Privacy Policy

Who we are

CrashFirst (crashfirst.com) is a service of Roviq LLC, Boston, Massachusetts. Roviq LLC runs this website, takes the calls and sends the texts described below. In this policy, "we" and "us" mean Roviq LLC.

CrashFirst is not a law firm and does not give legal advice. Using this site does not create an attorney-client relationship.

Questions or requests: [email protected]. You can also call (877) 781-1888 during call-back hours (8am to 8pm Central).

What we collect, and how

From the call-back form

Your phone number and the state where the crash happened are required. Everything else is optional: your first name, the city or ZIP code of the crash, and your tick on the optional text-message box. The form also records when you sent it and which page you were on.

From the short questions after the form

After you send the form, you can answer a few optional questions: what is on your mind, the kind of crash, when it happened, whether you were hurt (yes, no or not sure), and whether you already have a lawyer. You can skip them. If you answer, we store the answers with your request.

From your device

When you send a form we also store your IP address and your browser's user-agent text (the browser and device type), plus the result of the Cloudflare Turnstile check that tells people from bots. We use them to stop spam and to keep a record of when and how consent was given. Our web host also keeps ordinary server logs.

From calls and voicemail

When we call you or you call us, our phone provider handles the call and sees the numbers involved. What you say on a call may be written down by the person who takes it. On a call we may ask about your insurance and your treatment, and we take notes. We do not record live calls. If a call goes to voicemail, the voicemail is recorded and transcribed automatically, and we delete voicemail recordings and transcripts after 30 days. Calls to our number may be forwarded to a CrashFirst team member's phone.

From text messages

If you text us, we keep the message, your number and the time. If you tick the optional box we may text you about your request (see Text messages below).

What we ask you not to send

Please do not put medical records, diagnoses, insurance numbers, Social Security numbers or other sensitive details in the form or in a text. You do not need them to ask for a call. Tell the person on the phone only what you are comfortable sharing.

Why we use it

• To call you back about your request and to be useful when we do.
• If you ask us to, to connect you with a participating attorney.
• To text you about your request, only if you ticked the box.
• To keep a record of your requests and consents, and to answer your questions or deletion requests.
• To block spam and abuse, keep the site working and fix problems.
• To follow the law and to protect ourselves or others when we have to.

We do not use your information for advertising, and we do not build ad profiles.

Who we share it with

Participating attorneys, at your direction

CrashFirst connects people with participating attorneys. A person from CrashFirst calls you, explains how the process usually goes and asks whether you want to be connected. Only if you say yes, we share your name, phone number, the state and city of the crash and what you told us about it with a participating attorney licensed in your state, so they can reach you. If you say no, we do not share it.

Participating attorneys pay CrashFirst a set fee for each connection. You never pay us. We treat the connection as a disclosure we make because you asked for it, not as a sale of your data to advertisers or data brokers. Some privacy laws define a "sale" broadly, to include sharing data for money. If a law were to treat the connection that way, you stay in control: tell us no on the call, or ask us not to connect you. After we connect you, the attorney's handling of your information is governed by that attorney's own duties and policies.

Service providers

• Cloudflare hosts this site, runs the Turnstile bot check, stores requests in its database service (D1) and delivers our internal email notifications.
• Twilio provides our phone number and carries calls, voicemail recording and transcription, and text messages.
• Google runs the mailbox that receives our internal notifications about calls and voicemails.
• Our internal lead console. Each request is also sent to a private system run by Roviq LLC that our team uses to follow up on calls and keep records. It runs on Cloudflare, not on another hosting company, and it is not a separate company.

These providers may use the information only to provide their services to us.

What we do not do

We do not sell your information to data brokers or advertisers. We do not share your information for advertising. We do not run analytics or advertising tools on this site.

Other disclosures

We may disclose information when the law requires it, to respond to a valid legal request, to protect safety or prevent fraud, or as part of a sale or reorganization of the business. In that case the information stays subject to this policy.

Text messages

This is the program description for our text messages.

• Program. Texts from CrashFirst, a service of Roviq LLC, about the request you made on this site. No marketing or promotional texts.
• How you opt in. By ticking the optional box on the call-back form. Texting is never required to use CrashFirst. Your wording, the time, the page, your IP address and browser text are saved as the consent record.
• How often. Message frequency varies.
• Cost. Msg and data rates may apply.
• Stop. Reply STOP at any time to opt out. We send one confirmation and then no more texts. Reply HELP for help, or contact us at [email protected].
• Carriers. Supported carriers are not liable for delayed or undelivered messages.
• Not shared. We do not share or sell mobile opt-in data or text-message consent with any third party or affiliate for their marketing or promotional purposes. If you ask us to connect you with a participating attorney, we give that attorney your name, number and what you told us so they can contact you about your matter. We do not pass on your text-message opt-in or consent, and it does not allow the attorney to text you. Information is shared with the providers that deliver our texts only so they can deliver them.

The words next to the checkbox are:

Optional text messages. You can also text me, and use automated technology to reach this number, about my request. CrashFirst will message me about my request only. Msg frequency varies. Msg and data rates may apply. Reply HELP for help, STOP to opt out. Consent is not required to use CrashFirst. See the Privacy Policy and Terms.

The call you ask for on the form does not depend on the box. Calls are made because you asked for one. If you do not want calls or texts, tell us and we will stop.

Cookies and similar storage

Our own code sets no cookies, and we use no analytics, advertising or tracking tools. Cloudflare, which hosts the site and runs the bot check, may set or read strictly necessary security cookies or similar signals to protect the site from bots. These are not used for advertising. The site loads its fonts and images from its own servers. It does use two kinds of storage in your browser:

• Session storage remembers, for the length of the visit only, the first name, phone number and text choice you just entered, the situation you picked and the request id (cf_id) of the request you just sent, so the next screen can greet you and continue your request. Your browser deletes it when you close the tab.
• Local storage remembers which boxes you ticked on a checklist so they are still ticked when you come back. It stays until you clear your browser data. Nothing in it is sent to us.

The Cloudflare Turnstile check loads from Cloudflare when a form is on the page. Cloudflare handles those signals under its own privacy policy.

How long we keep it

We keep your request, your answers, call and voicemail records, and your consent record for as long as we need them to follow up with you, to answer questions about what happened, and to prove that you gave or did not give consent. We do not yet delete requests automatically after a fixed period. We do delete on request: tell us, and we will delete your information within 45 days, except records the law requires us to keep. Deleting also covers the copy in our internal console. We may keep a minimal record that you asked to be deleted, and your consent record, so we do not contact you again.

Records of failed deliveries contain no names or phone numbers. Our spam filter keeps a copy of the submissions it blocks, which can include a name and phone number. We keep those until they are deleted on request or during cleanup.

Security

Pages and forms are sent over encrypted connections. Requests are stored with Cloudflare, in the site's database and in our internal lead console, and only people on our team who need them to do their work can open them. The form has a bot check and rate limits. No system is perfectly safe, and we cannot promise absolute security. If we learn of a breach that affects you, we will tell you as the law requires.

Children

CrashFirst is for adults. It is not directed to anyone under 18, and we do not knowingly collect information from anyone under 13. If you think a child sent us information, contact us and we will delete it. A parent or guardian may ask for a call about a child's crash.

Health information

People sometimes tell us they were hurt. The form asks only whether you were hurt (yes, no or not sure), and you can skip that question. We treat anything you say about injuries as sensitive. We use it to understand your request and, only if you ask us to connect you with an attorney, we pass it along to that attorney. We do not use it for advertising, and we share it only as described in Who we share it with.

CrashFirst is not a doctor, hospital, health plan or other "covered entity" under HIPAA, so HIPAA does not govern what you tell us. You can ask us to delete health details at any time, and we will treat the request the same way as any deletion request. Please do not send medical records through the form.

Your choices and rights

• Ask what we have, correct it or delete it. Use the delete form on the How we're paid page (enter the phone number you gave us), or email [email protected]. For access or a correction, email us from the address you used or tell us the phone number you gave, so we can find your request. We reply and act within 45 days, usually sooner. We may need to confirm it is you, for example by calling the number on the request.
• Stop calls or texts. Tell the caller, reply STOP to a text, or email us.
• Say no to an attorney connection. You choose on the call. Saying no costs you nothing.
• Appeal. If we turn down a request, you can reply and ask us to look again.

We will not treat you worse for using these rights.

State privacy laws

Tennessee. The Tennessee Information Protection Act applies only to businesses with more than $25 million in annual revenue that also handle the personal information of 175,000 or more Tennessee residents (or 25,000 or more while earning most of their revenue from selling it). We do not believe we meet those thresholds, so we do not claim the law applies. We honor the rights above for Tennessee residents anyway.

Alabama and Oklahoma. Both states passed comprehensive privacy laws in 2026. They take effect after this page was written: Oklahoma on January 1, 2027 and Alabama on May 1, 2027. Neither is in force today. We expect to honor the same rights for residents of those states either way.

South Carolina. South Carolina has no comprehensive consumer privacy law in force. We honor the rights above for South Carolina residents.

Other states. People in other states may have rights under their own laws. Tell us where you live in your request and we will do what that law requires.

Changes to this policy

If we change this policy, we post the new version here with a new date. If a change affects how we use information you already gave us, we will tell you before we use it that way. This version is effective November 10, 2026.

Contact

Roviq LLC, Boston, Massachusetts. Email [email protected] for privacy requests or [email protected] for anything else. Phone (877) 781-1888, 8am to 8pm Central.