Terms of use

1. Introduction and Acceptance Welcome to ImmigForge, operated by Mendoza Immigration ("Company," "we," "us," or "our"). These Terms of Service ("Terms") govern your access to and use of our immigration case management platform, including our website, mobile applications, and related services (collectively, the "Service"). By accessing or using the Service, you agree to be bound by these Terms and our Privacy Policy. If you do not agree to these Terms, you may not access or use the Service. 2. Description of Service ImmigForge provides immigration case management services including but not limited to:   - Client portal for document submission and case tracking   - Secure document storage and management   - Electronic signature capabilities   - Appointment scheduling and management   - Billing and payment processing   - Communication tools (email, SMS, WhatsApp)   - AI-powered document analysis and form preparation 3. User Accounts and Registration To access certain features of the Service, you must register for an account. You agree to:   - Provide accurate, current, and complete information during registration   - Maintain and promptly update your account information   - Maintain the security of your password and account   - Notify us immediately of any unauthorized access or use   - Accept responsibility for all activities under your account 4. Data Collection and Types of Information We collect and process the following types of data to provide our services:   - Personal Identification Information: Full name, date of birth, Social Security Number, Alien Registration Number (A-Number), USCIS receipt numbers, passport numbers, and government-issued identification   - Contact Information: Email addresses, phone numbers, physical addresses, and emergency contacts   - Immigration Information: Immigration status, visa history, USCIS receipt numbers and case status data, travel records, and case-related documents. USCIS receipt numbers are used to check the status of your pending immigration cases through the official USCIS Case Status API (Torch API). We periodically query this API using your receipt numbers to detect status changes and notify you of updates.   - Financial Information: Billing addresses, payment card information (processed securely through Stripe), and payment history   - Family Information: Spouse, children, and family member details relevant to immigration cases   - Employment Information: Employer details, work history, and income documentation   - Medical Information: When required for specific immigration applications (e.g., medical exam results)   - Geolocation Data: IP addresses and general location for security and fraud prevention   - Device and Usage Data: Browser type, operating system, and interaction with our Service 5. How We Use Your Data We use your data for the following purposes:   - Processing and managing your immigration case   - Preparing and filing immigration forms and applications   - Communicating with you about your case status and appointments   - Processing payments and maintaining billing records   - Providing customer support and responding to inquiries   - Improving our services through aggregated, anonymized analytics   - Complying with legal obligations and regulatory requirements   - Preventing fraud and ensuring platform security De-identified, Anonymized, or Pseudonymized Data: We may use de-identified or anonymized data for research, analytics, and service improvement purposes. Such data cannot be used to identify you personally and is used solely to improve our services and understand immigration trends. 6. Data Sharing and Third Parties We share your data only with the following entities and for the following purposes:   - U.S. Citizenship and Immigration Services (USCIS): For filing immigration applications and forms on your behalf   - Other Government Agencies: As required for your immigration case (e.g., Department of State, Department of Labor)   - Stripe, Inc.: For secure payment processing - they receive only necessary payment information   - Google Cloud Services: For secure document storage and AI-powered document analysis   - Twilio: For SMS and WhatsApp communication services   - xAI (Grok): For AI-powered document analysis and form assistance All third parties with whom we share data are contractually bound to our privacy standards and may only use your data for the specific purposes outlined above. 7. No Sale of Data WE DO NOT SELL YOUR DATA. We do not sell, rent, or trade your personal information to any third party for profit, monetary transactions, or any other purpose. Your data is used solely to provide our immigration legal services to you. 8. Your Data Sharing Choices You have the following choices regarding data sharing:   - Communication Preferences: You may opt out of marketing communications while still receiving essential case-related notifications   - SMS/WhatsApp: You may disable SMS or WhatsApp communications in your account settings   - Required Sharing: Certain data sharing is required to process your immigration case (e.g., filing with USCIS). If you do not consent to this sharing, we cannot provide our services Risks and Benefits: Sharing your data with government agencies is necessary for processing your immigration case. The benefit is the advancement of your legal matter. The risk is that government agencies are subject to their own privacy policies and data practices. 9. Impact on Others Your immigration case may involve information about family members, employers, or other individuals. By providing this information, you confirm that:   - You have the authority to share their information for immigration purposes   - You have informed them that their information will be included in your case   - You understand that their information may be filed with government agencies as part of your case Family history and relationship information shared may have implications for other family members' immigration matters. Please consider this when providing information. 10. Third-Party Data Use Restrictions Third-party use or disclosure of your information (including de-identified, anonymized, or pseudonymized data) is strictly prohibited for any reason without your active consent. All third parties are contractually bound to these terms and our privacy policy. 11. Data Breach Notification In the event of a data breach that affects your personal information:   - We will notify you within 72 hours of discovering the breach via email and/or SMS   - We will provide a description of the breach and the types of data affected   - We will outline steps we are taking to address the breach   - We will provide instructions for actions you may take to protect yourself   - We will offer resources for credit monitoring or identity protection if appropriate 12. Data Retention Policy We retain your data according to the following schedule:   - Active Clients: All data is retained while your account is active and your case is ongoing   - Completed Cases: Case files are retained for 7 years after case completion, as required by legal and professional standards   - Dormant Accounts: If your account is inactive for 3 years with no ongoing case, we will notify you before any data deletion   - Financial Records: Billing and payment records are retained for 7 years for tax and legal compliance   - Communication Logs: Email and message logs are retained for 3 years 13. Permanent Data Deletion You may request permanent deletion of your data by:   - Submitting a written request to privacy@mendozaimmigration.com   - Contacting our office at the phone number provided on our website   - Using the "Request Data Deletion" feature in your account settings Upon receiving your request, we will:   - Verify your identity   - Process your request within 30 days   - Permanently delete your data from our systems   - Instruct third-party processors to delete your data   - Confirm deletion in writing Note: Some data may be retained if required by law or for legitimate legal purposes (e.g., ongoing litigation, regulatory requirements). 14. Transfer of Ownership In the event of a merger, acquisition, bankruptcy, or sale of our company or assets:   - We will notify you at least 30 days before any transfer of your data   - The new owner must agree to honor these Terms and our Privacy Policy   - If the new owner's policies differ materially, you will be given the option to:     ◦ Securely download all your data     ◦ Request secure disposal of your data     ◦ Have your data transmitted to another service provider   - You will receive clear notification of any changes in ownership 15. Account Closure To close your account:   - Log into your account and navigate to Settings > Account > Close Account   - Or email us at support@mendozaimmigration.com with your request   - Or contact our office directly Upon account closure, you may request to download your case files before deletion. Data subject to legal retention requirements will be retained securely and deleted upon expiration of the retention period. 16. Changes to Terms and Policies When we make changes to these Terms or our Privacy Policy:   - We will notify you via email at least 30 days before changes take effect   - We will provide a plain-language summary of what has changed   - Material changes require your active consent before they apply to you   - You will be prompted to review and accept updated terms upon your next login   - If you do not agree to the changes, you may close your account and request data deletion We will obtain your active consent for any material changes to how we collect, use, or share your data. 17. Security Measures We implement industry-standard security measures including:   - AES-256 encryption for sensitive data at rest   - TLS 1.3 encryption for data in transit   - Multi-factor authentication options   - Regular security audits and penetration testing   - Role-based access controls   - Secure cloud infrastructure with compliance certifications 18. Attorney-Client Privilege and Confidentiality Communications between you and Mendoza Immigration through this platform are protected by attorney-client privilege to the extent applicable under law. We take measures to preserve the confidentiality of these communications in compliance with the Rules of Professional Conduct. Professional Conduct Compliance: Our practices comply with the confidentiality requirements of:   - Arizona: ER 1.6 (Confidentiality of Information) - We make reasonable efforts to prevent inadvertent or unauthorized disclosure of client information   - Washington: RPC 1.6 - We implement reasonable measures to prevent unauthorized access to client information and comply with Advisory Opinion 202402   - Oregon: RPC 1.6(c) - We maintain reasonable safeguards to prevent inadvertent or unauthorized disclosure of client information 19. AI and Technology Use Disclosure In accordance with Arizona, Washington, and Oregon State Bar guidance on artificial intelligence and technology use in legal practice:   - AI-Assisted Services: We use AI tools (including xAI Grok) to assist with document analysis, form preparation, and case management. All AI-generated work is verified by licensed attorneys before use   - Confidentiality Safeguards: AI tools we use are contractually bound to maintain confidentiality of client data. We use commercial legal AI platforms with appropriate data protection measures   - Client Consent: By using our services, you consent to the use of AI-assisted tools for document analysis and form preparation. You may opt out by contacting our office   - Human Oversight: Per Oregon OSB Formal Opinion 2025-205 and Arizona AI guidance, all AI-generated content is reviewed and verified by qualified legal professionals before submission or use   - Data Anonymization: When using AI tools, we implement anonymization and redaction protocols for sensitive client information as required by state bar ethics rules 20. Staff Training and Vendor Requirements In compliance with state bar requirements and the Oregon Consumer Information Protection Act (ORS 646A.622):   - Staff Training: All employees receive regular training on confidentiality obligations, cybersecurity best practices, and ethical handling of client information   - Vendor Agreements: All technology vendors and service providers are contractually obligated to maintain confidentiality and implement appropriate security safeguards for client data   - Access Controls: We regularly review user access privileges and implement role-based access controls to limit data exposure   - Metadata Management: We scrub metadata from documents shared externally to prevent inadvertent disclosure of confidential information per Oregon OSB Formal Opinion 2011-187 21. State-Specific Requirements Arizona Clients We comply with Arizona Supreme Court Administrative Order 2024-33 regarding AI use and Arizona ER 1.6 confidentiality requirements. Our practices align with State Bar of Arizona Practical Guidance on Generative AI. Washington Clients We comply with Washington RPC 1.6 and WSBA Advisory Opinion 202402 regarding data protection and AI use. If your case involves health-related information, we comply with the Washington My Health My Data Act (effective March 31, 2024) including obtaining explicit consent for health data collection. Oregon Clients We comply with Oregon RPC 1.6(c) technology security requirements, OSB Formal Opinion 2025-205 regarding AI tools, and the Oregon Consumer Information Protection Act (OCIPA/ORS 646A.622) information security program requirements. California Clients (CCPA/CPRA) We comply with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). California residents have the right to know what personal information we collect, request deletion, opt out of data sales (we do not sell your data), exercise rights without discrimination, correct inaccuracies, and limit the use of sensitive personal information. To exercise these rights, contact privacy@mendozaimmigration.com or call (480) 666-5553. Verified requests will be processed within 45 days. 22. Limitation of Liability To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service. Our total liability shall not exceed the fees paid by you in the 12 months preceding the claim. 23. Governing Law These Terms shall be governed by and construed in accordance with the laws of the State of Arizona, without regard to conflict of law principles. For clients in Washington and Oregon, applicable state bar rules and consumer protection laws of those states shall also apply to matters of professional conduct and data privacy. 24. Contact Information For questions about these Terms, please contact us: Mendoza Immigration Email: legal@mendozaimmigration.com Privacy Inquiries: privacy@mendozaimmigration.com Ethics Inquiries: ethics@mendozaimmigration.com

25. Acknowledgment By using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service and our Privacy Policy. You also acknowledge our use of AI-assisted tools as described in Section 19 and consent to the same.