Privacy Policy

Updated and effective as of July 31, 2026

Law Zebras, Inc., doing business as Vikk.ai (“Vikk.ai,” the “Company,” "we," "us" and/or "our") is dedicated to protecting your personal information as well as informing you about how we use your personal information. Personal information is any information about you that can directly or indirectly identify you.

This privacy policy (the "Privacy Policy" or the "Policy") is intended to provide information to our visitors and users ("you" or "your") about how we collect, protect, share and use your information when you use our website, www.vikk.ai, including any subdomain thereof (the “Website”), the Vikk.ai mobile application (the “App”) and/or products and services offered, operated or made available by, or through, the Company (the Website, App and products and services of Company are collectively referred to as the "Services". Reference to the Services includes any portion of the Services). It is our policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you through your use of our Services. Any capitalized term that is not defined in this Privacy Policy shall have the meaning given to it in the Terms of Use.

1. Information We Collect

Information we collect falls into one of two categories: “voluntarily provided” information and “automatically collected” information. “Voluntarily provided” information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions. “Automatically collected” information refers to any information automatically sent by your devices in the course of accessing our products and services.

Voluntarily Provided Information

We collect the following voluntary provided information:

• Account Information. When you create an account with us, we will collect information associated with your account, including your full name and email address. If you are signing up on behalf of your company or law firm, we may also collect the name of your company or law firm. All the foregoing information constitutes “Account Information.”
• Registration through Third Party Account. If you register or log into your account through a third-party service, such as Google, we will have access to some of your third-party account information from that service, such as your name, email address, and other information in that account, as authorized by that service. You should review such third party’s privacy policy for more information about their data collection practices. You have the ability to disable the connection between our Services and your third-party account at any time. We will use your account name associated with your third-party social network service to create your profile.
• Attorney Lawyer Ad Center Subscription. If you subscribe to our Lawyer Ad Center, we collect the information needed to enroll you and publish your directory listing and advertisements, including your full legal name, bar number(s) and licensing jurisdictions, law firm name and office location, business email and phone number, practice areas, profile photographs, biographical and firm profile content, and payment information (including your subscription tier and billing frequency). We may verify your credentials through state bar databases or other public records and retain registration metadata.
• User Content. We collect personal information that you provide in the input to our Services (“User Content”), including your prompts (voice or text), other content you upload, such as files, documents, images, audio and video, and your input into client intake form (please see “Intake Form” below). Some of our Services allow you to interact with other users, such as post, comment, or send messages, and we treat those interactions as User Content, too.
• Connect with Legal Pro—Intake Form. By clicking on the ”Connect with Legal Pro” button or a similar feature, you may initiate a request to be connected with Attorney Users. We will display Attorney Ads in the user chat area based on practice-area relevance and general location (e.g. city, state, zip code). When you choose to connect with one or more of the Attorney Ads, you will be directed to complete an intake form (“Intake Form”) requesting certain information, which may include your name, phone number, email address, and a description of your legal matter. The Intake Form will include a case summary field that is pre-populated with an AI-generated summary based on your interactions with the Services, which you can edit.
• Lawyer Profile. If you register as an attorney user on our Services, we will collect certain professional information to create and populate your lawyer profile (“Lawyer Profile”), including your full name, professional title, email address, phone number, website URL, office address (including city, state, and zip code), profile photo, professional biography, legal specialties and years of experience, bar admission information, state bar license number, educational background, awards and recognitions, professional association memberships, frequently asked questions, and office hours.
• Payment Information. As part of our Services, our third-party payment processing service provider, Stripe, will collect payment information from you. If you purchase Lawyer Ad Center credits, or enable optional automatic top-off, Stripe will process your payment method and billing details. Stripe’s privacy policy can be found here.
• Output. Our Chat System produces Outputs based on your Inputs. If you include personal data in your Inputs, we will collect that information, which may be reproduced in the Outputs. Note, however, that the Output is subject to strict retention periods, as set out in Section 5 (“How Long we Hold your Data”) below, and that we take steps to de-identify such Output when using them for the purposes set forth in this Privacy Policy.
• Communication Information. If you communicate with us, including via email, we may collect personal information such as your name, contact information and the contents of the message you send.
• Feedback on your use of our Services. Where applicable, we may collect your feedback regarding the Output and use it to improve our Services. This might arise if, for example, you report that the Chat System returned inaccurate information in an Output, or if you rate an Output using any rating system that we may provide (e.g. clickable thumbs up or thumbs down icons).

Automatically Collected Information

• Log Data: When you utilize our Services, our servers may automatically log the standard data provided by your web browser. It may include your device’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit. Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem. You may or may not receive notice of such errors, even in the moment they occur, that they have occurred, or what the nature of the error is.
• Device Data: When you utilize our Services, we may automatically collect data about your device, such as: device type, operating system, unique device identifiers and device settings. Data we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.
• Usage Data: When you access our Services, we collect your usage activities across the Services, such as the date and time of access, types of content that you view or engage with, advertisements displayed to you, whether you choose to connect with an attorney advertisement, the features you use, clickstream data, session duration and approximate location derived from IP address.

2. Cookies

We use “cookies” to collect information about you and your activity across our site. A cookie is a small piece of data that a website stores on your device when you visit. It typically contains information about the website itself, a unique identifier that allows the site to recognize your web browser when you return, additional data that serves the cookie’s purpose, and the lifespan of the cookie itself. Cookies are used to enable certain features (e.g. logging in), track site usage (e.g. analytics), store your user settings (e.g. time zone, notification preferences), and to personalize your content (e.g. advertising, language). Cookies help us serve you content based on preferences you have specified.

Cookies set by the website you are visiting are usually referred to as first-party cookies. They typically only track your activity on that particular site. Cookies set by other sites and companies (i.e. third parties) are called third-party cookies. They can be used to track you on other websites that use the same third-party service.

Types of cookies and how we use them

• Essential cookies: Essential cookies are crucial to your experience of a website, enabling core features like user logins, account management, shopping carts, and payment processing. We use essential cookies to enable certain functions on our website.
• Performance cookies: Performance cookies track how you use a website during your visit. Typically, this information is anonymous and aggregated, with information tracked across all site users. They help companies understand visitor usage patterns, identify and diagnose problems or errors their users may encounter, and make better strategic decisions in improving their audience’s overall website experience. These cookies may be set by the website you’re visiting (first-party) or by third-party services. They do not collect personal information about you. We use performance cookies on our site.
• Functional cookies: Functional cookies are used to collect information about your device and any settings you may configure on the website you’re visiting (like language and time zone settings). With this information, websites can provide you with customized, enhanced, or optimized content and services. These cookies may be set by the website you’re visiting (first-party) or by third-party services. We use functional cookies for selected features on our site.

How to reject cookies

Using our Services without cookies is also possible (except necessary cookies). In your browser, you can deactivate the saving of cookies, limit them to particular websites, or set the browser to notify you when a cookie is sent. You can also delete cookies from your PC hard drive at any time (file: “cookies”). Please note that in this case you will have to expect a limited page presentation and limited user guidance. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit https://www.allaboutcookies.org/

3. How We Use the Collected Information

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

• to create and administer your account
• to facilitate payments for products and services
• to provide you with and maintain our Services
• to improve and enhance our Services, develop new products and features, and to conduct research
• to contact and communicate with you
• for analytics, market research, and business development, including to operate and improve our Website, associated applications, and associated social media platforms
• for advertising and marketing, including to send you promotional information about our products and services and to display Attorney Ads in the User chat area based on practice-area relevance and general location (e.g. city, state, zip code)
• for security and fraud prevention, and to ensure that our sites and apps are safe, secure, and used in line with our terms of use
• to debug and to identify and repair errors that impair existing functionality
• to enforce our Terms of Service and similar terms and agreements, including our Acceptable Use Policy
• to comply with our legal obligations and resolve any disputes that we may have

Aggregate and De-Identified Information. We may aggregate, anonymize, de-identify, or otherwise process personal information so that it can no longer reasonably be used to identify you or any individual. Subject to applicable law, we may use such aggregated, anonymized, or de-identified information for any lawful business purpose consistent with the purposes described in Section 3 above. We will also disclose or make available aggregated, anonymized, or de-identified information to third parties for any lawful business purposes, including, without limitation, law firms, insurance companies, manufacturers and other businesses for purposes such as risk assessments, underwriting, fraud detection and prevention, actuarial analysis, market analysis, product and service development and other operational, commercial, or business purposes. Where we de-identify personal information, we will take reasonable measures designed to ensure that such information is not re-identified, except as permitted by applicable law.

4. Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security. Therefore, you should take special care in deciding what information you send to us via the Service or email.

You are responsible for selecting any password and its overall security strength. You are responsible for maintaining the security and confidentiality of your password.

5. How Long We Hold Your Data

We retain your personal data only for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Policy, and support our legitimate business operations, including compliance with legal obligations. How long we retain your data depends on several factors, including the nature and sensitivity of the data, the activities for which it is used, the duration and frequency of your interactions with our Services, the potential risk of harm from unauthorized use or disclosure, and our legal and business requirements.

In some cases, you control how long we retain your data. Where our Services allow you to delete personal data—such as individual conversations, saved content, or your account—we will delete that data from our systems within 30 days of your request, unless a longer retention period is required as described below.

If you use our Chat System and choose to save and continue conversations, we retain those conversations to provide a consistent and personalized user experience.

Notwithstanding the foregoing, we may retain personal data for longer periods where necessary to: comply with legal, regulatory, accounting, or reporting obligations; respond to lawful subpoenas, court orders, or other legal processes; detect, investigate, or prevent fraud, abuse, security incidents, or violations of our Acceptable Use Policy; resolve disputes or enforce our agreements; maintain financial and transaction records; or support archiving, scientific, historical, or statistical research purposes where permitted by applicable law.

When you request deletion of your personal data, we may retain a record of that request solely to document and verify our compliance. We may also anonymize or de-identify personal data so that it can no longer reasonably be associated with you. Once data has been anonymized or de-identified, we may retain and use it indefinitely without further notice to you.

6. Children’s Privacy

We do not aim any of our products or services directly at children under the age of 18, and we do not knowingly collect personal information about children under 18. If you have reason to believe that a child under the age of 18 has provided personal information to Company, please email us at hello@vikk.ai. We will investigate any notification and if appropriate, delete the personal information from our systems.

7. Disclosure of Personal Information to Third Parties

We may disclose your personal information to the following categories of third parties:

• Affiliates and Corporate Group Companies: Our affiliates, subsidiaries, and other entities under common control with us.
• Service Providers and Vendors: Third-party vendors, service providers, and marketing partners that help us operate, maintain, improve, secure, and market our Services. These may include providers of:
  • Information technology and cloud hosting services;
  • Data storage and content delivery services;
  • Customer support services;
  • Payment processing services;
  • Analytics services;
  • Advertising and marketing services;
  • Age and identity verification services;
  • Security, fraud detection, and fraud prevention services;
  • Debt collection services; and
  • Maintenance and other business support services.

  These parties may access, process, or store personal information only as necessary to provide services on our behalf and in accordance with our instructions.

• Intake Form—Attorney Users. If you choose to connect with Attorney Users by clicking on one or more Attorney Ads that are displayed when you click on the “Connect with Legal Pro” button or a similar feature, the personal information which you input into the Intake Form, together with your AI-generated or edited case summary, will be shared with the Attorney User whose Attorney Ad you choose so that the Attorney User can evaluate your case.
• Aggregate and De-Identified Information. We may aggregate, anonymize, de-identify, or otherwise process personal information so that it can no longer reasonably be used to identify you or any individual. Subject to applicable law, we may use such aggregated, anonymized, or de-identified information for any lawful business purpose consistent with the purposes described in Section 3 above. We will also disclose or make available aggregated, anonymized, or de-identified information to third parties for any lawful business purposes, including, without limitation, law firms, insurance companies, manufacturers and other businesses for purposes such as risk assessments, underwriting, fraud detection and prevention, actuarial analysis, market analysis, product and service development and other operational, commercial, or business purposes. Where we de-identify personal information, we will take reasonable measures designed to ensure that such information is not re-identified, except as permitted by applicable law.
• Business Transfers. We may disclose or transfer personal information in connection with corporate transactions such as a merger, financing, acquisition, bankruptcy, dissolution, or the sale or transfer of all or part of our business or assets. Personal information we collect may be included among the assets transferred in such transactions, and we may also share personal information with our auditors, attorneys, or other advisors in connection with these activities. Any successor or acquirer may continue to use your personal information in accordance with this Privacy Policy.
• Legal, Regulatory, and Government Authorities: Law enforcement agencies, regulators, courts, tribunals, government authorities, industry participants, and other third parties where disclosure is required by law, legal process, or regulatory obligation, or where we reasonably believe disclosure is necessary to:
  • Protect our rights, property, or interests;
  • Enforce our agreements, policies, or terms;
  • Detect, prevent, or investigate fraud, security incidents, or unlawful activity;
  • Protect the safety, security, and integrity of our Services, users, employees, or the public; or
  • Establish, exercise, or defend legal claims.
• With Your Consent: Our Services include features that allow you to share content, including chat content, with third parties through various methods such as AirDrop, email, text message, and other sharing mechanisms made available through the Services or your device (collectively, the “Share Features”). When you use a Share Feature, the content you choose to share—which may include chat history, Outputs, and other User Content—will be transmitted to the recipients or platforms you select. We are not responsible for the privacy practices of any third-party recipients or platforms with whom you share content. Additionally, where our Services otherwise allow you to interact with third parties, we may disclose personal information as necessary to facilitate those interactions.

8. US Privacy Laws—California Consumer Privacy Act

If you are located in the United States, this Privacy Policy explains how we collect, use and disclose your personal information under U.S. state privacy laws to the extent applicable to us.

California Consumer Privacy Act (CCPA). In the event that you are a California resident you may have the following rights with regards to personal information stored on our Services:

• Right to Know. You have the right to know what categories and specific pieces of CCPA personal information have been collected about you; the categories of sources from which CCPA personal information are collected; our business or commercial purpose for collecting, using, or disclosing CCPA personal information; the categories of third parties with whom we share CCPA personal information; the categories of CCPA personal information we have disclosed about you for a business purpose.
• Right to Correct: You have a right to request any correction of your CCPA personal information. Please note that we cannot guarantee the accuracy of any Output generated by our models. If you believe that Output contains inaccurate personal information about you, you may submit a correction request. We will make reasonable efforts to address such requests; however, due to the technical nature of our models, we cannot guarantee that corrections will be feasible in all cases.
• Right to Delete: You have a right to deletion of your CCPA personal information, subject to exceptions under the CCPA, among them:
  • We cannot verify your request
  • We need your personal information to complete your transaction, provide a reasonably anticipated product or service
  • For certain business security practices
  • For certain internal uses that are compatible with reasonable consumer expectations or the context in which the information was provided
  • To comply with legal obligations, exercise legal claims or rights, or defend legal claims
• No Discrimination: We will not discriminate against you based on your exercise any of your CCPA rights.
• How to Make the Request: California customers with an account may exercise their rights directly or through an authorized agent by signing in to their account. If you are a California customer and you or your authorized agent would like to exercise your privacy rights listed above, requests may be made by emailing us at hello@vikk.ai. If you do not have an account with us, we will ask you for information which we consider necessary to verify your identity for security and to prevent fraud. This information may include name, contact information, and information related to your transaction or relationship with Vikk.ai, but the specific information requested may differ depending on the circumstances of your request for your security and to protect privacy rights.

We do not sell or share personal information. We do not disclose personal information to third parties for the purpose of engaging in targeted advertising. We will closely monitor the development of the U.S. Privacy Laws that may apply to our future activities and will implement reasonable administrative, technical and physical security measures for compliance.

9. Do Not Track Signals

Some browsers have a “Do Not Track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not respond to browser “Do Not Track” signals. We adhere to the standards outlined in this Privacy Policy, ensuring we collect and process personal information lawfully, fairly, transparently, and with legitimate, legal reasons for doing so.

10. Links to Other Websites

Our Services may link to external sites that are not operated by us. By providing these links we do not imply that we endorse or have reviewed these sites. In the event our Services contain links to third-party sites and services, please be aware that those sites and services have their own privacy policies and you acknowledge and agree that we cannot accept responsibility or liability for their respective privacy practices. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

11. Changes to This Policy

If Vikk.ai makes material changes to its Privacy Policy, it will notify you by: (i) changing the Last Updated Date at the top of the Privacy Policy, (ii) sending an email to its users, and/or (iii) adding a statement to the Website.

12. Contact Us

For any questions or concerns regarding your privacy, you may contact us using the following details:

13. reCAPTCHA

We use reCAPTCHA on our website to prevent automated abuse, spam, and cyber attacks. Through this service, behavioral data, device characteristics, IP addresses, and cookie information are collected and analyzed to distinguish human users from automated bots. This data is processed by our service provider, Google LLC, acting strictly as a data processor on our behalf. We retain full control as the data controller over how this security data is managed and utilized to protect our digital infrastructure.