Privacy Policy

Effective: September 10, 2026

Vendor Roll is run by Law Box LLC, Fort Worth, Texas. This policy says what we collect, why, and who sees it. It is written to be read.

What we collect

If you only browse: standard server logs (IP address, browser, pages requested) held by our hosting provider, and aggregate, cookieless page analytics. We do not run advertising trackers.

If you create a lawyer account: your name, email address, password (stored hashed by our authentication provider, never readable by us), the bar number and licensing state you give us, and the public record we retrieve from that state's attorney directory to confirm the license (name, status, firm, city). We keep that record so we can show the licensed-attorney mark on your reviews without checking again every time.

If you create a vendor account: your name, email, password, business name, and the listing details you enter.

If you act on the site: the reviews you write and how you chose to attribute them, price information you report, quote requests you send (need, timeline, message, and the contact name and phone you enter), recommendations you make, listing claims, dispute forms, removal requests, and the emails we send you.

If you buy a plan: Stripe collects your card. We never see the card number. We keep the Stripe customer and subscription identifiers and the plan you are on.

Vendor analytics count profile views and clicks per listing per day. They are counts, not visitor profiles. We do not track individual visitors across the site.

Where listing data comes from

Most listings did not come from the vendor. They come from state licensing rolls, court rosters, professional association directories, and vendors' own websites, all publicly available. For individuals we publish business contact details only and never a home address. If you are listed and want a correction or removal, use the link on your listing; a person reads every request.

How we use it

To run the directory: showing listings, publishing reviews, routing quote requests to vendors, confirming lawyer licenses, moderating what is submitted, and preventing abuse. To bill vendors who buy a plan. To send the emails the site depends on: confirmations, moderation results, quote requests, review notifications, and a follow-up asking how a vendor you requested a quote from worked out. To fix problems: server errors are reported to the site's administrator with the request path and the error, not with your form contents.

We do not sell personal information. We do not share it with advertisers. We do not use it to train AI models. When a lawyer pastes a vendor's website into the recommend form, the text of that public web page and our category list are sent to Anthropic's API to draft the listing. Nothing about you or your account is sent with it. Anthropic does not train on API inputs; see its API data policy for retention terms.

Who sees what

Reviews are public, attributed the way you chose. "Anonymous" reviews show as "a verified attorney," and we do not reveal the reviewer to the vendor or anyone else except under legal compulsion. Price reports are shown only as ranges pooled across firms.

Quote requests go to the vendor you chose. On a free listing the vendor sees your firm's metro, need, and timeline, and your identity is revealed when the vendor upgrades. On a paid listing the vendor sees the request in full, including the contact name and phone you entered.

Vendors who claim their listing see counts of views and clicks, never who viewed.

Service providers who process data for us: Supabase (database and authentication), Vercel (hosting and analytics), Resend (email), Stripe (payments), Anthropic (AI drafting of recommended listings), and the state attorney directories we query to confirm licenses. Each receives only what its job requires.

We will disclose information if the law requires it, to enforce our terms, or to protect the safety of a person.

Your choices

You can edit your account details on the account page. You can ask us to delete your account by emailing hello@vendorroll.com; we will delete it and its personal information, except that published reviews remain, attributed as you chose at the time, because other lawyers relied on them and vendors have responded to them, and except for records we must keep for billing or legal reasons. If you wrote a review and want it taken down, tell us; we will remove it unless doing so would leave a misleading record, and we will explain if we decline. Vendors cannot have a review removed by asking; they may dispute it from the listing page.

Listed businesses can request corrections or removal from the listing page. We do not require an account for that.

We send transactional email only, so there is no marketing list to unsubscribe from.

Retention and security

We keep account data while the account exists and for a short period after deletion for backups to cycle. Reviews are kept as long as the directory runs. Quote requests are kept for the vendor's records. Rate-limit and analytics counters are aggregate and short-lived. Daily database backups are retained by our database provider for a rolling window.

Data is encrypted in transit and at rest by our providers. Access to the database is limited to the administrator. No system is perfectly secure; if we learn of a breach affecting your personal information, we will tell you.

Children, location, changes

The site is for professionals and is not directed to children under 18. It is operated from Texas for users in the United States. We may update this policy; the date at the top moves when we do.

Questions or requests: hello@vendorroll.com.