Legal
Privacy Policy
Effective June 1, 2026
Impact Witness is a documentation platform operated by Law Box LLC ("Impact Witness," "we," "us," or "our"). We provide personal injury law firms with a service that lets their clients record the day-to-day impact of an injury by text message, so the firm can document that impact for the client's case. This Privacy Policy explains what information we collect, how we use it, and how we protect it.
Impact Witness is used in connection with an existing attorney-client relationship. The information handled through the service is treated as confidential and, where applicable, as attorney work product and privileged client communication belonging to the client's law firm. For data that firms and their clients submit through the service, the law firm is the controller and Law Box LLC acts as its processor; this policy describes our practices and supplements the firm's own privacy notices.
Information we collect
Depending on how the service is used, we collect:
- Firm and user account information — names, email addresses, firm name, and role for the attorneys and staff who use the platform.
- Client contact information — a client's name and mobile phone number, entered by their law firm after the client has consented to text-message communications.
- Client-submitted content — the text messages a client sends to document their recovery, along with timestamps and any injury or treatment context the firm provides at intake.
- Usage information — basic technical and log data needed to operate and secure the service.
How we use information
- To operate the service and deliver messages between a client and their law firm.
- To organize and categorize a client's submissions and generate a documentation summary that the client's firm reviews and uses for the case.
- To send service messages a client has consented to — an automatic delivery receipt and follow-up questions and check-ins that their legal team reviews and sends.
- To secure, maintain, support, and improve the service.
We never send marketing, advertising, or promotional text messages, and we do not use the service to solicit anyone.
Mobile information and text messaging
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are never sold, rented, or shared with any third party.
Information sharing with the subprocessors that help us deliver the service (for example, our messaging carrier) is limited to what is necessary to operate the text-messaging program, and those providers are contractually prohibited from using it for their own marketing. A client can stop messages at any time by replying STOP, and can reply HELP for help.
How AI is used
We use artificial intelligence to categorize submissions and to help draft follow-up suggestions and the documentation summary for the firm. The AI never messages a client on its own — every substantive message a client receives is reviewed and sent by the firm. This processing is configured to minimize exposure: every AI call sets store: false and organization-level API logging is disabled, so prompts and responses are not stored for retrieval, and client content is never used to train any AI model.
How we share information
We do not sell personal information. We share it only:
- With the client's own law firm — that is the purpose of the service. A firm can only access the data of its own clients.
- With service subprocessors who operate the platform on our behalf (messaging, hosting, database, and no-training AI providers — store: false with organization-level logging disabled), under agreements that restrict their use of the data to providing those services.
- When required by law, or to protect rights, safety, and the integrity of the service.
Data security and tenancy
Data is encrypted in transit and at rest. Each firm's data is isolated from every other firm's through row-level security, so one firm can never see another firm's clients or communications. Access is limited to authorized users of the firm that owns the data.
Data retention
We retain client documentation for the duration of the firm's use of the service for that client and as needed for the firm's legal and record-keeping purposes. A firm may request deletion of its data, subject to the firm's own retention obligations.
Your rights
Depending on your state (for example, under the Texas Data Privacy and Security Act), you may have the right to access, correct, delete, or obtain a portable copy of your personal information, and to appeal a decision about such a request. For content submitted through the service, the law firm is the controller — direct those requests to the firm, and we will assist them. For other requests, contact admin@impactwitness.com.
Children's privacy
Impact Witness is intended for use by licensed attorneys and their adult clients. It is not directed to children under 18, and we do not knowingly collect information from them.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and post the updated policy here.
Contact us
Questions about this Privacy Policy or how your information is handled? Email admin@impactwitness.com. See also our Terms & Conditions.