Privacy Policy

This Privacy Policy explains how HITTEKK LLC, an Arizona limited liability company doing business as AttorneyLogic (“AttorneyLogic,” “we,” “us”), collects, uses, shares, protects, and deletes personal information. It covers:

1. Our customers: the law firms and attorneys who sign up for AttorneyLogic, and the staff they invite to HQ, their dashboard.
2. People who contact our customers through a website, phone number, or text program we run for a law firm: anyone who fills out a form, uses the chat, books a consultation, calls, texts, signs up for updates, or applies for a job on a firm’s site.
3. Visitors to our own website, getattorneylogic.com, including people who try our free website preview.

If you contacted a law firm, that firm controls your information. We handle it on the firm’s behalf, as its service provider, only to run its website and deliver your message to it. The firm’s own privacy notice, on its website, explains how the firm uses your information. Please send questions or requests about it to the firm first. If you contact us, we will pass your request to the firm and help it respond.

Summary

• We collect what we need to run our service, bill our customers, and keep it secure.
• We do not sell personal information, share it for targeted advertising, or use it to build advertising profiles.
• No one’s information is used to train AI models, ours or anyone else’s.
• Mobile numbers and text-message consent are never shared with third parties or affiliates for their marketing.
• A message sent to a law firm goes only to that firm. Each firm’s data is kept separate from every other firm’s.
• We delete information on a schedule, which is set out in Section 8.

1. Information we collect

From our customers and their staff

• Sign-up details: name, firm name, email, phone, licensing state, bar number, practice area, the plan and design chosen, whether the firm has a website, domain, and logo, the firm’s current website address, and any Brand Kit or content-move choices.
• Agreement records: the date, time, and version of the Terms of Service agreed to, and confirmation that the person may sign up for the firm.
• Billing details: plan, billing period, payment history, billing address, and tax details. Card and bank numbers are entered on Stripe’s pages and handled by Stripe. We never see or store full card or bank account numbers.
• Onboarding materials: logo, photos, attorney names, bios, and photos, writing samples, fees, office details, and any logins the firm chooses to store in our encrypted vault.
• Content and settings: website text, blog drafts, reviews the firm chooses to display, videos, settings, support and feedback requests, and Care plan requests.
• Account and security data: HQ logins, two-step login setup, the firm you selected, actions taken in HQ (an activity log), staff access to vault entries, and browser notification subscriptions if you turn them on.
• Connected accounts, if the firm connects them (see Section 5): Google Business Profile performance numbers, Google Search Console search data, Google Ads account data, the Google account email used to connect, and the firm’s chosen practice-management or intake tool.
• Marketing source: how the person who signed up first found our website (Section 1, third group).

From people who contact a law firm through a site we run (on the firm’s behalf)

• What you send: for example your name, phone, email, a short description of your matter, answers to the firm’s intake questions, a court date if you give one, and your message.
• Chat: your conversation with the firm’s website chat. The conversation is saved only if it ends with you sending your contact details to the firm; otherwise nothing from it is kept.
• Calls: for calls to a firm’s tracked number or answered by Usher, our AI receptionist: your phone number, the caller name your phone company provides, the time, the length, and whether the call was answered. Calls are not recorded. If Usher answers, your spoken answers to its questions (such as your name, what your matter is about, and a good time to call back) are turned into text and saved for the firm.
• Texts: if you sign up to receive texts from a firm, your phone number, name if given, the consent wording you agreed to, the date, time, and page, and whether you opted out. If a firm texts you back after a missed call or to confirm a booking, the message and its delivery status.
• Bookings: the consultation time you choose, your name, email, phone, matter, and any note.
• Job applications: your name, email, phone, note, and the résumé you upload.
• Newsletter sign-ups: your email and name if given.
• How you found the site: the page you first landed on, the site that referred you, and ad campaign tags (such as a Google Ads click ID), stored in your browser and sent with your message so the firm knows which sources work.
• Security data: your IP address is used briefly to check for bots and limit spam. We store only a scrambled, one-way version of it (a salted hash), never the address itself, and delete it within a day for most forms.
• Visit counts: which pages are viewed and how visitors arrived (for example, from a search engine or an ad), counted per day without cookies and without storing anything that identifies you.

From visitors to getattorneylogic.com

• What you send us: the sign-up form, the contact form, emails, and the website address and optional email you enter in our free website preview.
• The preview: if you ask for a preview of your firm’s website, we read the public pages at the address you give us and copy public text and images from them to build the preview. The preview and its images are deleted after 7 days.
• How you first found us: the page you first landed on, the referring site, and ad campaign tags, stored in your browser and sent to us only if you sign up.
• Security data: as above, a one-way hash of your IP address to stop spam and repeated attempts, deleted within a day.
• Analytics: we may use Google Analytics and Google Ads conversion measurement on getattorneylogic.com to understand which pages and ads bring in customers (see Section 7).

2. How we use information

• To provide the Service: host websites, deliver leads to the right firm, send alerts, reminders, reports, and service emails and texts, run HQ, the editor and assistant, Guardrail, and add-ons, and complete work a firm requests.
• To verify that a customer is a licensed attorney in good standing.
• To bill customers, collect sales tax, and prevent fraud, spam, and abuse.
• To keep the Service secure: detect and stop attacks, bots, and misuse, and investigate problems.
• To support customers and improve the Service, using account and usage information about our customers (not the contents of firms’ leads).
• To measure our own marketing: to learn which of our own pages and ads bring in customers.
• To comply with the law, enforce our Terms, and protect people’s rights and safety.

We use information that people send to a law firm only to provide the Service to that firm, as the firm instructs, and for security and legal compliance. We do not use it for our own marketing or for any other customer.

3. AI and your information

Some features use an AI provider, Anthropic, to draft website and blog text, translate pages, research a firm’s market, summarize leads for the firm, answer website visitors in chat, read a firm’s existing website during a preview or a content move, and fill in onboarding answers from a firm’s documents.

• No training. No firm’s data, and no visitor’s, caller’s, or client’s information, is used to train AI models, ours or anyone else’s. Our AI provider processes information only to return a result to us, under commercial terms that do not allow it to train on our data.
• Minimal data. We send only what a feature needs. For example, lead summaries use the matter description and message, not the person’s name, email, or phone.
• Human review. A lawyer at the firm reviews AI drafts before they are published.

4. Who we share information with

We do not sell personal information or share it for cross-context behavioral advertising. We share it only as follows.

Service providers (subprocessors)

These companies help us run the Service. Each may handle personal information only to provide its service to us, under contracts that require them to protect it.

Provider	What it does	What it handles
Supabase	Database, file storage, sign-in, and server functions	All account, content, and lead data
Cloudflare	Website hosting, security, bot checks (Turnstile), and domains	Website traffic, IP addresses during bot checks
Stripe	Payments, billing, invoices, and sales tax calculation	Customer billing details
Resend	Email delivery	Alerts, receipts, notices, and emails to leads
Twilio	Phone numbers, calls, texts, and speech-to-text for Usher	Phone numbers, call details, text messages, callers’ spoken answers
Anthropic	AI features (Section 3)	Text needed for each feature
Google	Places data (ratings and business lookup), and the Google services a firm connects (Section 5)	Firm business details; data from connected accounts
GitHub	Building each firm’s website from its approved content	Published website content (no lead or visitor information)
DataStackLogic, our sister company	Designs Brand Kits; provides the Google Ads access Advocate uses to read and manage a firm’s account	Firm brand materials; the firm’s Google Ads data
Web browser push services (such as Google, Apple, Mozilla)	Delivering browser notifications HQ users turn on	A short notification (first name and topic of a new lead)

We will update this list and email customers at least 30 days before adding a new provider that handles lead data, except in an emergency.

At a firm’s direction

• Practice-management and intake tools. If a firm connects Clio Grow or Lawmatics, each new lead’s details are sent to the firm’s own account there.
• Google tags on a firm’s site. If a firm adds its own Google Analytics, Google Ads, or Google Tag Manager ID, its site loads Google’s tags (Section 7). Google receives page views and a notice when a form is sent or a phone number is tapped, never what the visitor wrote.
• Partners. We share a customer’s details with a partner, such as DataStackLogic or Zynk Media Group, only when the customer asks that partner to contact them.

Other cases

• Law and safety: when the law requires it, such as a valid subpoena or court order (we will resist overbroad requests for a firm’s lead data and tell the firm where the law allows), or when needed to protect someone’s safety or our rights.
• Business transfer: as part of a merger, sale, or reorganization of our business, under this policy, with notice to customers.

Text messaging. We do not share, sell, or provide mobile phone numbers or text-message consent data to third parties or affiliates for marketing or promotional purposes. Information may be shared with service providers that help deliver messages and support, such as Twilio.

5. Google and other accounts a firm connects

A firm can connect accounts so we can show more in HQ. Each connection is the firm’s choice and can be disconnected anytime in HQ or in the account’s own settings.

Connection	What we access	Why
Google Business Profile (permission: manage Business Profile, used read-only)	The list of the firm’s locations to find the right one, and its performance numbers: calls, direction requests, and website clicks	The firm’s monthly report
Google Search Console (read-only)	The searches the firm’s own website appears for, clicks, and position	The firm’s monthly report
Google sign-in (your Google email)	The email of the Google account used to connect	To show which account is connected
Google Ads (Advocate)	Campaigns, search terms, spend, conversions, and settings in the firm’s account	To check, report on, and manage the account as the firm agreed
Clio Grow or Lawmatics	Only the ability to add new leads to the firm’s account	To send leads into the firm’s own system

Google user data. AttorneyLogic’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google data only to provide the features the firm can see in HQ, such as its monthly report.
• We transfer it only as needed to provide those features, for security, to comply with the law, or as part of a merger or sale with notice.
• People at AttorneyLogic do not read it, except with the firm’s permission (for example, to fix a problem it reports), for security, to comply with the law, or in combined numbers for internal operations.
• We never use Google data for advertising, never sell it, and never give it to data brokers or other information resellers.
• We do not use Google data to train or improve AI models, and do not store it alongside data used for that purpose.
• We store monthly totals, not raw activity. Connection keys are encrypted. When a firm disconnects, we revoke our access with Google immediately and delete the stored key. Monthly numbers already in past reports stay in those reports until the firm’s data is deleted.
• If we ever want to use Google data in a new way, we will update this policy and ask the firm first.

6. Our role for law firms’ data

For information people send to a law firm through the Service, the firm decides why and how it is used, and we act as its service provider and processor. We process it only on the firm’s instructions and as our Terms of Service describe. We do not sell or share it, keep it longer than allowed, use it outside our service to the firm, or combine it with data from other customers. Firms can view, export, and delete their leads in HQ at any time.

7. Cookies and browser storage

Our own code does not set cookies, on our website, on HQ, or on the websites we run for firms. We use your browser’s storage only for what the sites need to work:

Where	What is stored	Why	How long
getattorneylogic.com and firm websites	How you first found the site (landing page, referring site, ad tags)	So a sign-up or message can record its source	Until you clear your browser storage
Firm websites	A one-tab marker so a visit with several pages counts once	Cookieless visit counts	Cleared when the tab closes
Firm websites	Whether you closed an announcement banner	So it stays closed	Cleared when the tab closes
HQ	Your sign-in session, the firm you selected, and whether the menu is open	To keep you signed in and remember your view	Until you sign out or clear storage

Third parties. Some features load services that may set their own cookies or collect technical data:

• Cloudflare Turnstile, a bot check on our forms and on firms’ contact and sign-up forms.
• Google Analytics, Google Ads, and Google Tag Manager, on getattorneylogic.com if we turn them on, and on a firm’s site only if the firm adds its own ID. The firm’s privacy page says so while they are on.
• Google Maps, if a firm shows a map on its contact page.
• YouTube, only after you press play on a firm’s video (we use YouTube’s privacy-enhanced mode until then).

Global Privacy Control. Because we do not sell or share personal information for targeted advertising, you do not need to opt out. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any sale or sharing, which we already honor.

8. How long we keep information

Information	How long
Customer accounts, content, and leads	While the account is active. After cancellation, 90 days so the firm can download its site and leads, then deleted.
Leads a firm deletes or marks as spam	30 days, then permanently deleted
Vault logins	Deleted 30 days after the firm’s site launches
Website previews (from our free preview)	7 days, then deleted with their images
Sign-ups that never become customers	12 months, then deleted
Hashed IP addresses used to stop spam	1 day
Payment event records from Stripe	90 days
Website uptime and form checks	90 days
Billing, invoice, and tax records	As long as tax and accounting laws require (generally up to 7 years); after an account is deleted, its sign-up record is reduced to the plan, date, and amount paid
Backups	Overwritten on a rolling basis, within about 30 days

9. Security

We use reasonable administrative, technical, and physical safeguards, including:

• encryption in transit (HTTPS) and at rest;
• encrypted storage for vault logins and connection keys, with every staff view of a vault entry logged;
• two-step login for every HQ user;
• database rules that keep each firm’s data separate;
• access limited to people who need it, and logged;
• bot checks and rate limits on public forms; and
• security headers and regular checks of our sites.

No system is perfectly secure. If a security incident affects personal information, we notify the affected firm without undue delay, and in any case within 72 hours after confirming it, and we notify affected people and regulators where the law requires, including under Arizona’s data breach law.

10. Your rights and choices

Customers can view, update, export, or delete account information in HQ or by emailing us. Owners can download all of the firm’s data under Team > Download all your data.

People who contacted a law firm should ask that firm first. If you contact us, we will forward your request to the firm and help it respond.

Your privacy rights. Depending on where you live, you may have the right to:

• know what personal information we have about you and get a copy;
• correct it;
• delete it;
• opt out of its sale, sharing for targeted advertising, or certain profiling (we do none of these); and
• appeal if we decline your request.

To make a request, email hello@getattorneylogic.com with the subject “Privacy request.” We will verify your identity by confirming details we already have, such as your email address, and respond within 45 days (or the time your state’s law sets). You may use an authorized agent, who must show your written permission. If we decline your request, you can appeal by replying to our answer with the subject “Privacy appeal”; we will respond within 60 days. We will not treat you differently for using your privacy rights.

Sensitive information. We do not ask for sensitive information, such as health, financial account, or government ID numbers, and we ask people not to send it through forms or chat. Someone describing a legal matter may still mention sensitive facts; that information goes only to the firm, is used only to provide the Service, and is never used to infer characteristics about anyone.

Emails and texts. Every follow-up email from a firm has an unsubscribe link. Reply STOP to any text to stop texts from that program, or HELP for help. Message frequency varies. Message and data rates may apply.

11. Children

The Service is for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has sent us information, email us and we will delete it.

12. Where information is processed

We are based in the United States, and our service providers store and process information in the United States and may process it in other countries where they operate. If you use the Service from outside the United States, your information will be processed in the United States.

13. Changes to this policy

We will post changes here and update the date at the top of this page. For material changes, we will email customers at least 30 days before they take effect, and where the law requires, we will ask for consent.

14. Contact us

HITTEKK LLC, doing business as AttorneyLogic
21168 E Ocotillo Rd #1195, Queen Creek, AZ 85142
hello@getattorneylogic.com (subject “Privacy request” for privacy matters)

Google Analytics on this website

getattorneylogic.com uses Google Analytics to understand how visitors use the site. Google may set cookies and collect information such as the pages you visit, your approximate location, and your device. We send Google a notice when you request a preview or sign up, never what you wrote. How Google uses this information. You can opt out with the Google Analytics opt-out browser add-on.