Privacy Policy

Who operates Lighthouse

Lighthouse Legal Labs, Inc, doing business as Lighthouse Legal, operates this website from 377 Broadway, Floor 3, New York, NY 10013. Privacy questions and requests may be sent to that address.

Connected assistant integrations

Connecting a Lighthouse account to ChatGPT, Codex, or another supported assistant lets you request information and supported actions through that assistant. OAuth identifies the connected account and the permissions it grants. Access follows your existing firm memberships, role, and granted permissions. For firm users, firm data requires membership in that firm, and supported settings changes require firm-admin access. Lighthouse operators have additional administrative access to operate and support the Product under the applicable customer agreement.

Information used and purposes

The integration processes account identity, firm membership and permission information, tool requests and their arguments, and the information needed to answer an authorized request. Depending on the feature you request, results can include caller contact details, basic intake records, agent transcripts, summaries, extracted intake fields, call and lead metrics, and supported agent settings. This information is used to fulfill authorized requests and approved actions, operate the integration, authenticate access, maintain security, and investigate support issues.

The integration receives the tool requests supplied by the assistant; it does not retrieve the assistant's full chat history. Lighthouse's agent transcript covers the intake agent's conversation. Conversations with an attorney after transfer are outside that transcript.

Sharing and service providers

Requested results are returned to the assistant service you connected, including OpenAI when you use ChatGPT or Codex. That provider's terms, privacy practices, and account settings also apply. Sending an intake to your firm's connected case-management system shares the selected intake information with that provider. Supported settings changes and case-management exports require a preview and explicit approval.

Lighthouse's providers of authentication, hosting, storage, telecommunications, speech processing, and AI services may process underlying Product data to operate the Product, as described in the applicable customer agreement and Section 7.3 of our Terms of Service.

Permissions and controls

You can disconnect an assistant integration and manage its authorization through that assistant's account controls. Lighthouse checks current access when requests and tools execute. Operational records can include the connected account and client, firm, tool used, changed field names, confirmation, outcome, and timing. These records support operation, security, and troubleshooting.

Disconnecting an assistant does not itself delete underlying Lighthouse records or copies already held by an assistant or case-management provider. Records held by those providers follow their applicable terms, retention rules, and account controls. Use the privacy request process below for requests concerning Lighthouse-held data.

Product record retention

Stored call records and agent transcripts have no scheduled automatic expiration. Lighthouse may retain or delete Product data in the ordinary course, subject to applicable Orders, data-processing agreements, and legal requirements. No fixed retention period or permanent archival availability is promised. Customers remain responsible for retaining records they need, as described in Section 7.6 of our Terms of Service.

Allowed data and customer responsibility

Connected assistant integrations are intended for authorized basic intake and account workflows, not case discovery or legal advice. Do not use them to collect or process payment-card data, HIPAA-regulated protected health information, government identifiers, or authentication secrets. Enter authentication credentials only through the identity provider's secure sign-in flow. Customers remain responsible for the rights, notices, and consents required for their use of the Product, as described in Section 6.2 of our Terms of Service.

Data this site handles

Site delivery and security

Our hosting provider receives the technical request data needed to serve and protect the site. This can include your IP address, requested URL, browser or user-agent, referring page, and the date and time of the request.

Privacy preference

The site stores one necessary first-party cookie namedlh_consent when optional measurement is configured. It records your analytics and advertising choices, the policy version, and when the choice was made. It expires after 180 days.

Optional measurement

Analytics and advertising tools remain disabled until you allow the relevant category. Allowing analytics loads Google Analytics, which counts visits, demo bookings, and form submissions. It also reports which referrers, pages, sections, links, and buttons people use, how far they scroll, and the page they leave from. The site sends no form answers, email addresses, or phone numbers to Google Analytics. Ahrefs Web Analytics also measures site traffic and interactions after you allow analytics. Allowing advertising loads the Meta Pixel, which measures those same visits and bookings for advertising. Google Tag Manager can then load only the tools assigned to a category you allowed. TheCookie Policy lists the current services and storage.

Business visitor identification

If you allow advertising, Apollo receives your IP address, page URLs, referring pages, campaign parameters, and browser identifiers. Apollo may share these with identity partners, including LiveIntent, and match them with company and business-contact records. This can identify a visiting firm and, when contact identification is enabled, an eligible U.S. business contact even if no form is submitted. We use matches to understand interest in Lighthouse and prioritize business outreach. Matches may be incomplete or inaccurate.

This tracking stays off until you allow advertising and stays off when your browser sends Global Privacy Control. Your cookie choice does not sign you up for text messages. Contact forms remain available when you reject tracking.

Forms

Contact forms are provided by HubSpot and load by default. HubSpot analytics and advertising consent remain denied. If you submit a form, HubSpot receives the information you enter, the page where you submitted it, and technical data needed to deliver and protect the form. We use submissions to answer your request, schedule a demo, or send material you asked for.

The guided form on /demo remains an interface prototype. It validates entries in your browser and does not send or store them.

Text message preferences

Use the SMS opt-in form to choose operational texts, marketing texts, and marketing emails separately. Your contact information and consent choices are used to manage the communications you request. Providing a mobile number does not by itself authorize texts. Reply STOP to withdraw SMS consent or HELP for help. See ourSMS Terms for program details.

We do not sell or share mobile numbers, SMS opt-in data, or consent with third parties or affiliates for their marketing or promotional purposes. SMS service providers can process that information only to deliver and support our messaging program. SMS consent is separate from marketing email consent and website analytics or advertising choices.

Why we handle website data

• Technical request data is used to deliver the site, prevent abuse, diagnose failures, and maintain security.
• The preference cookie is used to remember and enforce your privacy choice.
• Contact-form data is used to respond to the request you chose to submit.
• Optional analytics and advertising data is handled only with your consent. Advertising data can be used to identify business visitors and prioritize sales outreach.

Website service providers

Vercel hosts and delivers the site. HubSpot provides the contact forms and processes submitted form data. Google Analytics and Ahrefs are contacted only after you allow analytics, Google Tag Manager only after you allow analytics or advertising, and the Meta Pixel only after you allow advertising. Any further vendor loaded through Tag Manager must be listed in the Cookie Policy before it is enabled.

Apollo and its identity partners, including LiveIntent, receive visitor data only after advertising consent. Their handling of the data is described in the Apollo Privacy Policy and LiveIntent Privacy Policy.

These providers may process data in the United States or other countries where they operate, subject to their contracts and applicable transfer requirements.

Advertising, sale, and sharing

Advertising tools can disclose request and interaction data to an advertising provider. Some privacy laws call that disclosure a sale or sharing. Those tools stay off when you reject advertising, and they remain off when your browser sends Global Privacy Control.

Website data retention

The privacy preference expires after 180 days. Hosting and security data is retained according to our provider settings and agreements. Form submissions are kept for as long as needed to answer the request, maintain the business record, and meet legal obligations. The Cookie Policy lists browser-storage lifetimes. Vendor-held data follows the vendor's retention policy and applicable account settings; removing browser storage does not delete data already received by a vendor.

Your choices and rights

You can reject optional tools, choose categories, or withdraw consent at any time. Depending on where you live, you may also have rights to access, correct, delete, or restrict the use of personal data.

Send a request to Lighthouse Legal Labs, Inc, 377 Broadway, Floor 3, New York, NY 10013. We may need enough information to identify the relevant data and verify the request.

Changes to this policy

We will update the date above when this policy changes. A material change to optional vendors, purposes, or categories will also reset the saved consent version and ask for a new choice.