PipelineLift Privacy Policy

Version 1.0 · Effective August 24, 2026

Effective Date: August 24, 2026

Last Updated: August 24, 2026

1. Introduction

PipelineLift, Inc. ("PipelineLift," "we," "us," or "our") provides intake and conversion technology to law firms. This Privacy Policy explains how we handle personal information.

Please read Section 2 first. It explains the two different roles we play, and which parts of this policy apply to you.

2. Our Two Roles

We act in two distinct capacities, and different rules apply to each.

2.1 As a Controller — our website, our marketing, and our own business

When you visit pipelinelift.ai, request a Pipeline Audit, contact us, subscribe to our content, or engage with us as a prospective or actual customer, we decide how and why your information is used. In that role we are a controller (or, under some laws, a business).

Sections 3, 5, 6, 7, 8, and 9 describe this role.

2.2 As a Service Provider — law firm intake records

When a law firm engages us, our systems answer inbound calls, messages, and web inquiries on that firm's behalf. The people contacting the firm are the firm's prospective clients, not ours.

In that role we act solely as a service provider and processor for the firm. We handle that information only on the firm's instructions and only to provide the service. We do not decide how it is used. We do not use it for our own purposes. We do not sell or share it. We do not use it to train third-party artificial intelligence models.

Section 4 describes this role.

If you contacted a law firm and want to know how your information is used, that firm's privacy policy governs, and the firm is the right party to contact. We will assist any firm we work with in responding to you.

PART I — WHEN WE ACT AS A CONTROLLER

3. Information We Collect

3.1 Information you provide

  • Contact and firm details — name, email address, telephone number, firm name, role, practice areas, and similar information you submit through our forms.

  • Pipeline Audit requests — the intake endpoints you identify for testing, your authority attestation, and any notes you provide.

  • Communications — messages you send us, including by email, form, chat, or telephone.

  • Customer account information — billing contact details, payment information processed by our payment processor, and account configuration.

3.2 Information collected automatically

  • Device and usage data — IP address, browser type, operating system, pages viewed, referring page, and timestamps.

  • Cookies and similar technologies — see Section 7.

3.3 Pipeline Audit data

When you request a Pipeline Audit, we generate data about how your firm's intake systems responded to our test interactions — whether contacts were answered, how quickly, how they were routed, and whether follow-up occurred.

We do not record or transcribe telephone calls placed as part of a Pipeline Audit. We capture only metadata about each interaction.

Audit data may incidentally include information about individuals at your firm, such as the name of a person who answered a call. We use this only to produce your audit results.

3.4 Information from other sources

We collect publicly available information about law firms — website content, published contact details, and similar public information — for research, outreach, and to prepare audits.

5. How We Use Information

We use information in our controller capacity to:

  • provide, operate, and improve our website and the Pipeline Audit;

  • respond to your inquiries and deliver audit results;

  • communicate with you about our services, including marketing communications you can opt out of at any time;

  • establish, administer, and support customer relationships, including billing;

  • maintain security, prevent fraud and abuse, and enforce our Terms of Use;

  • comply with legal obligations and establish, exercise, or defend legal claims; and

  • analyze how our website and services are used, in aggregate.

We do not use information collected in our controller capacity to make automated decisions producing legal or similarly significant effects about you.

6. Sale and Sharing of Personal Information

We do not sell personal information for money.

We do share personal information for cross-context behavioral advertising. Our website uses advertising and analytics technologies provided by Meta, Google, and LinkedIn. When you visit our site, these technologies may receive information about your visit and use it to show you our advertising on other platforms. Under California and several other state privacy laws, this constitutes "sharing" for cross-context behavioral advertising or "targeted advertising."

Categories shared in the preceding twelve months:

Category · Shared with · Purpose

Identifiers — online identifiers, device identifiers, cookie IDs, IP address · Meta, Google, LinkedIn · Advertising and measurement

Internet or network activity — pages viewed, referring page, interactions with our site · Meta, Google, LinkedIn · Advertising and measurement

We do not share sensitive personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information beyond the purposes permitted by applicable law.

We do not knowingly sell or share the personal information of anyone under sixteen (16).

How to opt out. Use the Your Privacy Choices link in our website footer, adjust your preferences in our cookie banner, or enable a browser-based opt-out signal such as Global Privacy Control. We treat a Global Privacy Control signal as a valid opt-out request for the browser and device from which it is sent.

This section applies only to information we collect as a controller through our own website and marketing. We never sell or share law firm intake records handled in our service provider capacity, under any circumstances.

7. Cookies and Tracking

We use the following categories of cookies and similar technologies:

Category · Purpose · Controlled by consent

Strictly necessary · Site functionality, security, form submission · No — required for the site to work

Analytics · Understanding how the site is used, in aggregate · Yes

Advertising · Delivering and measuring our advertising on Meta, Google, and LinkedIn · Yes

Your controls. Non-essential cookies are set only with your consent through our cookie banner, and you can change your preferences at any time using the Your Privacy Choices link. You may also block or delete cookies through your browser settings, though strictly necessary cookies are required for the site to function.

We honor Global Privacy Control and similar browser-based opt-out signals where required by applicable law.

Industry opt-out tools are also available through the Digital Advertising Alliance and the Network Advertising Initiative.

8. How We Share Information

We disclose information in our controller capacity to:

  • Service providers who host our infrastructure, process payments, deliver email, provide telephony and messaging, and support our operations, each bound by contractual confidentiality and security obligations;

  • Professional advisors — attorneys, accountants, and insurers — where necessary;

  • Authorities and other parties where required by law, subpoena, or legal process, subject to Section 4.5; and

  • A successor entity in connection with a merger, acquisition, financing, or sale of assets.

We do not disclose personal information to third parties for their own independent marketing purposes.

9. Your Rights

Depending on where you live, you may have rights to:

  • know what personal information we hold about you and how we use it;

  • access or receive a copy of it, including in a portable format;

  • correct inaccurate information;

  • delete information, subject to exceptions;

  • opt out of sale or sharing, and of targeted advertising;

  • limit use of sensitive personal information; and

  • not be discriminated against for exercising these rights.

To make a request, contact us at [email protected]. We will verify your identity before responding and will respond within the timeframes required by applicable law. You may use an authorized agent where the law permits.

If your request concerns information we hold as a service provider for a law firm, we will direct you to that firm, which is the party responsible for responding.

You may appeal a denied request by replying to our response with the word "Appeal."

PART II — WHEN WE ACT AS A SERVICE PROVIDER

4. Law Firm Intake Records

4.1 What this covers

When one of our law firm customers uses our services, our systems handle inbound communications from that firm's prospective clients — telephone calls, text messages, web form submissions, and web chat.

4.2 Our restrictions

We handle this information solely on the firm's behalf and for the sole purpose of providing the services the firm has engaged us to provide. Specifically, we:

  • do not sell or share it;

  • do not use it for our own marketing or business purposes;

  • do not use it to train publicly available artificial intelligence models owned or controlled by third parties;

  • do not combine it with information from other sources except as permitted by applicable law;

  • do not disclose it to other customers or commingle it with another customer's records; and

  • retain it only as directed by the firm or as required by law.

These restrictions are contractual obligations under our Master Services Agreement, not merely statements of policy.

4.3 Artificial intelligence and disclosure

Our systems use artificial intelligence to answer and assist with inbound inquiries. Anyone interacting with our systems is told they are not speaking with a human. This disclosure is built into the system and cannot be disabled by our customers.

Our systems do not provide legal advice, evaluate the merits of a matter, quote fees, or accept a case. Those decisions belong to the firm.

See our AI Intake Notice for a plain-language explanation written for people contacting a firm.

4.4 Recording

Telephone calls handled by our systems may be recorded and stored on behalf of the firm. Where recording occurs, notice is provided in accordance with applicable law. The firm determines its own recording configuration and remains responsible for obtaining any consents its jurisdiction requires.

[Note: this language is deliberately permissive pending verification of platform recording-notice behavior. It must be made specific once that verification is complete.]

4.5 Legal process

If we receive a subpoena, court order, or other legal process seeking law firm intake records, we will — to the extent legally permitted — notify the firm before producing anything, decline to produce voluntarily, give the firm an opportunity to object or seek a protective order, and assert any applicable privilege on the firm's behalf at the firm's request.

We recognize that intake communications may be privileged or protected under the rules of professional conduct applicable to our customers, and that our access to them as a service provider is not intended to waive any such protection.

4.6 Requests from individuals

If you contacted a law firm and want to access, correct, or delete your information, please contact that firm. We will support the firm in responding.

PART III — GENERAL

10. Data Retention

We retain information for as long as necessary for the purposes described in this policy, and thereafter as required to comply with legal obligations, resolve disputes, or enforce our agreements.

  • Pipeline Audit data for firms that do not become customers is retained for twenty-four (24) months and then deleted.

  • Law firm intake records are retained according to the firm's instructions and our agreement with the firm.

  • Marketing and website data is retained for as long as it remains useful for the purposes collected, or until you opt out.

11. Security

We maintain administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. No system is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident materially affecting personal information under our control, we will notify affected parties as required by applicable law and by our agreements.

12. Data Location

We are based in the United States, and information we handle is stored primarily in the United States. Some of the service providers we rely on may process data outside the United States. If you access our services from outside the United States, you understand that your information will be transferred to and processed in the United States.

13. Children

Our website and services are directed at legal professionals and business users. We do not knowingly collect personal information from anyone under sixteen (16). If you believe a child has provided us information, contact us and we will delete it.

Our law firm customers may receive inquiries from or about minors in the course of their practice. Such information is handled in our service provider capacity under Section 4.

14. Changes to This Policy

We may update this policy. The Last Updated date reflects the most recent revision, and we maintain dated archived versions. Material changes will be indicated on this page and, where required by law, communicated directly.

15. Contact Us

PipelineLift, Inc.

30 N Gould St Ste R

Sheridan, WY 82801

[email protected]