Privacy Policy.

1. Information We Collect

1.1 Information you provide

We collect information you submit directly through the Site, including:

• Contact form submissions — name, email address, phone number, practice area of interest, urgency, and the message text;
• Guide downloads — name and email address provided to receive a downloadable guide;
• AI assistant conversations — the questions you ask and the responses generated, retained for quality review and abuse prevention;
• Phone or email correspondence — any information you share when you call, email, or otherwise contact the firm directly.

1.2 Information collected automatically

When you visit the Site, our servers and third-party analytics providers automatically collect certain technical information, including:

• IP address (truncated for analytics, full for abuse prevention on the contact form and chatbot);
• Browser type, operating system, and device identifiers;
• Referring URL, pages visited, time on page, and exit URL;
• Approximate location (derived from IP) at the city or region level;
• Cookie identifiers and similar tracking technologies (see Section 3).

2. How We Use Your Information

We use the information we collect to:

• Respond to consultation requests and other inquiries you initiate;
• Deliver guides, articles, or other materials you request;
• Provide AI-assistant responses to your questions;
• Operate, maintain, secure, and improve the Site;
• Measure the effectiveness of our content and advertising;
• Detect, prevent, and respond to fraud, abuse, and security incidents;
• Comply with applicable legal obligations, court orders, and regulatory requirements, including the Georgia Rules of Professional Conduct.

3. Cookies and Tracking Technologies

The Site uses cookies and similar technologies — including web beacons, pixels, and local storage — to operate properly, remember your preferences, and measure traffic. Categories of cookies in use:

• Strictly necessary cookies — required for the Site to function (e.g., storing your chatbot session ID to keep your conversation continuous).
• Analytics cookies — set by Google Tag Manager and Google Analytics 4 to measure aggregate traffic, page performance, and content engagement. These cookies report data that is generally not identifiable to a specific individual.
• Advertising and conversion cookies — set by Meta Pixel (Facebook) if enabled in our environment configuration, used to measure the effectiveness of paid advertising. You can opt out at the Meta Privacy Center.

Most browsers let you refuse or delete cookies through their settings. Note that refusing strictly necessary cookies may impair Site functionality (for example, the AI assistant may not be able to keep your conversation continuous within a single visit).

4. Third-Party Service Providers

We rely on the following third-party processors to operate the Site. Each is bound by their own privacy practices and data-processing agreements, and each processes only the data needed for the specific function listed.

• Vercel, Inc. — hosting, content delivery, and edge functions. May process request metadata and IP addresses to deliver the Site.
• Supabase, Inc.— secure storage of contact-form submissions, guide requests, and AI-assistant conversation history. Data is stored in Supabase’s US-region Postgres infrastructure with row-level security enabled.
• Resend, Inc. — transactional email delivery (contact-form confirmations and guide deliveries).
• Anthropic, PBC — provides the AI model that powers our chatbot assistant. Anthropic does not train its models on conversations submitted through the Claude API per their commercial-customer policy at the time of this policy.
• Google LLC — Google Tag Manager and Google Analytics 4 for traffic measurement and Google Search Console for indexing diagnostics.
• Meta Platforms, Inc. — Meta Pixel for paid-advertising conversion measurement, where enabled.

5. How We Share Information

We do not sell personal information. We share information only:

• With the third-party processors listed in Section 4, strictly as needed to operate the Site and respond to your inquiries;
• With our attorneys, accountants, malpractice insurer, and other professional advisors, bound by confidentiality, in connection with managing the firm’s operations;
• In response to a subpoena, court order, or other valid legal process;
• To investigate or respond to suspected fraud, abuse, or illegal activity;
• To enforce our Terms of Use or to protect the rights, property, or safety of the firm, our clients, or the public;
• In the event of a merger, acquisition, or sale of the firm’s assets, subject to successor privacy obligations.

Information you submit through the contact form or by email before a written engagement letter is signed is treated as a preliminary consultation. We hold it in confidence under Georgia Rule of Professional Conduct 1.18, but the protection is more limited than full attorney-client privilege.

6. Data Retention

• Contact-form submissions and guide requests: retained for up to seven years to comply with conflict-of-interest checks under Georgia Rule of Professional Conduct 1.7 and 1.9.
• AI-assistant conversation logs: retained for ninety days for quality review and abuse prevention, then deleted.
• Analytics data: retained per the standard Google Analytics 4 default (fourteen months) and the standard Meta Pixel default.
• Email correspondence:retained per the firm’s records-retention schedule, generally seven years.

7. Your Rights and Choices

7.1 All visitors

You may at any time contact us at intake@pereiraandassociates.com to request a copy of the personal information we hold about you, to ask us to correct inaccuracies, or to ask us to delete it. We will respond within thirty days. We may decline to delete information we are required to retain for conflict-of-interest checks or other professional-responsibility obligations.

7.2 California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, to request deletion, to request correction, and to opt out of any “sale” or “sharing” of personal information. We do not sell personal information. To exercise your California rights, contact us using the information in Section 11.

7.3 European Economic Area, United Kingdom, and Switzerland residents (GDPR)

If you are in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation, including the right to access, rectify, delete, restrict, and port your personal information, and the right to object to processing. The legal bases on which we process your personal information are your consent (where required), the performance of a contract or pre-contractual steps at your request, and our legitimate interests in operating and securing the Site.

8. Children’s Privacy

The Site is not directed to children under the age of sixteen and we do not knowingly collect personal information from children under sixteen. If you believe a child under sixteen has provided us with personal information, please contact us and we will delete it.

9. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect the personal information we hold — including TLS 1.3 encryption in transit, encryption at rest on our database provider, row-level security on form-submission tables, secret-key environment isolation, and rate limiting on the contact form and AI assistant. No internet transmission or electronic storage is one-hundred-percent secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective date” above will reflect the most recent revision. Material changes will be noted at the top of this page for at least thirty days following the revision. We encourage you to review the Policy periodically.

11. Contact

Questions about this Privacy Policy or your personal information can be directed to: