Skip to content
AJL Attorney Service
Request services

Privacy Policy

Effective date: 2026-06-15 · Last updated: 2026-07-17

This Privacy Policy explains what information AJL Attorney Service (“AJL,” “we,” “us,” or “our”) collects when you visit ajlservice.com (the “Site”) or use our legal-support services, why we collect it, and how we handle it. We designed our data practices to be minimal by default. We do not run advertising trackers and we do not sell or share your personal information.

Our work is service of process, court filing, skip tracing, and courier service for California law firms. Because of that work, we handle two kinds of personal information: information about the people who contact and engage us (firm staff), and information about third parties — the people who are served or located — which the requesting firm provides to us. Section 1 describes both, and Section 8 explains the privacy rights that apply to each.

1. Information you provide directly

a. When you contact us

When you submit the contact form on this Site, you give us:

  • Your name. Required.
  • Your email address. Required — this is how we reply.
  • Your phone number. Required — so we can reach you about your request.
  • The message you write. Including any details about your matter, recipient, court, deadline, or other context you choose to share.
  • The service you selected (service of process, court filing, skip tracing, or courier service) and the page you submitted from, if applicable.

We use this information solely to respond to your inquiry, set up an account if you engage us, and maintain a record of our correspondence.

b. When you place an order (account holders)

Placing an order is not public — it happens after we set up an account for your firm and you log in to our secure client portal. When a firm member submits an order, we collect:

  • Requester details — the submitting person’s name, email, phone, and firm.
  • Order details — the service type, the court, county, case number, case caption, special instructions, and any notes you add.
  • Uploaded documents — the legal documents you attach for service or filing (for example, a summons, complaint, or subpoena).

We use order information only to perform the service you requested, communicate with your firm about it, produce the resulting proof of service or filing record, and keep the records the work requires.

c. Information about third parties

To perform service of process and skip tracing, the requesting firm necessarily provides us with personal information about people who are not our customers and who have not visited this Site — the person to be served or located. This can include:

  • Name and address of the person being served or the subject being located, and the case caption (e.g. Plaintiff v. Defendant), which reveals that the person is involved in a legal matter.
  • Any personal details contained in the uploaded legal documents needed to carry out the service.

We collect and process this information only to perform the lawful service our client has engaged us to perform, and to document it as the law requires. We do not use it for marketing, and we do not sell or share it. With respect to this third-party information, AJL acts as a service provider to the requesting law firm. If you are the subject of a service or trace and wish to exercise a privacy right, see Section 8.

2. Information collected automatically

When you load any page on the Site, our hosting provider (Cloudflare) automatically processes the following:

  • Network metadata — IP address, approximate region (derived from IP), and user-agent string. Used by Cloudflare to deliver the page and to mitigate abuse (DDoS, bot traffic).
  • Request logs — the URL you requested, the HTTP method, response status, and timing. Retained by Cloudflare per their standard retention; we use them only to debug operational issues.

When you submit the contact form, place an order, or send feedback, we additionally store a one-way hashed version of your IP address — a salted SHA-256 hash, never the raw IP. The hash lets us detect repeat submissions from the same source for spam prevention; it cannot be reversed to identify the original address.

3. Cookies and similar storage

The public Site uses browser local storage (not cookies) to remember one thing: your acknowledgment of this Privacy Policy and our Terms of Use, plus your preference for analytics. That record stays on your device and is not transmitted to us.

Our client portal uses a single session cookie to keep you logged in after you sign in with a magic link. It is strictly necessary for the portal to function, expires automatically, and is not used for tracking or advertising.

We do not currently load any third-party analytics, advertising, or social-media trackers. If we enable privacy-respecting analytics in the future (for example, Cloudflare Web Analytics, which aggregates anonymized page-view data without cookies and without per-visitor identifiers), this policy will be updated and the banner will ask for your consent before any beacon is loaded.

4. Service providers (sub-processors)

We rely on a small number of vendors to operate. Each acts as our data processor:

  • Resend — our transactional email provider. We use Resend to deliver the emails our service depends on: contact-form notifications, order notifications, feedback notifications, and the magic-link sign-in emails for the portal. Depending on the email, this may include a sender’s name and email address and a summary of the related matter. Resend processes this only to deliver the message. See Resend’s Privacy Policy.
  • Cloudflare — our hosting, database, file storage, and content-delivery provider (see Section 5). Cloudflare acts as our data processor and does not access the contents of your submissions. See Cloudflare’s Privacy Policy.
  • Cloudflare Workers Observability — our application logging service, provided by Cloudflare. We use it to record operational events for debugging and abuse prevention. We avoid writing personal information to these logs; recipient identifiers are hashed or omitted.
  • Byte Clarity — our technology partner. Byte Clarity builds and operates this Site and the client portal on our behalf, and its process-serving operations platform supports our field work. In that role it holds working copies of service-of-process records — which may include a copy of a filed proof of service and the served party’s name and service address — and processes them only to provide those services to us. As an operational-integrity measure, that platform may keep a short-term, write-once (immutable) copy of such records; an immutable copy cannot be altered or selectively erased before it expires on its fixed schedule (see Section 7).

5. Where your data is stored

Your information is stored on Cloudflare infrastructure located in the Western North America region (Cloudflare WNAM, in the United States):

  • Cloudflare D1 (database) — contact and feedback submissions, order records, account and firm profiles, and audit records.
  • Cloudflare R2 (private file storage) — the legal documents uploaded with an order. The R2 bucket is private; document bytes leave it only through an authenticated, session-guarded download by authorized staff or the firm that owns the order.
  • Cloudflare KV (short-lived key store) — portal sign-in sessions and magic-link tokens, which expire automatically.

Cloudflare encrypts this data at rest and acts as our data processor.

6. What we do not do

  • We do not sell, rent, lease, or otherwise share your personal information with third parties for marketing purposes.
  • We do not load third-party advertising or social-media trackers on this Site.
  • We do not require an account to view this Site or to contact us.
  • We do not use your submission or uploaded documents to train any machine-learning model.

7. How long we keep it

We keep personal information only as long as we need it for the purpose it was collected, and then delete or de-identify it in line with our internal records-retention schedule. The schedule sets a retention period for each category of data — contact inquiries and feedback are kept for a shorter period than orders, uploaded documents, and order history, which we keep for the longer period appropriate to litigation-support records (such as a proof of service and the documents we served or filed). The specific periods are maintained in that schedule and are available on request; we may adjust them as our legal obligations require.

You may request earlier deletion at any time (see Section 8); we honor such requests except where we are required to retain a record to complete a service already underway or to meet a legal obligation. Audit records of privacy and account actions are kept as our accountability record and are not removed by a deletion request.

Where a service provider listed in Section 4 keeps a short-term immutable (write-once) operational copy of a record, that copy cannot be altered or selectively erased before it expires by design; deletion at that provider completes when the copy reaches the end of its fixed retention window. We pass deletion requests through to our service providers in every case.

8. Your California privacy rights (CCPA / CPRA)

If you are a California resident, you have the rights below. These apply both to people who contact or engage us and, with respect to the information described in Section 1(c), to people who are the subject of a service or trace.

  • Know / Access. Request the personal information we have collected about you.
  • Data portability. Receive that information in a portable, readily usable format.
  • Delete. Request deletion of personal information we have collected. When we delete, we remove it across our storage — including the database records and any uploaded documents in file storage — subject to the legal-retention exceptions in Section 7 (for example, a record we must keep to complete or document a service).
  • Correct. Request correction of inaccurate personal information.
  • Opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of — but the right stands.
  • Limit the use of sensitive personal information. Request that we limit our use of sensitive personal information to what is necessary to provide our services.
  • Non-discrimination. We will not deny services, charge different prices, or provide a different quality of service because you exercised a privacy right.

To exercise any of these rights, email support@ajlservice.com. We may need to verify your identity before responding — for example, by confirming the email address you used with us, or, for a third-party subject, the details needed to locate the correct record — so that we do not disclose information to the wrong person. You may also use an authorized agent.

We aim to respond within 10 business days, and in every case within the 45 calendar days California law allows, which we may extend by a further 45 days where permitted, with notice to you.

9. How to reach us about privacy

For any privacy question, deletion request, correction, or complaint, email support@ajlservice.com or call (916) 603-1643.

10. Changes to this policy

If we make material changes to this Privacy Policy, we will update the “Last updated” date above and, when appropriate, prompt you to re-acknowledge before continued use of the Site.