initiative: optout.networkadvertising.org
• Platform opt-outs. Some of our advertising partners offer opt-out features that let you opt out of the use of your information for interest-based advertising, including:
  • Google
  • Facebook

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

Enzio.ai is providing information on these third-party privacy tools as a courtesy and does not endorse, represent, or warrant them.

Do Not Track. Some Internet browsers can be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit allaboutdnt.com.

Where required by applicable law, we obtain your consent before placing or using optional cookies that are not (i) strictly necessary to provide the Site or the Services (e.g., necessary cookies); or (ii) for the purpose of facilitating a communication.

Analytics Cookies. We use analytics cookies, such as Google Analytics, and advertising cookies, such as Google Ads, to help us operate our Services and provide marketing and advertising to you. You can find out more about how Google uses your personal data by visiting www.google.com/policies/privacy/partners/, and opt out of it by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout (opens in a new tab).

SOCIAL MEDIA AND OTHER THIRD-PARTY LINKS AND SERVICES

Third Party Partners

Occasionally, at our discretion, we may include or offer third-party products or services on our Sites or links to other websites, and we may rely on third-party service providers to process your personal data for various purposes, including payment processing. For example, we currently use Stripe for payment processing services. Additionally, we use LLMs, such as Anthropic’s Claude, as third-party service providers. The privacy practices of these third parties will be governed by their respective privacy notices. We are not responsible for the security or privacy of any information collected by these third parties. You should review the privacy notices or policies applicable to these third-party products and/or services. We have no responsibility or liability for the content or activities of these linked websites, or for the services they provide.

Social Media

Some aspects of the Sites may allow you to interact with social media services such as Facebook, Instagram, LinkedIn, TikTok, and X (formerly Twitter®). By using these interfaces, you allow us to access information about you from those social media services, including information and other content you submit to them. For a description of how such social media services and other third-party platforms, plug-ins, integrations, and applications handle your information, please refer to their respective privacy policies and terms of use, which may permit you to modify your privacy settings with that service or platform.

RETENTION OF PERSONAL DATA

We will retain your personal data for as long as necessary to fulfill the purpose for which it was collected and for the business purposes described in this Policy.

Even after we stop providing Services directly to you, and even if you close your account, we may retain your personal data to the extent permitted by applicable law:

• to comply with our legal and regulatory obligations.
• to protect against fraudulent or abusive activity on our Service.
• to exercise, establish, or defend legal claims.

In cases where we keep personal data, we do so in accordance with any limitation periods and record retention obligations imposed by applicable law. Our retention periods will vary depending on the type of data involved, but generally, to determine the appropriate retention period for personal data, we consider:

• the amount, nature, and sensitivity of the personal data;
• the potential risk of harm from unauthorized use or disclosure of your personal data;
• whether such information is needed to provide services;
• whether there is a contractual or legal need to retain the data;
• the purposes for which we process your personal data and whether we can achieve such purposes through other means; and
• applicable legal requirements.

YOUR PRIVACY RIGHTS AND CHOICES

You have certain choices regarding your personal information, as described below. If you contact us to exercise any of these rights, please note that we may only implement requests with respect to the personal data associated with you as an individual. We may need to verify your identity before implementing your request, and we will try to comply with it as soon as reasonably practicable, in accordance with the timelines required under applicable law. If we cannot verify your identity or your ownership rights to the data, we may not be able to service your request until you provide proper documentation.

Opt Out of Direct Marketing

You may opt out of receiving direct marketing communications from us by following the unsubscribe instructions in those communications, visiting our unsubscribe page, or contacting us as set forth below.

Please note that there are certain communications we are required to send you that relate to the Services we are providing to you or the organization you represent that you may not be able to opt out of (e.g., support and important legal notices).

CHILDREN’S PRIVACY

Our Services are not intended for children under 18 or for any age defined by applicable law. We do not intentionally collect information from children under the age of 18 or the age defined under applicable law.

CONTACT US

If you have questions about this Policy, wish to exercise your privacy rights, or have a privacy-related complaint, please contact us:

• Enzio.ai, Inc. Attn: Privacy 1717 K Street NW, Suite 900 Washington, DC 20006
• Email: privacy@enzio.ai 

For techincial support, please email us at support@enzio.ai .

For AI-related questions, please email us at contact@enzio.ai.