Privacy Policy

1. Who We Are

FirmEdge ("we," "us," "our") provides AI-powered administrative automation for law firms. Our website is firmedge.io and our contact email is hello@firmedge.io.

2. What Data We Collect

Data Type	What It Includes	Why We Collect It
Account Data	Name, email, firm name, phone number	To set up and manage your account
Firm Data	Practice areas, firm size, location	To configure services for your firm
Client Data	Your clients' names, emails, phone numbers, case info	To run automations on your behalf
Call Data	Call logs, transcripts, recordings	To provide AI receptionist services
Payment Data	Billing info — processed by Stripe; we never store card numbers	To process subscription payments
Usage Data	Dashboard activity, feature usage	To improve our services
Website Data	IP address, browser type, pages visited	Standard web analytics

3. How We Use Your Data

We use your data exclusively to:

• Provide and operate our services
• Send automated communications on your behalf (follow-ups, reminders, reports)
• Process payments and manage your subscription
• Notify you of important service updates
• Respond to your support requests
• Improve our platform (using anonymized, aggregated data only)

We never: sell your data, use it for advertising, share it with competitors, or use identifiable client data to train AI models.

3a. Call Recording Data

When our AI receptionist (Alex) handles calls on behalf of your law firm, the following applies:

• Recording disclosure. Alex announces at the start of each call: "This call may be recorded for quality purposes."
• All-party consent states. FirmEdge provides the recording disclosure, but the law firm is solely responsible for compliance with all-party consent requirements in states including California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington.
• Retention. Call recordings and transcripts are retained for up to 90 days and may be deleted upon request. To request deletion, email hello@firmedge.io with subject "Call Recording Deletion — [Your Firm Name]."
• Access. Call data is accessible only to the law firm and FirmEdge personnel required to deliver services.

4. Attorney-Client Privilege

FirmEdge recognizes that information processed through our platform may be subject to attorney-client privilege and attorney work product protection. We treat all such information as strictly confidential. Our staff access to client data is limited to what is technically necessary to provide services, and all personnel are bound by confidentiality obligations.

5. Data Sharing & Third Parties

We share data with the following trusted service providers only to the extent necessary to deliver our services:

Provider	Purpose	Data Shared
Vapi	AI call handling	Call audio, transcripts
Anthropic	AI text generation	Anonymized prompts
SendGrid	Email delivery	Recipient email, message content
Stripe	Payment processing	Billing information
Twilio	SMS delivery	Phone number, message content

We do not share your data with any other third parties without your explicit consent, except as required by law.

6. Data Security

We protect your data with:

• Encryption in transit: All data transmitted via HTTPS/TLS
• Encryption at rest: Sensitive data encrypted in storage
• Access controls: Strict authentication and authorization
• Daily backups: Automated encrypted backups
• Monitoring: Continuous security monitoring
• Breach notification: We notify you within 72 hours of any confirmed breach

7. Data Retention

• Active accounts: Data retained for the duration of your subscription
• Call recordings: Retained for up to 90 days; deletion available upon request
• After cancellation: Data retained for 30 days for export, then deleted on request
• Payment records: Retained as required by tax law (7 years)

8. Your Rights & How to Exercise Them

You have the right to:

• Access: Request a copy of all data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format (CSV or JSON)
• Objection: Object to specific uses of your data
• Restriction: Request that we restrict processing of your data while a dispute is resolved

How to Request Data Deletion

Email hello@firmedge.io with the subject line: "Data Deletion Request — [Your Firm Name]". We will:

• Confirm receipt within 2 business days
• Complete deletion within 30 days
• Provide written confirmation of deletion upon request

Note: We may retain certain data as required by law (e.g., payment records for tax purposes). We will specify what data is retained and why in our deletion confirmation.

For all other rights requests, email hello@firmedge.io. We respond to all requests within 30 days.

9. California Privacy Rights (CCPA)

California residents have additional rights under CCPA/CPRA, including the right to know what personal information is collected, the right to delete, and the right to opt out of sale (we do not sell data). To exercise California privacy rights, contact us at hello@firmedge.io.

9a. New Jersey Privacy Rights

FirmEdge operates in New Jersey and complies with applicable New Jersey consumer protection laws, including the New Jersey Consumer Fraud Act. We do not engage in deceptive trade practices. We work to ensure all representations about our services are accurate, and we correct any identified inaccuracies promptly. If you believe we have violated any applicable NJ consumer protection law, contact us at hello@firmedge.io. New Jersey residents may also file complaints with the NJ Division of Consumer Affairs.

10. Cookies

Our website uses cookies for session management and analytics. Marketing pages (including /pricing, the firm analyzer, and the landing page) load Google Analytics 4 (measurement ID G-1T90PF1KE1) through a consent banner that is denied by default. Analytics fires only after you explicitly accept. You can also block tracking using your browser's built-in tracking-prevention or "Do Not Track" controls. The client portal never loads GA4.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We will notify you by email at least 30 days before making material changes to this policy. Your continued use after the effective date constitutes acceptance.

13. Contact Us

Privacy questions or requests: hello@firmedge.io
FirmEdge · firmedge.io