Legal

Privacy Policy

Effective date: May 27, 2026 · Last updated: May 27, 2026

Also available in Español.

1. Introduction

Atendros respects the confidentiality of information handled through the Services and the privacy of people who visit the Site. This Privacy Policy is intended to give visitors, business contacts at our law-firm customers, and the prospective clients of those firms a clear picture of what we collect, why we collect it, how we use it, and the choices available.

If anything in this Privacy Policy is unclear, please contact us using the details in Section 27.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

• The Site (atendros.com) and any sub-pages or microsites that link to this Privacy Policy.
• Communications you send to us by email, phone, or web form.
• The Services, including the bilingual intake workflows we operate on behalf of law-firm customers.
• Sales and account interactions with prospective and current law-firm customers.

This Privacy Policy does not apply to:

• The websites, applications, or services of our law-firm customers, even when those customers use our Services. Those firms are the controllers of their own client and prospective-client information and have their own privacy practices.
• Third-party websites that may be linked from the Site. We are not responsible for the privacy practices of those third parties; review their notices directly.
• Information you provide to a law firm before, during, or after speaking with us — that information belongs to the firm under the firm's privacy practices and the firm's professional-responsibility obligations.

3. Atendros as a Site operator, service provider, and processor for law firms

Atendros plays different roles depending on whose information is involved:

• Site operator and own controller. When you visit the Site, schedule a discovery call, fill out a contact form, or otherwise communicate with us as a business contact, Atendros acts as a controller of that information.
• Service provider / processor for law firms. When the Services are used by a law-firm customer to receive a call from a prospective client of that firm and capture intake details, Atendros generally acts as a service provider (under the California Consumer Privacy Act, as amended by the California Privacy Rights Act) or processor (under similar laws) on behalf of the firm. The law firm is the controller of that information and is responsible for instructing us regarding its collection, use, retention, and deletion. Requests from prospective clients of a firm about information collected through the firm's intake line should be directed to the firm; we will support the firm in responding.

We address each role separately in the sections below.

4. Personal information we collect

The information we collect depends on how you interact with us. We collect information that you provide directly, information collected automatically, information from law-firm customers and authorized integrations, and information generated by the Services during intake calls.

5. Information you provide directly

When you interact with us, you may provide:

• Identifiers and contact information — name, work email, business phone number, firm or company name, role/title.
• Scheduling information — when you book a discovery call (via the scheduling tool embedded on the Site), the booking system collects your name, email, the selected time and time zone, and any answers to optional intake questions.
• Inquiry content — anything you choose to include in a message, email, or contact form (including practice details, intake volume figures, the case-management system you use, and any free-text notes).
• Account information — if and when we offer accounts to law-firm customers, account credentials, authentication factors, and configuration settings.
• Commercial information — pricing plan selected, invoice and billing details, and contract metadata.

We do not knowingly request from website visitors any government identifier (such as a Social Security number, A-number, passport number, I-94, USCIS receipt number, driver's-license number, or other immigration identifier). If you submit such information unsolicited, we will treat it as sensitive and delete it from our systems as soon as practical, unless retention is required to perform a request you have made or to comply with law.

6. Information collected automatically

When you use the Site, certain information is collected automatically by us and our infrastructure providers:

• Device and connection data — IP address, autonomous system, approximate country derived from IP, browser type and version, operating system, language preference indicated by the browser, screen size and viewport, referring URL, requested URL, request method and status, and timestamps.
• Server and security logs — used for site operation, abuse detection, rate limiting, error monitoring, and incident response.
• Cookies and similar technologies — see Section 13.

The Site is intentionally light on tracking. We do not use third-party advertising pixels, cross-context behavioral advertising trackers, or session-replay tools on the Site as of the effective date above.

7. Information from law firms, integrations, and third parties

We may receive information about you from:

• Law-firm customers — when a firm onboards with us, the firm provides operational information needed to run intake on their behalf, including the firm's intake script, conflict-screening rules, case-routing logic, the matter database we are authorized to query for conflict screening, and contact details for firm staff.
• Authorized integrations — when a firm authorizes us to read or write to its case-management system, scheduling tool, telephony platform, or other firm-side software, we receive information necessary to perform those workflows.
• Service providers and infrastructure — telephony providers, call-recording infrastructure, transcription and AI inference providers, hosting and content-delivery providers, email transport providers, and payment processors may forward information to us in the course of operating the Services.
• Publicly available sources — for sales and due-diligence purposes, we may consult publicly available information about a law firm or its principals (state bar directory listings, the firm's website, publicly filed court records).

8. Immigration intake, AI chat, translation, and uploaded document data

When the Services are used by a law-firm customer to handle an inbound communication, the following may be received, generated, or transmitted on the firm's behalf:

• Caller-volunteered information — name, phone number, email address, preferred language, the caller's stated reason for the call, and any other details the caller chooses to share (which may include immigration status, country of origin, family circumstances, prior filings, hearings, or other facts the caller volunteers).
• AI-generated content — a transcript of the call (text representation generated by automated speech-to-text), an AI-generated structured summary, an AI-generated suggested case category, AI-assisted translation between English and Spanish, and an AI-generated suggested next step (such as offering a consultation slot or escalating to firm staff).
• Recordings — calls handled through the Services are designed to play an all-party-consent recording disclosure to the caller before any recording begins and to obtain caller consent where required by law. Recording configuration is set and verified with each law-firm customer before launch. Recordings, where made, are stored on the firm's instruction and per the firm's retention policy.
• Uploaded documents — the Services do not currently include a public document-upload feature. If and when documents are exchanged through the Services in the future, they will be handled under the firm's instructions and the applicable data-processing terms.

We are a service provider to the law firm with respect to all of the above. We use this information only to perform the Services as instructed by the firm. We do not sell this information, do not share it for cross-context behavioral advertising, and do not use it for our own purposes outside the scope of the firm's instructions and lawful Atendros operations (such as security, fraud prevention, and platform integrity).

Important. Atendros does not provide legal advice to callers, does not determine whether anyone qualifies for any immigration benefit, does not file forms, does not communicate with USCIS, EOIR, DHS, ICE, or any government agency on a caller's behalf, and does not represent any caller before any government agency or court. The Services are designed to capture intake information and to route callers to the law firm; legal decisions are made by the firm.

9. Information about family members, beneficiaries, sponsors, dependents, and minors

Immigration intake often involves third parties — spouses, children, parents, beneficiaries, petitioners, or sponsors. When a caller volunteers information about another person, that information is processed on the same legal basis and under the same firm-instruction framework as the caller's own information.

Minors. The Services are not intended for use by children. We do not knowingly collect information directly from children under thirteen (13). When information about a minor is provided by an adult caller in the course of describing a family-based or other immigration matter, that information is treated as sensitive, used only to capture intake for the firm, and retained per the firm's retention policy. If you believe we have received information directly from a child under thirteen (13), contact us at [email protected] and we will take appropriate steps to delete it.

10. How we use information

We use information for the following purposes:

• To operate the Site — render pages, fix bugs, prevent abuse, maintain security.
• To respond to inquiries — answer questions, schedule discovery calls, send proposals, and engage prospective customers.
• To operate the Services — run intake workflows on behalf of law-firm customers; perform conflict checks against firm-provided matter records; generate transcripts, summaries, and translations; record calls (with disclosure); route callers; and integrate with firm systems.
• To manage accounts and billing — administer customer relationships, invoice, process payments, deliver service notices, and provide customer support.
• To improve the Services — analyze service metrics, debug, evaluate performance against the service-level commitments published on the Site or set out in the master services agreement, and refine internal workflows. We do not use customer intake data (call audio, transcripts, summaries, conflict-check results, or other content received as a processor for a law firm) to train artificial-intelligence models, except with the relevant law-firm customer's separate written consent.
• To meet legal obligations — comply with applicable laws, respond to lawful requests from public authorities, enforce our Terms, and protect our rights, property, and safety and that of our customers and the public.

11. How we share information

We share information only as described below:

• With law-firm customers — information collected through the Services on behalf of a firm is shared with that firm. This is the entire point of the Services.
• With service providers and subprocessors — we use a limited set of providers to operate the Site and Services, including hosting and content-delivery providers, telephony providers, speech-to-text and AI inference providers, call-recording infrastructure, email transport providers, scheduling providers, customer-support providers, and payment processors. Each provider is bound by contract to use the information only to provide services to us and to maintain appropriate security. A current list of subprocessors is available to law-firm customers under the master services agreement and to other inquirers on request to [email protected].
• With professional advisors — counsel, accountants, insurers, and auditors, subject to confidentiality.
• In connection with a corporate transaction — if Atendros is involved in a merger, acquisition, financing, restructuring, sale of assets, or bankruptcy, information may be transferred as part of that transaction; we will require the recipient to honor this Privacy Policy or provide notice of any material change.
• To comply with law or protect rights — where required by law, regulation, valid legal process, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of any person.

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising. If that ever changes, we will update this Privacy Policy and post a "Your Privacy Choices" link.

12. Law-firm customer data and end-user intake data

When the Services are used to receive a call from a prospective client of a law-firm customer, the law firm is the controller of the information collected. Atendros acts as the firm's service provider. The firm decides what is collected, why, how long it is kept, and to whom it is disclosed.

• Requests from prospective clients of a firm — if you are a prospective client whose information was captured through a firm's intake line and you wish to exercise privacy rights (such as access, correction, or deletion), please contact the firm directly. The firm is responsible for responding under its applicable obligations. We will assist the firm in responding consistent with the master services agreement.
• Confidentiality. We recognize that information shared by prospective clients of a law firm may be protected by professional-responsibility rules (including but not limited to ABA Model Rule 1.18 and analogous state rules). We handle such information with confidentiality controls consistent with our role as a nonlawyer assistant under principles reflected in ABA Model Rule 5.3 and as set out in our master services agreement with each firm.

13. Cookies, analytics, and similar technologies

We use a small number of technologies on the Site:

• Essential infrastructure — Cloudflare provides DNS, content delivery, security, and hosting. Cloudflare may set technical cookies needed for security (for example, to recognize a returning visitor as not a bot).
• Fonts — we load web fonts from Google Fonts, which causes a request to be made to Google's servers and may transmit your IP address to Google.
• Booking widget — the discovery-call booking widget is embedded from a third-party scheduling provider; that widget may set cookies for session, anti-fraud, and analytics purposes operated by the scheduling provider.

We do not currently load advertising trackers, retargeting pixels, or third-party analytics (such as Google Analytics or Meta Pixel) on the Site. If we add any of those in the future, we will update this Privacy Policy and, where applicable, present a cookie consent mechanism.

Most browsers allow you to refuse or delete cookies through their settings; disabling cookies may affect the functionality of the Site, particularly the booking widget. We do not currently respond differently based on a "Do Not Track" browser signal; we honor opt-out preference signals (such as Global Privacy Control) where required by applicable law.

14. AI, automated processing, translation, and intake summaries

The Services use artificial intelligence to operate, including for speech recognition (converting spoken audio into text), language identification (detecting whether a caller is speaking English or Spanish), conversational response generation (generating bilingual responses based on the firm's script), machine translation (converting content between English and Spanish), and structured summarization (generating short summaries of each call for the firm).

You should be aware that:

• AI outputs can be inaccurate, incomplete, outdated, or mistranslated. AI is a tool that supports the firm; it is not a substitute for review by a qualified person.
• No legal advice. AI outputs are not legal advice and must not be relied on as such.
• Translation is convenience. AI-generated translations are intended to facilitate intake. They are not a substitute for review by a qualified bilingual attorney, certified translator, or interpreter for legal proceedings.
• Attorney/firm review is required. Every intake summary, suggested case category, suggested next step, and translation is intended to be reviewed by the firm before any legal action is taken in reliance on it.
• No solely automated legal decision-making. The Services are designed to capture and route intake information. Decisions about a person's immigration matter (eligibility, strategy, filings) are made by the firm's attorneys.

We do not use customer intake data to train AI models without the relevant law-firm customer's separate written consent. We use AI inference providers as subprocessors and contractually require them not to retain customer content beyond what is necessary to provide their services to us.

15. No legal advice — no attorney-client relationship with Atendros

Atendros is not a law firm. We do not provide legal advice. Visiting the Site, calling a number powered by the Services, scheduling a call with us, receiving a transcript or summary, or communicating with us in any other way does not create an attorney-client relationship between you and Atendros. Information you share with Atendros is not protected by attorney-client privilege between you and Atendros.

If you need legal advice about an immigration matter, you should consult a licensed attorney or otherwise authorized legal representative. The United States Citizenship and Immigration Services maintains information on authorized legal-services providers at uscis.gov/scams. In the United States, a "notario público," notary public, immigration consultant, or business that is not an attorney or a Department of Justice–accredited representative is not authorized to provide legal advice on immigration matters.

16. Data retention

We retain information only as long as needed for the purpose for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce agreements. Specifically:

• Server and security logs — typically 90 days, longer if needed for active investigation.
• Discovery-call bookings and contact-form submissions — typically 24 months from the date of last interaction.
• Customer account and contract records — duration of the customer relationship and a reasonable period thereafter for tax, audit, statute-of-limitations, and dispute-resolution purposes.
• Information processed on behalf of a law-firm customer (intake calls, transcripts, summaries, recordings) — per the firm's instructions and retention policy. Internal Atendros copies retained for operational purposes are typically purged within 90 days unless the firm specifies otherwise.
• Backups — retained according to our backup schedule and purged on a rolling basis.

When information is no longer needed, we delete or de-identify it. Aggregated or de-identified information may be retained indefinitely for analytics, benchmarking, and product improvement, in a form that does not identify any individual.

17. Data security

We take commercially reasonable, risk-appropriate measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. These include transport encryption (TLS), encryption at rest where reasonably available, access controls based on least-privilege principles, role-based access to administrative tools, multi-factor authentication for administrative accounts, monitoring of edge traffic by our hosting and security provider, vendor-management due diligence on subprocessors, and incident-response procedures.

No method of transmission over the Internet or method of electronic storage is one hundred percent secure. We cannot guarantee absolute security and we make no representation that the security of any system is impenetrable. If you have reason to believe that an interaction with us is no longer secure, please contact us immediately at [email protected].

18. International data transfers

Atendros is based in the United States, and we and our service providers primarily process information in the United States. If you access the Site or use the Services from outside the United States, your information will be transferred to and processed in the United States, which may have data-protection laws different from those of your country.

We do not actively offer the Services outside the United States as of the effective date above. If you are located in the European Economic Area, the United Kingdom, or Switzerland and you choose to interact with us, you do so on the understanding that your information will be processed in the United States.

19. United States state privacy rights

Depending on the state in which you reside, you may have rights with respect to personal information that we hold about you, such as the right to request access to, correction of, or deletion of personal information; the right to opt out of certain processing; and the right to non-discrimination for exercising those rights. You may also have the right to appeal an adverse decision on a privacy request and to designate an authorized agent to exercise rights on your behalf where state law allows.

Atendros today does not meet the applicability thresholds of every state privacy law (for example, the Florida Digital Bill of Rights applies, at present, only to entities with very substantial global revenue). Where applicable thresholds are met or where a request is otherwise honored as a matter of practice, we will respond consistent with the relevant state law.

To submit a request, contact us at [email protected]. We will verify your identity using information already in our records or by requesting reasonable additional information.

20. California privacy notice (CCPA / CPRA)

This section supplements the rest of this Privacy Policy for California residents.

Categories of personal information collected, used, and disclosed. In the prior twelve (12) months, we have collected the categories of personal information described in Sections 4 through 9 of this Privacy Policy, which generally correspond to the following CCPA categories: identifiers; commercial information; internet or other electronic network activity information; geolocation data (general, derived from IP); professional or employment-related information; and, where volunteered to a law-firm customer through the Services, additional categories including (as defined in California law) "sensitive personal information."

Sources, purposes, and disclosures. Sources, business purposes, and recipients are described in Sections 5 through 11.

Sale and sharing. We do not sell personal information for monetary value. We do not "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA. We have not sold or shared personal information of California residents in the prior twelve (12) months.

Sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those allowed by California law without offering you the right to limit such use.

Rights. California residents may request: to know what personal information we have collected, used, and disclosed about them; to delete personal information we have collected (subject to exceptions); to correct inaccurate personal information; to opt out of sale or sharing (we do not sell or share, but you may submit this request and we will confirm); to limit our use and disclosure of sensitive personal information (subject to exceptions); and to be free from discrimination for exercising these rights.

Authorized agents. You may designate an authorized agent to make a request on your behalf. We will verify the agent's authority before responding.

How to submit a request. Email [email protected] with the request type and enough information for us to verify your identity. We will respond within the time required by law (generally 45 days, extendable by 45 days where allowed).

Appeal. If we decline a request, you may appeal by replying to our written response within thirty (30) days.

21. GDPR / UK GDPR rights (if applicable)

If you are located in the European Economic Area, the United Kingdom, or Switzerland and the General Data Protection Regulation (or UK GDPR) applies to your interaction with us, you may have the following rights with respect to personal data we control: access, rectification, erasure, restriction of processing, objection to processing, and data portability; the right not to be subject to a decision based solely on automated processing producing legal or similarly significant effects; and the right to lodge a complaint with a supervisory authority in your jurisdiction.

Legal bases on which we may rely include performance of a contract, compliance with a legal obligation, consent (where required), and our legitimate interests in operating, securing, and improving the Services, where those interests are not overridden by your rights and freedoms.

To exercise GDPR or UK GDPR rights, contact us at [email protected].

22. Children's privacy and minor-related immigration information

The Site and Services are intended for business contacts at law firms, not for children. We do not knowingly collect personal information from children under thirteen (13) directly through the Site.

In the context of immigration intake, an adult caller may share information about a minor (for example, a child beneficiary in a family-based matter or a minor in a Special Immigrant Juvenile, asylum, or DACA-eligible context). When that happens, we process the information only to perform the Services for the law-firm customer and treat it as sensitive. The law firm is responsible for any direct interaction with the minor or the minor's parent or guardian.

If you believe we have received information from a child under thirteen (13) without appropriate authorization, contact us at [email protected] and we will take appropriate steps.

23. Your choices

You can:

• Limit what you share. You can choose not to fill in optional fields in any form on the Site, and you can choose how much detail to include in any free-text message to us.
• Opt out of marketing email. Marketing email, if any, will include an unsubscribe link. Transactional emails about an active service relationship are not subject to opt-out.
• Manage cookies. Use your browser settings to refuse or delete cookies. Some Site features (such as the booking widget) may not function fully without certain cookies.
• Manage scheduling tool data. The scheduling tool embedded on the Site has its own privacy notice and account controls.

24. "Do Not Sell or Share" / targeted advertising

We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are defined under California law and similar U.S. state privacy laws. As a result, we do not currently display a "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link, because there is no sale or sharing to opt out of. If our practices change, we will update this Privacy Policy and provide the appropriate link and mechanism.

25. How to submit privacy requests

Send your request to [email protected] with the subject line "Privacy request." Include enough information for us to verify your identity (typically your name, email address, and the nature of your interaction with us), and describe the request clearly. We will respond within the timeline required by applicable law.

If your request concerns information that was collected through the intake line of a law-firm customer, we will direct your request to that firm, which is the controller of that information.

26. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the "Effective date" at the top of this Privacy Policy. If a change is material, we will provide additional notice on the Site or by email where reasonably practicable. We encourage you to review this Privacy Policy periodically.

27. Contact information

Atendros LLC
1000 Brickell Avenue, Suite #715 PMB 730, Miami, FL 33131
Email (privacy): [email protected]
Email (general): [email protected]
Website: https://atendros.com

A Spanish-language version of this Privacy Policy is available at /es/privacidad. If there is any conflict between the English and Spanish versions, the English version controls except where required otherwise by applicable law.

This Privacy Policy is informational. It is not legal advice and does not create any contractual rights. The Site is operated by Atendros LLC, a Delaware limited liability company. Use of the Site is also subject to our Terms & Conditions.