Last Updated: July 9, 2026
Welcome to Setterz.ai (the "Website," "Platform," "Platform Services," "we," "us," or "our"). Setterz.ai is headquartered in Burlington, Ontario, Canada, and provides services across the United States and Canada.
We are committed to protecting the privacy and security of our users — primarily law firms, practitioners, and legal agencies ("Firms," "Users") — as well as the prospective clients, claimants, and leads whose data is processed through our AI intake systems ("Case Leads," "End Users").
This Privacy Policy describes how Setterz.ai collects, uses, processes, discloses, and safeguards personal information when you access or use our Website, platform tools, and AI automated services. By using Setterz.ai, you agree to the practices outlined in this policy.
We collect information directly from Firms, as well as information generated automatically during the use of our AI intake infrastructure.
Account Information. When you register for an account, we collect your name, professional email address, phone number, firm name, practice areas, password, and billing information.
Firm & Configuration Data. Any custom legal scripts, intake question flows, baseline knowledge data, intake workflow preferences, or practice metrics you upload or configure to train your AI agents.
Integrated CRM and Tool Data. Data synced from your connected legal software stack (e.g., Clio, Filevine, Smokeball, or marketing forms) to facilitate data flow between systems.
When a Firm deploys an AI agent via Setterz.ai to handle web forms, text messaging, or inbound/outbound intake calls, we act as a Data Processor and collect:
Contact Information. Name, phone number, email address, and geographic location of the prospective client.
Intake & Claim Details. Narrative text, call recordings, speech-to-text transcripts, and summaries containing information about a legal matter, accident details, or urgency status provided by the Case Lead.
Interaction Logs. Call lengths, timestamps, delivery rates, and channel statistics.
Usage and Device Metrics. IP addresses, browser types, operating systems, device signals, interaction logs, and referral URLs, collected for platform security, maintenance, and analytics.
If you choose to connect your Google account with Setterz.ai to enable calendar functionality, we will request access to specific Google Calendar data via the Google Calendar API.
What Data We Access. We may access and process your calendar list, event metadata (title, description, date and time, location, attendees), and free/busy availability.
How We Use This Data. Solely to allow your AI agent to check availability in real time; to create, update, or delete events as part of lead engagement or consultation booking flows; and to provide seamless scheduling through your calendar.
Storage and Sharing. We do not store full calendar event content permanently. We do not share your Google Calendar data with any third parties. We retain only the metadata necessary to link events to the Setterz.ai platform for scheduling visibility. You may disconnect your Google account at any time from your Setterz.ai dashboard.
Protection Measures. All Google Calendar data is transmitted securely via HTTPS and TLS 1.2 or higher. Any sensitive data temporarily stored is encrypted at rest using AES-256 encryption. Access is strictly limited to authorized systems and personnel with a legitimate need, and all access is logged and monitored.
Limited Use Compliance. Setterz.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Google data is never sold, used for advertising, or shared with unauthorized third parties.
We use the collected information to power, secure, and optimize our AI intake infrastructure. Specifically, to:
We recognize the highly sensitive nature of legal data, potential attorney-client interactions, and intake records.
Data Ownership. Firms retain 100% ownership of any data uploaded, collected, or generated via their configured AI agents. Setterz.ai does not own your case leads, call transcripts, or intake data.
No Selling of Data. Setterz.ai will never sell, rent, or share user or client data with third parties for marketing or advertising purposes.
AI Training Boundaries. Data processed within a specific Firm's account is used solely to optimize that Firm's AI agents and pipeline performance. It is not pooled to train public models.
We share information only under strict, controlled operational parameters:
With Third-Party Service Providers. We share data with verified infrastructure vendors (cloud hosting, telephony routing, payment processors, and large language model APIs) strictly to deliver the platform services. These vendors are contractually bound by stringent data confidentiality obligations.
With Integrated Legal Apps. Data is shared with external tools (e.g., Clio, Filevine) only when a Firm actively configures and authorizes that specific integration.
For Legal Compliance. We may disclose information where strictly required by law, court order, or valid government regulation, provided we give prior notice to the affected Firm where legally permissible.
Encryption in Transit and at Rest. All personal information, call recordings, text records, and case notes are encrypted in transit using HTTPS and TLS 1.2 or higher, and at rest using AES-256 encryption.
Access Governance. Access to your account backend is restricted internally and protected by authentication controls. Only authorized personnel with a legitimate business need have access to sensitive data, and all access is logged and monitored.
Data Minimization. We collect and retain the minimum amount of information necessary to provide our services. Calendar event data is not stored permanently and is retained only as long as required to fulfill scheduling functions.
Regular Security Reviews. We conduct periodic security assessments, vulnerability scans, and audits.
Incident Response. In the event of a data breach, Setterz.ai maintains an established incident response plan that includes immediate containment, investigation, and notification to affected Firms and individuals as required by applicable law.
Data Deletion Upon Cancellation. If a Firm formally cancels its subscription, all leads, recordings, campaign histories, and custom AI scripts associated with the account will be permanently and securely deleted from our live databases.
Given our operations in the United States and Canada, Setterz.ai adheres to the California Consumer Privacy Act (CCPA), the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, and the Telephone Consumer Protection Act (TCPA) in the United States as it relates to AI-generated calls and SMS communications.
Setterz.ai operates AI agents that conduct phone calls, send SMS messages, and engage with leads on behalf of client Firms. All outbound communications are initiated on behalf of and under the direction of the Firm.
While Setterz.ai provides built-in tools such as DNC list filtering and compliance pacing controls, the ultimate legal responsibility for compliant outreach lies with the Firm. Firms must ensure they have obtained the necessary explicit prior express written consent from prospective clients before initiating automated text or voice outreach campaigns, and must abide by the Telephone Consumer Protection Act (TCPA), the Telemarketing Sales Rule (TSR), Canada's Anti-Spam Legislation (CASL), applicable Do-Not-Call registries, and relevant state bar advertising rules.
Setterz.ai provides the agent infrastructure; consent and Do-Not-Call compliance are the responsibility of the Firm.
We use standard cookies and similar technologies to enhance user experience and analyze platform usage.
Firm Communications. Users may opt out of promotional emails or platform notifications at any time via the "unsubscribe" link within the communication or by updating dashboard settings.
End-User / Case Lead Opt-Out. Prospective clients interacting with our text messaging systems may opt out of automated follow-up cadences at any time by replying with standard keywords such as STOP, QUIT, or UNSUBSCRIBE.
We adhere to industry standards for data retention and deletion. Users have the right to access, correct, and delete their personal data directly from the application they are using, or by submitting a request to info@mail.setterz.ai.
Our data operations are confined to the United States and Canada, ensuring data remains within these borders.
Setterz.ai reserves the right to update or modify this Privacy Policy as our features evolve and regulatory frameworks adapt. When modifications occur, the "Last Updated" date at the top of this page will be revised accordingly. Significant changes will be communicated through the platform or via email. Continued use of the platform after updates take effect constitutes acceptance of the modified policy.
For any privacy-related inquiries, concerns, or compliance questions regarding this Privacy Policy or our data protection protocols:
Email: info@mail.setterz.ai
Setterz.ai — Burlington, Ontario, Canada
Please refer to our list of FAQ for commonly asked questions.
