Privacy policy
Privacy is the first requirement, not a feature.
Law firms trust us with privileged conversations and client money. This policy explains, in plain language, what we collect, why, who else sees it, how long we keep it and the choices you have. We do not sell personal information, and we never use your firm's records to train AI models.
1. Who we are and what this covers
LawMOR is provided by RingMOR Inc., doing business as CallMOR, of Mission Viejo, California ("LawMOR", "we", "us"). This policy covers our website, the LawMOR application, the client portal, e-signature pages, the booking page, our emails and texts, and our support.
It does not cover the websites or services of the law firms that use LawMOR, or of the third-party services a firm chooses to connect, such as its own email account. Those have their own policies.
2. Our two roles
We handle two different kinds of information, and our responsibility differs for each.
- Firm records. Clients, contacts, matters, time, invoices, trust records, calls, recordings, transcripts, texts, documents, e-signatures and portal messages belong to the law firm. For these we act as the firm's service provider (a "processor" in some laws): we process them only to provide LawMOR to that firm and on its instructions, as set out in our data processing addendum. The firm decides what goes in, who can see it and when it is removed.
- Our own records. Account details of the people who use LawMOR, subscription and billing details, website visits, sign-up information, support conversations and product emails. For these we decide how the information is used, and this policy describes it.
3. Information we collect
Information you give us
- Sign-up: firm name, US state, time zone, your name and work email address, and your acceptance of our terms.
- Account: your name, email address, role in the firm and preferences. Passwords and second factors are held by our sign-in service; LawMOR itself never sees your password.
- Firm records: everything your firm enters, imports, uploads or receives through LawMOR, as listed in section 2.
- Support: what you write to us and any details you share so we can help.
Information created when LawMOR is used
- Calls and texts on firm numbers: phone numbers, times, durations and message content. Recordings exist only when the firm turned recording on for that number and the consent announcement played; otherwise the audio is discarded. Card numbers, Social Security numbers and bank account numbers are removed from transcripts and texts before they are stored.
- Security and audit records: sign-in sessions, and for sensitive actions who did what, when, from which IP address and browser. The audit log cannot be edited or deleted, even by us.
- E-signatures: the signer's typed name, consent wording, timestamps, IP address, browser and document fingerprints, printed on the signature certificate.
- Email delivery: whether an email was delivered and whether a link in it was clicked. We do not use tracking pixels to detect opens.
Information from other sources
- Payments: Stripe tells us whether a subscription or a client payment succeeded. Card and bank details are entered on Stripe's pages and never reach LawMOR.
- Connected email: if you connect Gmail or Microsoft 365, we receive read-only access and store only the messages you choose to file to a matter.
- Phone providers: call records and messages for firm numbers.
Website visitors
Our public pages count visits without cookies. We record the page, the referring site, campaign tags, the device type and page-speed measurements. We do not store IP addresses for this, and we skip it entirely when your browser sends Do Not Track or Global Privacy Control. See section 7.
4. How we use information
- To provide LawMOR: file calls and texts to matters, draft time entries, produce invoices, keep trust records, run the portal and send what you ask us to send.
- To keep accounts and records secure: verify sign-ins, require a second factor for money and data actions, detect abuse and investigate incidents.
- To bill your firm's subscription and usage.
- To send service emails you cannot switch off (security, billing, account and trust notices) and, if you have not opted out, product updates and the blog digest.
- To support you, and to improve LawMOR using our own operational measurements, such as error rates and page speed.
- To meet legal obligations and enforce our terms.
We do not sell personal information, share it for cross-context behavioral advertising, build advertising profiles, or look at firm records except to provide the service, when the firm grants support access, or when the law requires it.
5. AI and your information
LawMOR uses AI to save you clerical work. Each use is listed on our AI terms page. In short:
- What is sent. To suggest the right matter or draft a narrative, the text of a call transcript or text thread, with sensitive numbers already removed, is sent to our AI provider together with the names and numbers of the candidate matters. Call audio is sent to our transcription provider to produce the transcript.
- No training. Your firm's records are never used to train AI models, by us or by our providers. Our providers process the data only to return a result to us.
- What we keep. For each AI request we log its purpose, the prompt version, cost, timing and outcome. We do not store the text sent to the model or the raw response in that log.
- Firm control. Each firm can turn AI off and set daily and monthly limits. With AI off, LawMOR uses rules and templates instead, and nothing is sent to the AI provider.
- A person decides. AI output becomes a private draft. It never bills, never sets billed time and never moves money.
8. How long we keep information
| Information | How long |
|---|---|
| Firm records | For as long as the firm's account exists. After cancellation the firm can still sign in, read and export for at least 12 months; we will give 30 days' notice before deleting anything. |
| Call recordings | Two years from the call, then deleted automatically, unless the firm has placed a legal hold. |
| Trust records | At least five years (seven for New York firms), as the rules on client trust accounts require. |
| Email content | Message bodies are cleared after one year; the delivery record stays with the matter. |
| Audit log | Kept for the life of the firm's account. Entries cannot be edited or deleted. |
| Website visit counts | Detailed counts 13 months; summaries 90 days. No IP addresses are stored. |
| Backups | Encrypted daily backups, kept 30 days and then overwritten. |
| Your account | Until you delete it. On deletion your name and email are replaced and sign-in is removed; records you created for the firm stay with the firm. |
9. How we protect information
- Each firm's records are separated inside the database by row-level security, so one firm cannot read another's data even if our code has a bug.
- Bank account numbers, mail server passwords, email access tokens and recording locations are encrypted with a key specific to each firm.
- Connections use TLS 1.2 or 1.3. Sign-in supports a second factor, and money and data actions ask for it again.
- An append-only audit log, rate limits, signed webhooks and file-type checks on uploads.
- Daily encrypted backups with a weekly restore test.
Details are on our security page. No system is perfectly secure, but we only describe controls that are built and tested.
10. Your rights and choices
- See and download your data. Download your own account data from your account settings. A firm owner can export all firm records as CSV and JSON at any time, free.
- Correct it. Update your profile in the app, or ask your firm or us.
- Delete your account from your account settings. The last owner of a firm must first hand ownership to someone else or ask us to close the firm.
- Email choices. Unsubscribe from product updates and digests with the link in each one, or in your email preferences. Security, billing and account emails cannot be switched off while you have an account.
- Text messages. Reply STOP to any LawMOR firm number to stop texts from it, and START to resume. HELP sends contact information.
- AI. A firm owner can turn AI processing off for the whole firm.
Depending on where you live, you may have the right to know, access, correct, delete or move your personal information, to limit the use of sensitive information, and to appeal a decision we make on your request. To use any of these rights, email hello@callmor.ai. We will confirm your identity, usually by email to the address on the account, and respond within 45 days. You may use an authorized agent with your signed permission. We will not treat you differently for using your rights.
If your request is about a law firm's records, see section 12.
11. California privacy notice
This section applies to California residents and adds to the rest of this policy. In the past 12 months we collected the categories below for the purposes in section 4, from the sources in section 3, and disclosed them only to the recipients in section 6.
| Category | Examples | Disclosed for a business purpose to |
|---|---|---|
| Identifiers | Name, email address, phone number, account ID, IP address | Hosting, sign-in, email, payments and phone providers |
| Customer records | Firm name, billing contact, subscription status | Payments provider |
| Commercial information | Plan, usage, invoices | Payments provider |
| Internet activity | Pages visited on our site, actions in the app, audit records | Hosting and error-reporting providers |
| Audio and electronic information | Call recordings and transcripts, texts (for firm records) | Phone, transcription and AI providers |
| Professional information | Role in the firm, the firm's US state | Not disclosed outside the service |
| Sensitive personal information | Sign-in credentials (held by our sign-in service), message content in firm records | Used only to provide the service; never to infer characteristics |
- We do not sell or share personal information as California law defines those terms, and we do not knowingly do so for anyone under 16.
- We use sensitive personal information only for purposes the law permits, such as providing the service and security, so a right to limit does not apply.
- We honor Global Privacy Control signals as an opt-out request.
- Retention periods are in section 8.
12. If you are a client of a law firm
If a law firm uses LawMOR to manage your matter, call or text you, invoice you or ask you to sign, the firm is responsible for your information and decides how it is used. Please contact the firm with any request. If you contact us, we will forward the request to the firm and help it respond. You can stop texts from a firm by replying STOP.
13. Children
LawMOR is a business service for law firms. It is not directed to children, and we do not knowingly collect information from children under 13 for our own purposes. Firms may hold information about minors in their records as part of legal representation, which the firm controls.
14. Where information is processed
LawMOR runs on servers we operate in the United States, and our service providers are US companies. LawMOR is offered to US law firms only.
15. Security incidents
If we learn that firm records were accessed without authorization, we will notify the affected firms without undue delay and within 72 hours of confirming the incident, tell them what we know, and help them meet their own duties to clients and regulators.
16. Changes to this policy
We will post any change here with a new date. For a material change we will email firm owners at least 30 days before it takes effect. We will not use information already collected in a materially different way without consent.
17. Contact us
RingMOR Inc. (CallMOR), Mission Viejo, California. Email hello@callmor.ai with "Privacy" in the subject.