This Privacy Policy explains how Flowfirm ("we," "us," or "our") collects, uses, and protects information in connection with our AI phone-intake service for law firms.
When you call a law firm that uses Flowfirm and complete an intake, we collect the information you provide during that call, which may include your name, phone number, email address, and details about your legal matter. We collect this information to process your intake and deliver it to the firm.
We do not sell, rent, or share your mobile phone number or SMS opt-in data with third parties or affiliates for their own marketing or promotional purposes.
We use trusted third-party providers to operate the service, such as messaging and scheduling platforms. These providers process information only as needed to perform services for us and are bound by confidentiality obligations. They are not permitted to use your information for their own marketing.
If you consent during your call, we send a follow-up text with scheduling information. Message and data rates may apply. You can reply STOP at any time to opt out, or HELP for help. See our SMS / Text Messaging Policy for full details.
We retain intake information for as long as needed to provide the service to the law firm and to meet legal and operational requirements, after which it is deleted or de-identified.
You may opt out of text messages at any time by replying STOP. To ask what information we hold about you, or to request deletion, contact us using the details below.
Flowfirm is built for law firms, and the firm's own data is protected as strictly as caller data:
Your calls are never used to train AI models. Call recordings and transcripts are processed solely to produce your firm's intake briefs and follow-ups, and recordings are purged after 90 days.
Your documents stay in your own storage. Case documents remain in the firm's own Google Drive. Flowfirm indexes them so your staff can search and ask questions; it does not take custody of them, and disconnecting your storage removes our access.
Each firm's data is isolated. Intake records, briefs, and document indexes are scoped to your firm. One firm's data is never available to another firm's dashboard or assistant.
Infrastructure. Flowfirm runs on established cloud providers that maintain SOC 2 certification for their infrastructure. Access to production systems is restricted and credential-protected.
Confidentiality. We treat all firm and caller information as confidential, consistent with the professional-responsibility obligations our customers carry. A services agreement governing confidentiality and data handling is available to every firm at signup.
Questions about this Privacy Policy can be sent to efrim@atlantaaiexperts.ai.