Privacy Policy
LISA, the Legal Input Suite Application, is practice management software for law firms, made by Legal Intake Suites, LLC, a North Carolina limited liability company ("LISA," "we," "us"). This policy explains what information LISA collects, how it is used, and the choices available to the people who use it. It applies to lisaforlawyers.com, app.lisaforlawyers.com, and every page LISA serves on a law firm's behalf.
Who the Information Belongs To
LISA is used by law firms to manage their own clients, prospective clients, schedules, documents, billing, and staff. The law firm (the "Firm") that subscribes to LISA owns and controls the information it puts into LISA. LISA processes that information on the Firm's instructions and does not use it for any purpose of its own. If you are a client or prospective client of a law firm that uses LISA, that firm's own privacy practices govern how it handles your information, and questions about your file should go to the firm.
Information LISA Collects
- Account information. The names, email addresses, roles, and login credentials of the Firm's staff who use LISA.
- Firm data. Everything the Firm enters into or uploads to LISA in the course of its work: prospective client intake forms, bookings, client and matter records, contracts and signatures, documents, billing and trust accounting records, correspondence, tasks, and staff records such as time-off requests and onboarding paperwork.
- Information from people who book with a Firm. When a member of the public books a consultation or appointment through a Firm's LISA booking page, LISA collects the name, contact details, and intake answers that person provides, together with the appointment details, on behalf of that Firm.
- Technical information. Login times, IP addresses, browser type, and records of actions taken in LISA. These are kept for security and so the Firm has an audit trail of who did what.
Information From Google
A Firm may choose to connect its Google Workspace account to LISA. When it does, LISA asks Google for permission to do the following, and nothing more:
- Identify the connected account. LISA receives the email address and basic profile of the Google account that was connected, so it can show the Firm which account is in use and confirm the connection belongs to the person who made it.
- Send email on the Firm's behalf. When the Firm sends a client a booking confirmation, appointment reminder, contract, payment request, document for review, or similar message from inside LISA, LISA sends that message through the connected Google account so it comes from the Firm's own address. LISA does not read, search, store, or display the contents of the Firm's mailbox through this permission.
- Read and manage calendar events. LISA reads the connected calendars to find open times for consultations and meetings, creates calendar events for appointments booked through LISA, and updates or cancels those events when a booking changes. LISA does not read the contents of events it did not create beyond what is needed to determine availability.
LISA's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: information obtained from Google is used only to provide the features above to the Firm that connected the account. It is not used for advertising, is not sold, is not used to train artificial intelligence or machine learning models, and is not read by any person at LISA except with the Firm's permission to resolve a support request or as required by law.
A Firm can disconnect its Google account at any time from its LISA settings, or by removing LISA from the account's connected apps at myaccount.google.com/permissions. When it does, LISA deletes the stored Google access credentials for that account.
How Information Is Used
LISA uses information only to operate the service for the Firm: to run intake and bookings, keep the Firm's records, send the Firm's messages, generate the Firm's documents, track the Firm's billing and deadlines, support the Firm's staff, keep the service secure, and respond to the Firm's support requests. LISA does not sell information, does not use Firm data for advertising, and does not use Firm data to train artificial intelligence or machine learning models.
Who Information Is Shared With
LISA does not share Firm data with anyone except the service providers it relies on to run the software, each of which handles information only on LISA's instructions:
- Supabase, for database and file storage.
- Netlify, for hosting the application.
- Google, to send email and manage calendars when a Firm connects its Google account.
- Stripe, to process subscription payments from Firms. LISA does not store card numbers.
- Dropbox, when a Firm chooses to store documents in its own Dropbox account.
LISA may also disclose information when required by law, court order, or a lawful request from a public authority, and will tell the affected Firm unless the law prohibits it.
How Information Is Protected
Firm data is encrypted in transit and at rest. Each Firm's data is separated from every other Firm's data, and a Firm's staff can only reach the information that Firm has given them permission to see. Google access credentials are stored encrypted and separately from Firm records. Access by LISA's own staff is limited to what is needed to support the service and is logged.
How Long Information Is Kept
Firm data is kept for as long as the Firm subscribes to LISA. When a subscription ends, the Firm may export its data, and LISA deletes it ninety days after the subscription ends unless the Firm asks for it sooner or the law requires LISA to keep it longer. Backup copies are deleted on their normal rotation after that. Google access credentials are deleted as soon as the Firm disconnects its account.
Your Choices
A Firm can view, correct, export, and delete its own data in LISA, and can disconnect any connected account, at any time. Members of the public who provided information to a law firm through a LISA booking page should contact that firm directly; LISA will act on the firm's instructions. Anyone may contact LISA at the address below with a question or request about this policy.
Children
LISA is a business tool for law firms and is not directed to children. LISA does not knowingly collect information from anyone under 18 except as part of a law firm's client file, where the firm is responsible for that information.
Changes to This Policy
If this policy changes in a way that matters, LISA will post the new version here with a new effective date and notify subscribing Firms by email before it takes effect.
Contact
Legal Intake Suites, LLC
North Carolina
support@lisaforlawyers.com