Privacy Policy

1. Information We Collect

IDX collects information reasonably necessary to verify membership eligibility, administer accounts, operate the platform, and facilitate professional collaboration among members.

A. Membership and Professional Information. When applying for membership, you may be asked to provide:

• Full legal name.

• Email address.

• Law firm or professional organization.

• Professional title.

• City, state, or other professional location.

• Bar admission number for each jurisdiction in which you are licensed.

• Jurisdictions of bar admission.

• Information concerning your immigration practice.

This information is used primarily to evaluate membership applications, verify professional credentials, and maintain the integrity of IDX's attorney-only membership requirements.

B. Account Information. IDX may collect and maintain information associated with your account, including:

• Account identifiers and authentication information.

• Email verification status.

• Membership approval status.

• Attorney verification status.

• Account preferences and settings.

• Records of account suspensions, restrictions, or administrative actions.

Passwords and other authentication credentials should be handled using appropriate security measures and should not be publicly displayed.

C. Member-Generated Content. IDX may collect and store information voluntarily submitted by members through the platform, including:

• Discussion posts and comments.

• Questions and responses.

• Uploaded files and documents.

• Professional resources and materials.

• Reports of potentially inappropriate content.

• Communications with IDX administrators.

Members are responsible for ensuring that information they submit complies with IDX's Terms of Use and all applicable legal and professional confidentiality obligations.

IDX is not intended for storing confidential client files, privileged communications, or sensitive client-identifying information.

D. Technical and Usage Information. When members access IDX, certain technical information may be collected automatically, depending on the platform's configuration. This information may include:

• Internet Protocol (IP) addresses.

• Browser type and device information.

• Operating system.

• Login activity and timestamps.

• Pages or features accessed.

• Technical error reports.

• Security and diagnostic information.

Such information may be used to maintain platform functionality, identify technical problems, investigate unauthorized activity, and protect account security.

2. How We Use Information

IDX may use collected information for the following purposes:

• Membership Verification: To confirm that applicants are licensed attorneys who actively practice immigration law outside the federal government and satisfy IDX's membership requirements.

• Account Administration: To create, maintain, authenticate, and manage member accounts.

• Professional Networking: To display approved professional profile information and facilitate discussions among authorized members.

• Platform Operations: To operate, maintain, troubleshoot, and improve IDX's functionality.

• Content Moderation: To investigate reported content, enforce the Terms of Use, and maintain a respectful and professional environment.

• Security: To detect, investigate, and prevent unauthorized access, fraudulent activity, account misuse, and other security concerns.

• Communications: To send account-related notices, membership decisions, verification updates, security alerts, and important changes to IDX's policies or services.

• Legal Compliance: To comply with applicable laws, regulations, court orders, and other lawful obligations.

IDX will not use information for purposes materially inconsistent with this Privacy Policy without providing any notice or obtaining any consent required by applicable law.

3. Attorney Verification and Professional Information

IDX requires applicants to provide bar admission information to establish their eligibility for membership.

Administrators may consult official state bar directories or other authoritative licensing records to verify the information provided.

When verification is successful, IDX may display a Verified badge identifying the jurisdiction or jurisdictions for which verification has been completed.

Verification confirms only that the submitted licensing information matched the applicable official directory at the time of review. It does not constitute a guarantee of current good standing, professional competence, disciplinary history, or continued authorization to practice law.

Certain professional information, such as a member's name, law firm, professional title, location, and verified jurisdictions, may be visible to other approved IDX members through the member's profile.

Bar admission numbers submitted for administrative verification will not be displayed publicly by IDX unless a specific platform feature expressly provides for such disclosure and members are informed accordingly.

4. How Information Is Shared

IDX is designed as a private professional network. Access to member discussions and professional networking features is intended to be restricted to approved members and authorized administrators.

IDX may disclose information in the following circumstances.

A. With Other Approved Members. Approved members may be able to view professional profile information, discussion posts, comments, and materials intentionally shared within the platform.

Members should understand that information made available to other members may be viewed, copied, downloaded, or retained by those individuals, even when such conduct violates IDX's Terms of Use.

B. With IDX Administrators. Authorized administrators may access information reasonably necessary to:

• Review and approve membership applications.

• Verify attorney credentials.

• Manage accounts.

• Investigate reported content.

• Enforce platform rules.

• Address technical or security issues.

Administrative access should be limited to information reasonably necessary for the performance of these responsibilities.

C. With Service Providers. IDX may use third-party service providers for services such as website hosting, authentication, database management, file storage, email delivery, and platform security.

These providers may process information on IDX's behalf as necessary to provide their services, subject to applicable contractual, confidentiality, and legal requirements.

D. For Legal and Safety Reasons. IDX may disclose information when reasonably necessary to:

• Comply with applicable laws, regulations, or valid legal process.

• Respond to lawful requests from courts or governmental authorities.

• Investigate suspected fraud, security incidents, or unlawful activity.

• Protect the rights, property, or safety of IDX, its members, or others.

• Establish, exercise, or defend legal claims.

IDX does not guarantee that information will remain confidential when disclosure is legally required.

5. Confidentiality of Member Discussions

IDX is intended to provide a private environment in which members can engage in candid professional discussions.

Under IDX's Terms of Use, members are generally prohibited from screenshotting, distributing, republishing, or otherwise disclosing another member's content outside the platform without appropriate authorization, subject to specified legal and professional exceptions.

However, IDX cannot guarantee that other members will comply with these restrictions or that information shared within the platform will remain confidential.

Members should avoid posting client-identifying information, privileged communications, protected work product, or other information that cannot lawfully or ethically be disclosed.

The existence of this Privacy Policy and IDX's restricted membership structure does not establish attorney-client privilege or any other legal privilege over information shared through the platform.

6. Data Security

IDX recognizes the importance of protecting the personal and professional information entrusted to the platform.

IDX seeks to implement reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information it processes and the risks associated with its operations.

Depending on the platform's configuration, such safeguards may include access controls, authentication measures, restricted administrative permissions, secure communications, and monitoring for suspicious activity.

Nevertheless, no website, electronic storage system, or method of transmitting information over the internet can be guaranteed to be completely secure.

IDX cannot guarantee that unauthorized access, data breaches, technical failures, or other security incidents will never occur.

Members are responsible for maintaining the confidentiality of their account credentials and should promptly report suspected unauthorized account access or security concerns.

7. Data Retention

IDX retains personal and professional information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, subject to applicable legal requirements and operational needs.

Retention periods may vary depending on the type of information and the purpose for which it was collected. For example:

• Membership information may be retained while an account remains active.

• Attorney verification records may be retained to document the verification process.

• Posts, comments, and uploaded materials may remain available until deleted by the member or removed by an administrator.

• Moderation records may be retained to support platform integrity, security, and enforcement of the Terms of Use.

• Certain technical or security records may be retained as necessary to investigate incidents or comply with applicable obligations.

Following account deletion or termination, IDX may retain certain information where reasonably necessary for legal compliance, security, dispute resolution, enforcement of its Terms, or other legitimate purposes permitted by applicable law.

Deletion from the platform does not necessarily remove copies previously downloaded or retained by other members.

8. Member Privacy Rights and Choices

Subject to applicable law and available platform functionality, members may have the ability or right to:

• Access or review personal information associated with their accounts.

• Update or correct inaccurate professional information.

• Request correction of attorney verification information.

• Delete their own posts, comments, or uploaded materials.

• Request account deletion.

• Request information concerning the collection, use, or disclosure of their personal information.

• Exercise additional privacy rights provided by applicable law.

IDX may need to verify a member's identity before responding to certain requests.

Some requests may be subject to legal exceptions or limitations, including requirements to retain information for security, legal compliance, or dispute resolution.

Members may submit privacy-related requests through the contact method identified in Section 14.

9. Cookies and Similar Technologies

IDX may use cookies or similar technologies where necessary to support authentication, maintain login sessions, remember account preferences, and provide essential website functionality.

Depending on the platform's configuration, additional technologies may be used for performance monitoring, security, or usage analytics.

Where applicable law requires notice or consent for nonessential cookies or similar technologies, IDX will provide the required information and choices.

Members may be able to manage certain cookies through their browser settings. Disabling cookies necessary for authentication or other essential functions may affect their ability to use IDX.

10. Third-Party Websites and Services

IDX may contain links to external websites, official government resources, court decisions, professional publications, or other third-party materials.

IDX does not control the privacy practices, security measures, or content of these external websites.

Members who access third-party resources are encouraged to review the applicable privacy policies and terms of those services.

This Privacy Policy does not govern the independent information practices of third-party websites.

11. Children's Privacy

IDX is intended exclusively for licensed attorneys actively practicing immigration law outside the federal government and designated platform administrators.

The platform is not directed toward children or individuals under the age of 18.

IDX does not knowingly solicit personal information from children for membership purposes.

If IDX becomes aware that personal information has been collected from a child in circumstances requiring deletion under applicable law, it will take appropriate steps to address the information.

12. Data Breaches and Security Incidents

If IDX becomes aware of a security incident involving personal information, it will assess the nature and scope of the incident and take appropriate responsive measures.

Where required by applicable law, IDX will provide notice to affected individuals, regulators, or other appropriate parties within the applicable legal timeframes.

The nature and timing of any notification will depend on the circumstances of the incident and applicable legal requirements.

Members who suspect unauthorized access to their accounts or improper disclosure of information should promptly contact IDX through its designated support or privacy contact channel.

13. Changes to This Privacy Policy

IDX may update this Privacy Policy periodically to reflect changes in its operations, technology, information practices, or legal obligations.

When material changes are made, IDX will provide notice as required by applicable law, including through the platform or by email where appropriate.

The revised Privacy Policy will identify its most recent update date.

Members are encouraged to review this Privacy Policy periodically to remain informed about IDX's information practices.

14. Contact Information

Members who have questions, concerns, or requests relating to this Privacy Policy or IDX's handling of personal information may contact the IDX administrator or designated privacy contact.

Privacy Contact: support@idxlaw.com

Website: idxlaw.com

Operating Entity: Immigration Defense Exchange (IDX)

IDX will review privacy-related inquiries and respond as required by applicable law.