Privacy Policy

Tort Terminal is a business intelligence platform operated by WHR LLC, with its principal place of business in Arizona, United States. This policy explains what information we collect through the Tort Terminal web application at tortterminal.com and its subdomains, and through the Tort Terminal iOS application (together, the “Service”), and how we use it. Questions: support@tortterminal.com.

The Service is an invite-only, business-to-business platform for law firm partners and their authorized staff. There is no public or consumer sign-up. Accounts are provisioned by us or by your firm’s administrator under an agreement between your firm and WHR LLC. If that agreement addresses data handling, it controls over this policy to the extent of any conflict. The Service is not directed to consumers or to anyone under 18, and we do not knowingly collect information from children.

We collect the minimum needed to run a secure, audited platform:

• Account data. Your name, work email address, and internal user identifiers, provisioned when your firm sets up your account. Sign-in credentials are handled by our identity provider; we do not store your password.
• Security and usage records. IP address, device and browser information, and a log of the pages and actions you access, with timestamps. We keep these records for authentication, authorization, security monitoring, audit trails, and abuse prevention.
• Support communications. If you contact us, we keep the correspondence.

We do not collect precise location, contacts, photos, health data, or financial account information about you.

Campaign performance data, case records, and claimant information available in the Service are business records of the customer law firm (“Customer Records”). They belong to the firm, are processed by us on the firm’s behalf to provide the Service, and are made visible to you according to the role and permissions your firm assigns. In the iOS application, Customer Records are displayed in-session and held in memory only; they are not written to persistent storage on your device.

• We do not sell personal information.
• We do not use your information for advertising, and we do not share it with third parties for their marketing.
• We do not track you across apps or websites operated by others. The iOS application contains no advertising or third-party analytics SDKs and does not use Apple’s App Tracking Transparency framework because it does not track.

• Biometric app-lock (Face ID / Touch ID) is performed entirely on your device by the operating system. Biometric data never reaches our servers and we have no access to it.
• Session tokens are stored in the device’s secure storage.
• Customer Records viewed in the app are held in memory only and are cleared when the session ends.

We use the information described above to operate, secure, and improve the Service: authenticating you, enforcing your firm’s role-based access rules, maintaining audit logs, preventing abuse, providing support, and complying with law. We may use aggregated or de-identified data, which does not identify you or your firm, for service analytics and improvement. Our hosting provider collects aggregate performance telemetry about page loads; it is not used to identify individuals.

We share information only with:

• Service providers that process it for us under contract, limited to what the Service requires: identity and authentication, cloud hosting and content delivery, managed databases and data infrastructure, and transactional email.
• Case management, intake, and workflow systems used by or operated for your firm, which receive Customer Records as part of the firm’s case workflow.
• Authorities or other parties when required by law, legal process, or to protect the rights, safety, or property of WHR LLC, our customers, or others.
• A successor entity in connection with a merger, acquisition, financing, or sale of assets, in which case this policy continues to apply to the transferred information.

The Service uses encryption in transit, role-based access controls, organization-level data isolation, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security, but access to Customer Records and account data is restricted to what each user’s role permits.

We retain account data and security records while your account is active and afterward as needed for audit, security, legal, and contractual purposes. Customer Records are retained per our agreement with your firm. Accounts are firm-provisioned, so account changes and deletion run through your firm’s administrator or through us at support@tortterminal.com. We honor deletion requests except where retention is required by law or by our agreement with your firm.

We may update this policy from time to time. The current version is always posted at tortterminal.com/privacy with its effective date. Material changes will be reflected here; your continued use of the Service after a change takes effect constitutes acceptance.

WHR LLC, Arizona, United States. support@tortterminal.com.