Legal
Privacy Policy
Effective Date: January 1, 2026
1. Introduction
Peak 3 Research, LLC ("we," "us," or "our") provides AI-powered receptionist services for law firms. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our services.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Firm name, first name, last name, email address, and business contact information
- Practice areas and business hours
- Payment and billing information
2.2 Call Data
Our AI receptionist collects and processes:
- Call audio recordings and transcripts
- Caller information (name, phone number, email address)
- Case type, urgency level, and intake notes
- Call duration, timestamp, and metadata
- Sentiment analysis and conversation summaries
2.3 Integration Data
When you connect third-party services (Clio, Google, Outlook, Calendly, etc.), we collect:
- OAuth access tokens and refresh tokens
- Contact and matter IDs from your CRM
- Calendar availability and booking confirmations
2.4 Usage Information
We automatically collect:
- Log data (IP addresses, browser type, device information)
- Service usage metrics (calls received, minutes used, features accessed)
- Performance data and error logs
3. How We Use Your Information
We use collected information to:
- Provide and maintain our AI receptionist services
- Process and route incoming calls to your firm
- Capture, store, and sync lead information with your CRM
- Schedule consultations via integrated calendar services
- Generate transcripts, summaries, and analytics
- Process billing and usage tracking
- Improve our AI models and service quality
- Detect and prevent fraud, abuse, or security incidents
- Comply with legal obligations
4. How We Share Your Information
4.1 Service Providers
We share information with trusted third-party service providers:
- Retell AI (voice processing and telephony)
- Oracle (cloud storage and infrastructure)
- Stripe (billing and subscription management)
- Fathom Analytics (basic usage information)
4.2 Integrations You Choose
When you connect third-party services, we share relevant data with:
- Clio or other CRM systems (contact and matter information)
- Calendly or scheduling tools (booking and availability data)
- Nylas (connects to Google Calendar and Outlook Calendar)
4.3 Legal Requirements
We may disclose information when required by law, legal process, or to:
- Respond to subpoenas, court orders, or legal requests
- Protect our rights, property, or safety
- Enforce our Terms of Service
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption of sensitive data at rest and in transit (HTTPS/TLS)
- Secure storage of OAuth tokens and API credentials
- Multi-tenant architecture with strict account isolation
- Regular security audits and vulnerability testing
- Access controls and authentication requirements
- Signed URLs with expiration for audio file access
Despite our safeguards, no method of transmission or storage is completely secure. We cannot guarantee absolute security.
6. Your Rights and Choices
6.1 Access and Correction
You may access, review, and update your account information through your dashboard.
6.2 Data Deletion
You may request deletion of your data by:
- Requesting deletion of individual calls or leads through your dashboard
- Closing your account (all data deleted within 30 days)
6.3 Data Portability
You may export your lead data to a linked CRM if your plan includes that feature.
6.4 Marketing Communications
You may opt out of promotional emails by clicking the unsubscribe link or updating your notification preferences.
7. Caller Privacy and Recording Notice
Our AI receptionist provides notice to callers that calls may be recorded. This notice is delivered at the beginning of each call in accordance with applicable recording consent laws.
Callers who do not consent to recording should end the call. By continuing the call, callers consent to recording and processing of their information for the purposes described in this policy.
8. Third-Party Services
Our service integrates with third-party platforms (Clio, Nylas, etc.). These services have their own privacy policies and terms. We are not responsible for their privacy practices. We recommend reviewing their policies before connecting them to StratoSales.
9. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it promptly.
10. International Data Transfers
Your information will be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.
11. California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect, use, and disclose
- Right to request deletion of personal information
- Right to opt out of sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
To exercise these rights, contact us at privacy@stratosales.com.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting the updated policy with a new effective date
- Sending email notification to your account email address
- Displaying a notice in your dashboard
Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
13. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@stratosales.com
Mailing Address:
Peak 3 Research, LLC
235 Ponce de Leon Place
Suite M #233
Decatur, GA 30030