Verantel Privacy Policy
Effective date: October 16, 2026 Last updated: October 16, 2026
1. Who this policy is for
Verantel is a legal-intake platform operated by Fall Guy LLC, a Washington limited liability company ("Fall Guy", "we", "us"). This policy describes what we do with personal information.
Two very different groups of people appear in this policy, and what we do with their information is not the same:
- Business users — the lawyers, firm staff, and account holders who sign up, configure a firm, and read intakes in the dashboard. We deal with these people directly, and for their information we are the party responsible.
- Participants — people who talk to a firm's intake agent because they are looking for a lawyer. A participant's counterparty is the firm, not us. The firm decides what to collect, what to tell participants, and how long to keep it. Where we hold that information at all, we hold it for the firm.
Read Section 3 if you are a business user. Read Section 4 if you are a participant — and note carefully that Section 4 splits in two, because where your intake lives depends on which firm you contacted.
2. The one thing a participant most needs to know
Some firms run Verantel on our infrastructure, and some run it on their own.
- Verantel-hosted. Fall Guy stores your intake — everything you typed, the summary the agent produced from it, and the contact details you gave — on infrastructure we operate. This policy governs it, and you can ask us to delete it.
- Firm-hosted. The firm runs the intake software on its own infrastructure. Your conversation and contact details never reach Fall Guy at all. We cannot read them, produce them, or delete them, because we do not have them. The firm's own privacy policy governs, and a deletion request goes to the firm.
We have no control over any firm's privacy practices, retention schedule, or security, in either arrangement. If you are unsure which arrangement a firm uses, ask the firm, or ask us at legal@verantel.com and we will tell you.
3. Business users
3.1 What we collect
| What | Where it comes from | Why |
|---|---|---|
| Email address, username, password credential | Your sign-up, through our identity provider | To create and authenticate your account |
| Account identifier | Our identity provider | To link your account to your firms |
| Firm name, address (slug), custom hostname | You, in the dashboard | To run your firm's intake at its own address |
| Firm configuration — practice areas, jurisdictions, welcome and consent text, entry and post-close settings | You, in the dashboard | To shape the intake your participants see |
| Membership and role records | You and other members | To decide who can see your firm's intakes |
| Worker registration — the name and hostname of a self-hosted worker, and the version and content inventory it reports | Your worker, on a periodic heartbeat | To operate, support, and update the software |
| Aggregate session counts, and language-model token counts and call timings keyed by an opaque session identifier | Your worker | To meter usage, operate the Service, and show you the Usage page |
| Operational logs — service events, timestamps, and errors | Automatically, when you use the Service | Security, debugging, abuse prevention |
| Anything you send us | Support email | To answer you |
We do not run advertising trackers, analytics pixels, or third-party marketing tags on the Service.
3.2 How we use it
To provide, secure, and support the Service; to authenticate you; to meter usage; to communicate with you about the Service; to detect and stop abuse; and to comply with law. We do not sell business-user information and we do not share it for cross-context behavioral advertising.
3.3 Cookies
We set one cookie: an HttpOnly, parent-domain session cookie that holds your staff sign-in. It is strictly necessary to keep you signed in across the dashboard, is not readable by JavaScript, and is not used for advertising or analytics. Signing out clears it. We use no other cookies.
3.4 How long we keep it
Account and firm records last as long as your account does. When your account closes, see Section 15.4 of the Terms of Service. Operational logs are kept for a limited operational period and then discarded. Aggregate usage counts do not identify any participant and may be kept as historical metering data.
4. Participants
4.1 What is collected during an intake
When you start an intake you provide your name, email address, and phone number, and you check a consent box. The firm writes its text; a firm that writes none shows a default that links these terms. When the chat opens, your browser reports its time zone, so the agent and the firm read each message's time in your local time. During the interview, the agent records everything you type. After the conversation closes, an automated pass produces a written summary of your situation, a practice-area classification, and a list of people or organizations you mentioned. All of this is prepared for the firm. Our services also keep the operational logs Section 3.1 describes for intake traffic.
Please do not send documents, images, account numbers, or identifiers you do not want the firm to have. The intake agent is not a lawyer and this conversation is not legal advice. Whether anything you say is privileged is a question of law in your state and of your relationship with the firm — not something the Service determines.
4.2 If the firm is Verantel-hosted
We store your intake on infrastructure we operate, in a database dedicated to that one firm, together with an archived copy of the completed record. We hold it on the firm's behalf, as its service provider, for the purpose of delivering intake to that firm. Specifically:
- We do not sell it, and we do not share it for advertising.
- We do not use your conversation to train machine-learning models. What our language-model provider does with it is governed by that provider's terms (Section 5).
- We do not use it to market to you.
- We do not show it to any firm other than the one you contacted. Each firm's intake data is held in a separate database from every other firm's.
- Fall Guy personnel access it only where needed to operate, support, secure, or debug the Service, or where law requires.
You can ask us to delete it. Write to legal@verantel.com with the subject line "Deletion request"; Section 8 of the Terms of Service sets out exactly what to include, how we verify you, how long we take, what gets deleted, and what does not. Because the firm is responsible for the record, we tell the firm about your request and honor it unless the firm identifies a legal or professional obligation to retain it — in which case we will tell you that, and who to take it up with.
4.3 If the firm is firm-hosted
Your conversation, your contact details, and the summary produced from them go to the firm's own infrastructure and are never transmitted to Fall Guy. We do not store them, cannot retrieve them, and cannot delete them. The firm's worker sends your conversation to a language-model provider under the firm's own agreement with that provider.
What we do receive from a firm-hosted deployment is limited to operational telemetry that carries no conversation, name, or contact detail: how many intakes that firm opened and completed, language-model token counts and call timings keyed by an opaque session identifier, the software version it is running, and the address it runs at.
To ask about, correct, or delete your intake with a firm-hosted firm, contact the firm. We will help you identify who to write to if you ask us.
4.4 Blocked contacts
If an intake ends because of abusive, off-topic, or deliberately contradictory conduct, the firm's deployment will decline to open a new intake for the same email address or phone number. This works by checking the firm's own past intakes; it applies only to that one firm.
5. Automated processing and our language-model provider
A large language model conducts the intake interview and writes the summary. The worker sends the text of your conversation to Anthropic, the model's provider, to generate the agent's replies and the summary. Anthropic's terms with whoever supplies the worker's model credential govern what Anthropic does with that text, including how long it keeps it and whether it may train models on it:
- For a Verantel-hosted firm, Fall Guy supplies the credential, and Anthropic's terms with Fall Guy govern.
- For a firm-hosted firm, the firm supplies the credential, and Anthropic's terms with the firm govern.
Anthropic publishes its terms and privacy policy at https://www.anthropic.com/legal. We make no promise about Anthropic's handling beyond what those terms say.
The summary's practice areas and firm-alignment assessment, and the agent's decision to end a conversation for cause, are automated. None of them decides whether a firm represents you. A person at the firm decides that.
6. Service providers
We use a small number of providers to run the Service. Each one processes information only to provide its service to us:
| Provider | Role |
|---|---|
| Amazon Web Services | Cloud hosting and storage for the platform and our hosted worker |
| Amazon Cognito | Business-user sign-in and credential storage |
| Anthropic | Language-model processing of intake conversations and summaries, under Anthropic's own terms (Section 5) |
| Amazon Simple Email Service | Sending intake verification links, sign-up codes, and Service notices |
Beyond these, we disclose personal information only: to a firm you contacted (that is the point of the Service); where you direct us to; to our professional advisors under confidentiality; where required by law, subpoena, or other legal process; where necessary to protect the rights or safety of any person; or to a successor in a merger, acquisition, or sale of assets, in which case this policy continues to apply until it is replaced with notice to you.
7. Security
We protect information with measures appropriate to its sensitivity, including transport encryption, credential hashing, tightly scoped and short-lived access tokens, per-firm database separation, and restricted administrative access.
No system is perfectly secure. The Service is currently offered for demonstration and evaluation and should not be treated as a system of record.
8. Retention
We keep information for as long as needed for the purpose it was collected, and then delete it or make it non-identifying:
- Business-user account and firm records — for the life of the account.
- Verantel-hosted intake records — until the firm deletes them, until we act on a deletion request, or until the firm's account closes and its export window expires.
- Operational logs — a limited operational period.
- Aggregate counts — indefinitely; they identify no one.
- Backups — deleted records persist in routine backups until those backups cycle out, after which they are gone.
- Language-model provider copies — as long as Anthropic's terms allow (Section 5). We cannot delete them from Anthropic's systems.
9. Your choices and rights
Everyone. You may ask us what we hold about you, ask us to correct it, and ask us to delete it. Write to legal@verantel.com. Section 8 of the Terms of Service sets out how deletion works and what its limits are.
Washington residents. Washington's My Health My Data Act gives you rights over consumer health data, including a right to withdraw consent and a right to have it deleted. An intake conversation can contain health information — a personal-injury, medical-malpractice, disability, or family-law intake often does. Where we hold such data for a Verantel-hosted firm, you may exercise those rights by writing to us at the address above, and we will act on them as that Act requires.
Other states and countries. Depending on where you live, you may have additional rights of access, correction, deletion, portability, appeal, or objection. We will honor rights that apply to you. Where we hold intake data on a firm's behalf, we will route your request to that firm and act on the firm's instruction, as the law governing service providers contemplates.
We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of on that front.
We will not discriminate against you for exercising any of these rights.
10. Children
The Service is not directed to children under 13, and we do not knowingly collect their personal information. A firm that takes intakes involving minors is responsible for handling that lawfully. If you believe a child has given us information, write to legal@verantel.com and we will delete it.
11. Where information is processed
We operate in the United States and process information there. If you contact us from outside the United States, understand that your information will be transferred to and processed in the United States, whose data-protection law may differ from your own.
12. Changes to this policy
We may update this policy. We will post the updated version with a new effective date, and for material changes we will give notice through the Service or by email before they take effect.
13. Contact
Questions, requests, or complaints:
Fall Guy LLC PO Box 75121 Seattle, WA 98175
If you are unsatisfied with our response, you may escalate to the Washington State Attorney General's Office or to the regulator with authority where you live.