Privacy Policy

Acceltra (“Acceltra”, “we”, “us”) operates Acceltra Law (acceltralaw.com and app.acceltralaw.com), a client-intake and practice management platform for law firms in Canada (the “Platform”). This policy explains how we collect, use, disclose, and protect personal information in connection with the Platform and this website.

Privacy questions and requests: privacy@acceltralaw.com.

For law firms and their staff (platform accounts, billing, support), we are the organization accountable for the personal information we collect directly.

For a firm’s prospective and existing clients, we act as a service provider: the law firm using the Platform decides what intake information to collect and why, and we process it on the firm’s behalf and under its instructions. If you contacted a law firm that uses Acceltra, that firm is responsible for its relationship with you, and requests about your information can be made to the firm directly or to us — we will route your request to the right place (see Section 10).

Platform account information — name, work email, role, firm, and authentication data for law-firm users of the dashboard.

Client intake information (processed for firms) — information a person provides when contacting a law firm through the Platform’s intake channels: the website chat assistant, website contact forms, SMS, and lead forms on Meta platforms (Facebook and Instagram). Depending on what the person chooses to share, this can include name, phone number, email, location, and a description of their legal matter.

Technical and usage information — service logs, approximate location signals derived for security (we store a one-way hashed form of visitor IP addresses for abuse prevention, not the raw address), and device/browser information necessary to run the service.

Billing information — processed by our payment provider (Stripe); we do not store full payment card numbers.

When a law firm connects its Facebook Page to the Platform, we receive, on that firm’s behalf, the submissions people make through the firm’s Meta lead forms (“instant forms”): the answers the person provided (such as name and contact details) together with advertising context supplied by Meta (such as the campaign, ad, and form identifiers and Meta’s lead identifier).

We use this information solely to deliver the lead to the firm the person contacted, to help that firm manage and respond to the inquiry, and to provide that same firm with advertising performance reporting.

We do not sell lead information. We do not combine one advertiser’s lead information with another’s. Each firm’s data is isolated within the Platform, and our use of Meta lead data follows Meta’s Lead Ads Terms and Platform Terms. Meta also retains lead submissions under its own policies independent of ours.

To operate the Platform: receiving and organizing intake, routing inquiries to the right firm and staff, alerting firms to new leads, providing reporting to the firm the data belongs to, securing the service, preventing abuse and spam, billing, and communicating with account holders about the service.

AI processing. Intake conversations are processed by third-party AI providers (currently Anthropic) acting as our service providers to conduct and summarize the conversation. Under our API terms with these providers, conversation content is not used to train their models. The intake assistant provides information gathering only — it does not provide legal advice.

With the law firm you contacted — client intake information exists to be delivered to that firm; it is their confidential prospective-client information.

With service providers that host and power the Platform, bound by contractual confidentiality and security obligations: Vercel (application hosting), Supabase on AWS Canada (database, hosted in the ca-central-1 region), Anthropic (AI processing), Meta Platforms (lead form delivery and, where a firm enables it, advertising measurement), Stripe (payments), and our transactional email provider (lead alerts and account email).

When required by law — where we are legally compelled, or where necessary to protect the rights, safety, or property of Acceltra, our customers, or others.

We do not sell personal information.

Our primary database is hosted in Canada (AWS ca-central-1, Montréal). Some of our service providers process data in the United States. Wherever information is processed, it remains protected by this policy and by contractual safeguards with our providers; information processed outside Canada may be subject to lawful access under the laws of those jurisdictions.

Account information is retained for the life of the account plus a limited period for legal and operational needs. Client intake information is retained according to the controlling firm’s configuration, and the Platform supports automated deletion and anonymization schedules, including for conversation transcripts and for raw lead-form responses received from Meta.

When information is no longer required, it is deleted or irreversibly anonymized.

We protect personal information with encryption in transit and at rest, strict per-firm data isolation enforced at the database layer, role-based access within each firm, encrypted storage of third-party access credentials, audit logging, and least-privilege access for our own personnel. No system is perfectly secure, and we maintain incident response procedures should a breach affecting personal information occur, including notification obligations under applicable law.

Subject to applicable law (including PIPEDA and provincial privacy legislation), you may request access to, correction of, or deletion of your personal information. If your information was collected because you contacted a law firm, we may refer your request to that firm — as the organization responsible for the information — and we will support them in fulfilling it.

Contact us at privacy@acceltralaw.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

The Platform uses essential cookies for sign-in sessions and security. We do not use advertising trackers on the Platform. The intake chat widget stores a small amount of local data in the visitor’s browser to maintain the conversation session.

The Platform is a business tool for law firms and is not directed to children. Intake submissions concerning minors (for example, an injury claim involving a child) are handled by the receiving law firm under its professional obligations.

We will post updates to this policy on this page with a revised date. Material changes affecting how firm client data is processed are communicated to our customers directly.