Privacy Policy

Miranda Legal, Inc. ("Miranda," "we," "us," or "our") provides a voice-AI intake and qualification platform for law firms (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. This Policy applies to the marketing site at miranda.legal, the application at app.miranda.legal, and any inbound calls placed to phone numbers operated by Miranda on behalf of a customer law firm.

If you are a caller dialing a phone number operated by Miranda, the law firm answering your call is the controller of your information; we are the processor. Their privacy notice governs how your information is ultimately used. This Policy describes what Miranda does with the information while it passes through our Service.

Information we collect

From law-firm customers

• Account information: name, work email, role, firm name, phone number(s).
• Authentication credentials and session data.
• Configuration and knowledge documents you upload (intake playbooks, document templates, voice settings).
• Usage data (calls answered, drafts produced, login activity) for billing and analytics.

From callers to firm-operated numbers

• Caller phone number, call audio, and transcript.
• Information voluntarily disclosed during the call (name, matter facts, contact preferences).
• Routing metadata: time of call, duration, outcome (booked, transferred, declined, etc.).

Automatically collected

• Device, browser, and IP address when you visit our marketing or application sites.
• Cookies and similar technology used for authentication and basic analytics. We do not run third-party advertising trackers.

How we use information

• To deliver the Service: answer calls, produce transcripts, draft documents, and route handoffs.
• To authenticate users and protect account security.
• To bill customers and process payments through our payment processor.
• To improve the Service. We do not use customer call data to train third-party models. Vendor calls (e.g., to Anthropic, OpenAI, Cartesia, ElevenLabs) are made with no-train flags enabled where the vendor supports them.
• To respond to customer support requests and security inquiries.
• To meet legal and regulatory obligations.

How we share information

We share information only with the following categories of recipients, and only as needed to operate the Service:

• Subprocessors: Twilio (telephony), Anthropic and OpenAI (language models), Cartesia and ElevenLabs (voice), Vercel (hosting), and an AWS-backed Postgres provider (storage). A current list is available on request.
• The customer law firm on whose behalf a call was placed.
• Payment processors for invoicing and collection.
• Legal recipients when we are required to disclose by law or to protect rights, safety, and the integrity of the Service.

We do not sell personal information, and we do not share it with advertising networks.

Retention

Call audio is retained for 90 days by default and is configurable per firm between 7 and 365 days. Transcripts and structured intake records are retained for the lifetime of the underlying matter, after which they are deleted according to the firm's retention rule. Account data is retained for the duration of the customer relationship and for 60 days thereafter.

Callers may request deletion of their information at any time by asking the AI on a live call ("please delete my information") or by emailing rupesh@miranda.legal. We will action verified requests within 30 days.

Security

Information at rest is encrypted with AES-256. Information in transit is encrypted with TLS 1.3. Access to production data is gated by SSO and role-based controls, and every action is logged in an audit trail. We work toward SOC 2 Type II readiness; current target Q3 2026.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal information, and to object to certain uses. To exercise these rights, contact us at rupesh@miranda.legal. We will verify your identity before action.

Residents of California, Colorado, Connecticut, Utah, Virginia, and other US states with comprehensive privacy laws have additional rights, including the right to opt out of targeted advertising, a setting that does not apply to Miranda since we do not engage in targeted advertising.

International transfers

Miranda is operated from the United States. If you contact us from outside the US, your information will be transferred to and processed in the US.

Children

The Service is not directed to children under 16 and we do not knowingly collect their information. If you believe a child has interacted with the Service, contact us and we will delete the relevant records.

Changes

We may update this Policy from time to time. Material changes will be communicated by email to customer firms and posted here with an updated "Effective" date.

Contact

Miranda Legal, Inc. · rupesh@miranda.legal