Legal
Privacy on this website
What this site collects, who processes it, and how to change your mind. Written to describe what actually happens rather than to cover every eventuality.
This page is about the website, not the platform
If your firm uses OneCounsel, your case data and the protected health information in it are governed by your agreement with us - a data processing agreement and a business associate agreement - not by this page. This covers people visiting onecounsel.legal.
What the site collects
Two cookies, before you decide anything
Analytics and advertising tags do not load until you choose. Before that the site sets two of its own: oc_consent, recording only your choice and its date, which is what stops us asking again on every page; and oc_attr, which records the page you arrived on, when, and any campaign tags in the link that brought you. It holds a random id for the visit, not for you, and no name, address or anything you type. It is how we can tell which page led to an enquiry, and it is never shared with anyone.
What you type into the demo form
Your name, work email, firm name and firm size, plus a phone number and message if you add them. It reaches our own systems on AWS so that someone can reply to you, and it is the only place on this site where an email address is recorded.
Anti-spam checks
The form uses hCaptcha, which processes technical signals about the request to tell a person from a bot. It runs on the form only, not across the site.
Searches that find nothing
A search on this site runs in your browser and is not sent anywhere. The one exception is a search that returns no results: the words are sent to us, with no id and unconnected to your visit, so we can see which questions the site fails to answer and write the missing page. Anything resembling an email address, a phone number or a long run of digits is stripped before it is stored, and the rest is deleted after 90 days.
Analytics, if you accept them
Google Analytics, Microsoft Clarity and PostHog. Clarity and PostHog record how pages are used; both are configured to mask text and form inputs rather than capture what you type.
Who processes it
Amazon Web Services
Hosts this site, delivers it, and holds the logs behind it - including what you submit through the demo form. Our own account, in the United States.
Sanity
The content management system this site's words are stored in and served from. It holds our copy rather than anything about you.
Sentry
Records errors when something on this site breaks, so we find out before you have to tell us. It receives the technical detail of the failure - the page, the browser, the stack trace - and we do not send it your name, your email or anything you typed into a form.
hCaptcha (Intuition Machines)
Checks that a form submission came from a person. It runs on the demo form only and sees technical signals about that one request.
Google Analytics, Microsoft Clarity, PostHog
Measure how the site is used, and only once you accept analytics. Each is loaded separately and each can be absent - a vendor we have not finished configuring does not load at all.
LinkedIn
Measures whether a visit followed one of our ads, and only once you accept advertising. Accepting analytics does not accept this.
Zoho
Runs the chat window, which is how you reach a person from any page. It loads whatever you decide about analytics, because a site where declining measurement also removes the ability to ask a question has made a privacy choice cost something it should not.
What Zoho does not yet do
Our CRM is part of the same Zoho account, and it is not connected to this site. Nothing you submit through the demo form reaches it today. It joins the sentence above in the same change that connects it, which is the rule we hold ourselves to rather than a promise about the future.
Who is responsible for this
One Counsel Inc. decides what this website collects and why, which makes us the controller of it. We are a Delaware corporation, file number 10390487, and our address is 1100 Circle 75 Parkway Southeast, Atlanta, Georgia 30339, United States.
For anything about your data - a copy of it, a correction, deletion, or a question about this page - write to info@onecounsel.legal. We answer within a month, which is the deadline the law sets rather than a target we invented.
Why we are allowed to
Analytics and advertising - your consent
Nothing loads until you accept, and you can withdraw at any time from the footer. Withdrawing is as easy as giving, which is why the link is on every page rather than buried here.
The demo form - to answer you
You asked us to get in touch, so we use what you typed to do that. In GDPR terms, steps taken at your request before entering a contract. Nothing about it is inferred from your behaviour.
Anti-spam - our legitimate interest
Checking a submission came from a person, so the form stays usable. The alternative is no check at all, and an unprotected form becomes a relay within days.
Nothing is automated
No decision about you is made by a machine, and we do not profile visitors. There is no scoring model behind the form.
How long we keep it
A demo enquiry is kept for 24 months from your last contact with us, then deleted. Long enough that a firm which asked once and bought later is not a stranger, short enough that it is not indefinite. “As long as necessary” is the usual answer here and it tells you nothing.
Your cookie choice lasts twelve months, because that is how long the cookie recording it lasts. Analytics sits on each vendor's own schedule, which is why the retention worth knowing is the shortest one available on each.
Your rights, and how to use them
See it, correct it, delete it
Ask for a copy of what we hold, have it corrected if it is wrong, or have it erased. We will not ask why.
Restrict or object
Ask us to stop a particular use while a question is resolved, or object outright where we rely on legitimate interest.
Take it with you
Where you gave it to us and we process it by consent or for a contract, you can have it in a portable format.
Withdraw consent, at any time
Use Cookie choices in the footer. Withdrawing does not undo what was collected while consent was in force - which is exactly why nothing is collected before you give it.
Complain to a regulator
If we get this wrong you can complain to your data protection authority: in the UK the ICO, in the EEA the authority where you live. You do not have to come to us first, though we would rather you did.
Do not sell or share - California
We do not sell personal information. Accepting advertising lets LinkedIn measure whether a visit followed one of our ads, which California treats as sharing for cross-context behavioural advertising. Declining advertising in the banner, or Cookie choices in the footer, IS the opt-out - there is no separate form to hunt for.
Where it goes
We are a United States company and the infrastructure runs in the United States, in AWS's Ohio region. Every processor named above operates there too. If you are visiting from the UK or the EEA your data is transferred to the United States, and that transfer relies on the standard contractual clauses each of those vendors publishes.
Said plainly rather than omitted, because a policy silent on transfers reads as though none happen.
Children
This site sells software to law firms and is not directed at children. We do not knowingly collect anything from anyone under 16. If you believe a child has sent us something, write to info@onecounsel.legal and we will delete it.
Changing your mind
Withdrawing consent has to be as easy as giving it, so there is a Cookie choices link in the footer of every page. Use it and the tags stop; nothing is remembered beyond your new choice. Every cookie the site can set is listed in the cookie policy.
To ask what we hold about you, or to have it deleted, use the contact form and say what you are asking for. It reaches a person rather than a queue.
This page describes what the site does today and is not a substitute for legal advice. It is reviewed as the site changes rather than written once and left - and when it changes materially we say so here rather than editing quietly.
Last updated 15 August 2026. Governed by the laws of the State of Georgia.