Privacy policy

Last updated: October 2026

Intakedoor ("the Service") is operated by Russell Singer ("we", "us"). This policy explains what we collect, why, and how it is handled. It is written for two audiences: law firms that use the Service, and the people who fill in a firm's intake form.

If you fill in a law firm's intake form

The form belongs to the law firm named on it. The information you enter (such as your name, contact details, the nature of your legal matter and the names of other parties) is sent to that firm's Clio account and to the firm by email. We process it on the firm's behalf and do not use it for any other purpose. The firm is responsible for how it handles your information afterwards. Submitting a form does not create an attorney-client relationship with the firm or with us.

We keep a copy of each submission so the firm can review it in its dashboard and so we can retry delivery if Clio is temporarily unavailable. We also store a one-way hash of the submitting IP address for abuse prevention; the IP address itself is not stored.

If you are a law firm using the Service

• Account data. When you sign in with Clio we store your Clio user ID, name, email, firm name and Clio account ID.
• Clio access tokens. We store the OAuth tokens that let the Service act on your Clio account, encrypted at rest. We never see or store your Clio password. You can revoke access at any time from Clio's settings or by contacting us; revocation deletes the tokens.
• What we do in Clio. With your authorization the Service searches your contacts and matters (for the conflict pre-check), creates contacts, creates matters and adds matter notes, and reads your practice areas and user list to populate settings. It does not modify or delete existing records.
• Form and submission data. Your form definitions and the submissions they receive, including the results of the conflict pre-check.
• Billing. Payments are processed by Lemon Squeezy, which is the merchant of record. We receive your subscription status and customer ID, not your card details. Lemon Squeezy's privacy policy applies to the checkout.
• Email. New-intake notifications are sent to the address you configure, through a transactional email provider acting as our processor.

How we protect data

• All connections use HTTPS. Clio tokens are encrypted at rest with a key held separately from the database.
• Access to production systems is limited to the operator and protected by multi-factor authentication.
• We collect only the data needed to run the Service and request only the Clio permissions it uses.

Retention and deletion

Submissions are retained while your account is active. When you close your account, or on request, we delete your account data, tokens, forms and submissions within 30 days, except where retention is required by law. Firms may ask us to delete individual submissions at any time at support@intakedoor.com.

Breach notification

If we become aware of a security incident affecting your data we will notify affected firms by email without undue delay, and in any case within 72 hours of confirming the incident, with what we know and what we are doing about it.

Sharing

We do not sell personal data. We share data only with the processors needed to run the Service: our hosting provider, our email provider, Lemon Squeezy for billing, and Clio (which you connect yourself). Each is bound by its own privacy and security commitments.

Your choices and contact

You may access, correct or delete your data, or withdraw Clio authorization, by contacting support@intakedoor.com. Residents of jurisdictions with specific privacy rights (for example the EU, UK, California) may exercise those rights through the same address.

Russell Singer, Virginia, United States.