Privacy Policy

National Bankruptcy Advocates is an online legal directory and lead-generation platform that connects individuals seeking bankruptcy legal assistance with licensed bankruptcy attorneys across the United States. We are not a law firm and do not provide legal advice. For privacy purposes, we act as the data controller for personal information collected through the Platform.

Our Platform operates as a lead-generation service: when a consumer submits an inquiry, that inquiry (including personal contact information and case details) is transmitted to one or more attorneys who have purchased lead credits or subscription plans on our Platform. This data-sharing is a core function of the service and is described in detail in Section 4 below.

We use personal information for the following purposes:

We do not use your personal information to make automated decisions that produce legal or similarly significant effects without human review.

By submitting a lead inquiry form on this Platform, you expressly consent — on a one-to-one basis with each attorney to whom your lead is delivered — to be contacted by those attorneys via telephone calls, text messages (including automated or pre-recorded messages), and email, even if your number is listed on a federal or state Do Not Call registry. This consent is not a condition of purchasing any goods or services.

You may revoke your consent to receive automated calls or texts at any time by replying STOP to any text message, by calling the attorney directly and requesting removal, or by contacting us at [email protected]. Revocation of consent does not affect the lawfulness of any communications made before revocation.

Message and data rates may apply. Message frequency varies by attorney. For help, reply HELP to any text message or contact us at the email above.

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention schedule is:

When personal information is no longer needed, we delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate the data from further processing until deletion is possible.

Depending on your jurisdiction, you may have the following rights with respect to your personal information. We will respond to verifiable requests within the timeframes required by applicable law (generally 30–45 days, with one extension of up to an additional 45 days where reasonably necessary).

To exercise any of these rights, please submit a request to [email protected]. We may need to verify your identity before processing your request. We will not charge a fee for reasonable requests but reserve the right to charge a reasonable fee or decline requests that are manifestly unfounded, excessive, or repetitive.

Authorized agents: California and certain other state residents may designate an authorized agent to submit requests on their behalf. We will require proof of the agent's authorization and may verify your identity directly.

This section applies to California residents and supplements the rest of this Privacy Policy. It is provided pursuant to the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA).

Residents of the following states have privacy rights under their respective state laws, which we honor in addition to the rights described in Section 8:

If you are a resident of any of these states, you may have rights to access, correct, delete, and opt out of certain processing of your personal data. To exercise these rights, please contact us at [email protected]. We will respond within the timeframe required by your state's applicable law.

The Platform is not directed to individuals under the age of 18, and we do not knowingly collect personal information from minors. Our services relate to legal matters (bankruptcy filings) that require adult legal capacity. If you are under 18, please do not use the Platform or provide any personal information.

If we learn that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a minor, please contact us at [email protected].

We implement and maintain reasonable and appropriate technical, administrative, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Encryption at rest: Sensitive database fields are encrypted at rest.
• Password hashing: Passwords are hashed using bcrypt with a sufficiently high cost factor before storage. We never store passwords in plain text.
• Access controls: Access to personal information is restricted to employees and contractors who need it to perform their job functions and are bound by confidentiality obligations.
• Payment security: We do not store payment card data. All payment processing is handled by Stripe, which is PCI DSS Level 1 certified.
• Security monitoring: We monitor our systems for suspicious activity and potential security incidents.

Despite these measures, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your personal information. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and applicable authorities as required by law.

National Bankruptcy Advocates is based in the United States, and our Platform is operated from the United States. If you are accessing the Platform from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using the Platform, you consent to the transfer of your personal information to the United States. We take steps to ensure that any international transfers of personal information are subject to appropriate safeguards in accordance with applicable data protection law.

Our Platform is intended for use by residents of the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, please note that we do not specifically target or market our services to those regions. If you choose to use our Platform from those regions, you do so at your own initiative and are responsible for compliance with local laws.

The Platform may contain links to attorney firm websites, court websites, government resources, and other third-party websites. These links are provided for your convenience and do not signify our endorsement of those websites or their content. We have no control over the content or privacy practices of third-party websites and are not responsible for their privacy policies or practices.

We encourage you to review the privacy policy of every website you visit before providing any personal information. This Privacy Policy applies only to information collected by our Platform.

We send the following categories of email communications:

• Transactional emails: Account confirmations, password resets, lead delivery notifications, and payment receipts. These emails are necessary for the operation of the service and are not subject to opt-out.
• Marketing emails (attorneys only): Information about new platform features, promotional offers, and industry news. You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us at [email protected].

We comply with the CAN-SPAM Act. All marketing emails include our physical mailing address, a clear identification that the message is an advertisement, and a functional unsubscribe mechanism. We will process opt-out requests within 10 business days.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Revise the "Last Updated" date at the top of this page;
• For material changes, provide at least 30 days' advance notice by email (to the address associated with your account) and/or by posting a prominent notice on the Platform; and
• For changes that require your consent under applicable law, obtain your consent before the changes take effect.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated policy, you must discontinue use of the Platform and may request deletion of your account.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team:

We will acknowledge receipt of your request within 5 business days and respond within the timeframe required by applicable law. If you are not satisfied with our response, you have the right to lodge a complaint with the applicable data protection or consumer protection authority in your jurisdiction.