Privacy Policy

This Privacy Policy explains how Tagora Tech ("Tagoraa," "we," "us," or "our") collects, uses, and protects information when law firms and their clients use our AI-powered legal intake and consultation scheduling platform, including any integrations with Google Calendar and Gmail.

1. Information We Collect

From prospective clients (website visitors using the chat widget):

• Full name, phone number, and email address
• Practice area of interest and meeting preference (online or in-person)
• New vs. existing client status
• Chat transcript of the intake conversation

We do not ask for or knowingly collect confidential case details, privileged information, or sensitive legal evidence through the intake widget.

From law firms and lawyers using the admin panel:

• Firm profile details (name, address, phone, practice areas, timezone, allowed website domains)
• Lawyer profile details (name, notification email, fee, practice areas)
• Admin login credentials, stored using industry-standard hashing/encryption practices

2. Google User Data (Calendar & Gmail)

When a lawyer connects their Google Calendar, or a firm connects its Gmail account, Tagoraa requests limited OAuth permissions to operate the scheduling and email-sending features of the service:

• Google Calendar access — used only to read a lawyer's existing calendar events to compute available consultation slots, and to create new calendar events (with a video-call link, where applicable) once a consultation is approved. We do not read, modify, or delete events unrelated to consultations booked through Tagoraa.
• Gmail send access — used only to send transactional emails on the firm's behalf: booking confirmations, reminders, and lawyer-notification emails. This is a send-only permission; Tagoraa cannot read, search, or download messages already in the connected mailbox.
• Basic profile (email address) — used only to display which Google account is currently connected in the admin panel.

3. How We Use Information

• To operate the chat-based intake flow and match prospective clients to an appropriate lawyer
• To check calendar availability and book, reschedule, or cancel consultations
• To send booking confirmations, reminders, and follow-up emails
• To notify lawyers of new consultation requests requiring their approval
• To maintain an audit log of key actions (bookings, approvals, reminders) for support and compliance

4. Data Storage & Security

OAuth refresh tokens (Google Calendar and Gmail) are encrypted at rest using AES-256-GCM before being stored in our database and are never stored or logged in plaintext. All data in transit is encrypted via HTTPS/TLS. Access to production systems is restricted to authorized personnel only.

5. Data Retention & Deletion

We retain lead, appointment, and audit data for as long as reasonably needed to provide the service and meet the firm's own record-keeping needs. A lawyer or firm may disconnect their Google Calendar or Gmail integration at any time from the admin panel, which immediately revokes Tagoraa's access and deletes the stored token. To request deletion of other data we hold about you, contact us using the details below.

6. No Selling of Data

We do not sell, rent, or trade personal information or Google user data to third parties. We do not share data with third parties except as strictly necessary to operate the service (e.g., our database and email infrastructure providers), and any such provider is bound to protect the data under terms consistent with this policy.

7. Children's Privacy

Tagoraa is intended for use by law firms and their prospective adult clients. We do not knowingly collect information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above.

9. Contact Us

Questions about this policy or a request to access, correct, or delete your data can be sent to contact@tagoratech.com.