Privacy Policy

From Clients who sign up for the platform:

• Firm or business name, service category, phone number, and logo
• Account email and password (managed by our authentication provider)
• Payment details, processed and stored directly by Stripe, our payment processor. We never receive or store full card numbers
• Service-area preferences, such as the states or locations you serve

From Leads who submit an inquiry through our websites or a Client’s funnel:

• Name and phone number
• Answers to our intake questions about an accident: the state where it happened, the type of accident, roughly when it happened, whether you were injured and have had treatment, whether you think someone else was at fault, and whether you already have an attorney
• A record of the consent you gave to be contacted: the wording you agreed to, the date and time, and your IP address and browser details
• Marketing attribution data (UTM parameters, referring campaign) used to measure which ad drove the submission

Information about an injury or medical treatment can be sensitive, and some state laws treat it as health-related personal information. We collect only what our intake questions ask. We use it to process your inquiry and to pass it to the law firm handling it, and we do not use it to build advertising profiles. Please do not enter anything beyond what the questions ask for, and never enter a Social Security number, payment card number, or detailed medical records in a form on our sites.

• To operate Client accounts: billing, campaign setup, and the dashboard
• To deliver a Lead’s inquiry to the specific Client whose form was submitted, or, for an inquiry with no matched firm yet, to hold it so a participating firm can follow up if one becomes available in the Lead’s state
• To contact Leads by phone call or text message, only as they have agreed to (see below)
• To send booking confirmations and, where consented to, text message notifications
• To measure and improve ad performance through our advertising partners
• To keep records of consent, handle opt-outs, and comply with the law

• The Client (for example, a law firm) whose funnel a Lead submitted through, so that Client can follow up on the inquiry. This is the core service a Lead is requesting when they submit a form, not a sale, and we do not sell Lead information to any other Client or unrelated business. Clients pay White Candle for advertising and for inquiries received, and each Client is a separate business responsible for how it handles information after it receives it
• Stripe, payment processing for Client billing
• Supabase, database and authentication hosting
• Meta (Facebook/Instagram), advertising delivery and measurement for Client campaigns. For inquiries that meet our criteria, we may send Meta an event showing that a form was completed, along with a hashed phone number and technical identifiers such as your IP address and browser details, so Meta can measure and improve ad delivery. We do not send your accident or injury answers to Meta

We do not sell personal information to data brokers or other unrelated third parties.

If you check the consent box on a form, you agree that White Candle and the law firm that receives your inquiry may contact you about it by phone call and text message, including with automated technology, at the number you gave. The consent box must be checked to submit the form, because a case review happens by phone or text, but agreeing is not a condition of hiring any attorney or buying any product or service. Message and data rates may apply, and message frequency varies. You can reply STOP to any text, or email us at vancecompanyteam@gmail.com, to stop receiving them, and you can ask a caller to stop calling at any time. We keep a record of the consent you gave and of any opt-out.

The calls and texts may come from one of our participating law firms, which are independent businesses, and not only from White Candle. By checking the box and submitting a form you also agree to the use of electronic signatures for that consent.

White Candle does not give legal advice, does not evaluate whether you have a claim, and does not recommend or rate any attorney. Submitting an inquiry does not create an attorney-client relationship with White Candle or with any law firm. Any attorney who contacts you is solely responsible for the legal services they provide.

Clients can optionally connect their Google Calendar so that White Candle can show Leads real available time slots and book confirmed calls directly onto the Client’s calendar. This requires access to:

• Free/busy availability, to determine which time slots are open
• Calendar event creation, to add a confirmed booking once a Lead books a call
• The Client’s Google account email, to identify which calendar is connected

We never read the titles, descriptions, guests, or any other details of a Client’s existing calendar events, only whether a given time is free or busy. A Client can disconnect Google Calendar at any time from their dashboard, which revokes this access immediately.

White Candle’s use of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use industry-standard security procedures to protect the confidentiality of your data, including encryption of data in transit (HTTPS/TLS) and at rest, access controls that limit who can view sensitive information, and service-role-only database access for operations like billing and payment details, never exposed through client-facing access. Payment details are handled directly by Stripe, our PCI-compliant payment processor, and are never stored on our own servers.

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, and other states with privacy laws), you may have the right to ask what personal information we hold about you, to have it corrected or deleted, to opt out of the sale or sharing of your information for targeted advertising, and to limit our use of sensitive information. To make a request, email vancecompanyteam@gmail.com or use the steps on our Data Deletion Instructions page. We will not treat you differently for exercising these rights. Some states, such as Washington, also have laws specifically for consumer health data; where they apply, we handle your information as they require. You can also manage ad preferences directly in your Meta account settings.

We retain account and lead data for as long as needed to provide the service, and as required for billing, tax, and legal recordkeeping. You can request deletion at any time, see below.

To request that your personal information be deleted, see our Data Deletion Instructions page.

White Candle is intended for adults and is not directed at, and does not knowingly collect information from, anyone under 18 years old.

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

Questions about this policy can be sent to vancecompanyteam@gmail.com.