Privacy policy

Effective 12 October 2026

recruiting.law is a research and workspace tool for legal recruiters. This page describes the information it holds, where that information comes from, who it is shared with and how to ask us to change or remove it. Questions go to admin@recruiting.law.

Lawyers who appear in our research data

The Research section lists lawyers at US law firms. Everything in it comes from public sources: the firm's own website (name, title, office, practice areas, education, bar admissions and the bio the firm publishes), firm press releases, federal court dockets from CourtListener and RECAP, and filings on SEC EDGAR. We also keep dated copies of firm rosters, including copies held by the Internet Archive, so that a move between firms can be shown with its date.

We do not collect lawyers' information from LinkedIn, Martindale or Avvo, and we do not buy contact lists. Contact details are shown only to signed-in customers and are never published in bulk.

If you are a lawyer and something we show about you is wrong or out of date, or you would like your profile removed, email admin@recruiting.law from an address we can match to you. We correct errors within a few working days. A removed profile is kept off the site and out of future harvests of your firm's website.

Customers and their users

When an organization signs up, we hold the name, username and email address of each user, a hash of their password (never the password itself) and their role. Each sign-in is recorded with its time and IP address. Admins can see an audit log of who viewed, exported, changed or deleted records in their organization.

The site sets one cookie, a session cookie that keeps you signed in. There is no advertising, no tracking pixel and no third-party analytics. The public home page loads its typefaces from Google Fonts, which means Google receives your IP address when that page loads; the signed-in workspace does not.

Your organization's own data

The Recruiting section (candidates, contacts, employers, searches, mail, files, notes and activity) is your organization's data. You decide what goes in it. We hold it on your behalf to run the service for you and for no other purpose. We do not sell it, show it to any other customer, combine it with another customer's data or use it to train AI models.

Each organization's records live in a separate database that only that organization's users can reach. Inside the organization, what a person can see and change depends on their role. Our own staff open a customer's records only to operate the service, to fix a problem, or when the customer asks us to.

Who else handles data

• Amazon Web Services (United States) hosts the servers, databases and stored files.
• Purelymail sends the email the service produces, such as alerts and daily digests.
• OpenRouter and the AI model providers it routes to answer questions typed into the Inquiry panel and read documents a user submits for a resume or LPQ check. Only the question or document in hand is sent, along with the records needed to answer it.
• Microsoft and Google, only if your organization uses them to sign in or to sync mail and calendars.
• A web-fetching service we use to read public firm websites receives the addresses of those public pages and nothing from customers.

How long we keep it

Account and organization data is kept while the organization is a customer. When an organization leaves, we delete its records within 30 days of its request, after giving it the chance to export them. Nightly backups are kept for seven days and then overwritten, so deleted data leaves the backups within a week after that. Sign-in records and the audit log are kept for up to one year.

Security

All traffic to recruiting.law is encrypted with HTTPS. Passwords are stored only as salted hashes. Organizations are kept apart at the database level, and access inside an organization follows each user's role. Changes, exports, deletions and sign-ins are logged. If we learn of a breach that affects your data, we will tell you without undue delay.

Your choices and rights

You can ask to see, correct, export or delete the personal information we hold about you by emailing admin@recruiting.law. If your information is in a customer's own records, we will pass the request to that customer, since they control those records. Depending on where you live, privacy laws such as the California Consumer Privacy Act may give you further rights, and we will honour them.

Changes

If we change this policy in a way that matters, we will update the date at the top and tell customers by email before the change takes effect.