Effective date: August 2, 2026 · Last updated: August 2, 2026

Contents: 1. Introduction, Scope, and Definitions · 2. Information We Collect · 3. How We Use Information · 4. Online Analytics · 5. How We Disclose Information · 6. Attorney-Client Confidentiality · 7. Text Messages · 8. Artificial Intelligence and Automated Processing · 9. Your Rights and Choices · 10. How We Secure Information · 11. Data Retention · 12. International Users and Where Information Is Hosted · 13. Children’s Privacy · 14. Tracking · 15. Third-Party Sites and Services · 16. Changes to This Policy · 17. Contact Us


1. Introduction, Scope, and Definitions

Akcok Law Office, A Professional Law Corporation (“the Firm,” “we,” “us,” or “our”) is a law firm with its principal office at 330 Primrose Rd., Ste. 510, Burlingame, CA 94010, United States. This Privacy Policy describes how we process information collected from and about users of our website at alo.callutku.com, the ALOra Immigration mobile application (the “App”), and our related services and communications (collectively, the “Platform”), and the choices available to you. It applies to anyone who interacts with the Platform, including clients, prospective clients, and website visitors.

The Firm is the publisher of the App and is responsible for the personal information processed through the Platform as described in this Policy.

Key definitions. For purposes of this Policy:

  • “Client” means a person (i) to whom the Firm has presented its services based on that person’s situation, (ii) who has chosen to purchase those services, (iii) who has signed the Firm’s attorney-client engagement agreement, (iv) who has paid the attorney’s fees associated with those services as specified in the engagement agreement, and (v) whom the Firm has agreed to accept as a client.
  • “Prospective client” means any person who is not (or not yet) a Client — for example, a person who creates an account, submits an inquiry or intake form, uploads documents, or consults with us about a potential matter before all of the conditions above have been met.

These definitions describe how information is handled under this Policy only. They do not determine whether an attorney-client relationship exists; that is governed by applicable law and any engagement agreement between you and the Firm.

Clients. If you are a Client of the Firm, our engagement agreement with you and the rules of professional conduct also govern how we handle information relating to your representation. To the extent of any conflict between this Policy and your engagement agreement, the engagement agreement controls.

Downloading or using the App does not, by itself, create an attorney-client relationship with the Firm. Any legal representation is governed by a separate engagement agreement.

2. Information We Collect

Information you provide to us. We collect information you provide directly — for example, when you create an account, submit an inquiry or intake form, communicate with us through the App, upload documents, participate in a consultation, or otherwise interact with the Platform. Depending on how you use the Platform, this may include:

  • Identifiers and contact details: full name, email address, telephone number, postal address, date of birth, client or matter ID, and similar identifiers.
  • Account credentials: your email address and a password.
  • Sensitive personal information, where relevant to your matter or your use of the Platform. We collect this information only to the extent necessary to provide our services — for example, to assess your situation and eligibility and to give you appropriate information about a potential matter. Depending on your matter, it may include: immigration and citizenship information (such as immigration status, history, and eligibility details); government identifiers (e.g., passport, driver’s license, alien registration number, social security number); financial information (such as income details, account details, invoices, and payment information); and health information (for example, where medical examinations or waivers are relevant to a matter).
  • Matter and commercial information: information about your cases, claims, and legal matters, including documents, messages, and materials you submit through the App, and your history of use of the Platform.
  • Sensory data: recordings of calls with us, and audio, photographs, or video you provide as part of a matter file. Files you upload may contain embedded metadata — for example, the time, device, and location where a photo or video was taken.
  • Professional information: job title, employer, and similar details where relevant to a matter.

Information about others. If you provide information about other individuals — for example, family members or other people involved in your matter, or the contact details of someone you refer to us — we collect the details you provide about them. Please only share another person’s information if you have their permission or another lawful basis to do so.

Information collected automatically. When you use the Platform, we and our service providers automatically collect: device and technical data (device model, operating system and version, app or browser version, language and region settings, IP address, and device or installation identifiers); general location derived from your IP address; usage data (features used, screens or pages viewed, session information); diagnostics (crash logs and performance data); and, if you enable notifications, a push notification token. We collect precise GPS location only with your permission and only to confirm your location and service area for eligibility and jurisdiction purposes.

Device permissions. The App requests access to the camera and photo library (to scan or upload documents), location (to confirm your service area), and notifications only with your permission, which you can withdraw at any time in your device settings.

Information from other sources. In the course of a legal matter or operating the Platform, we may receive information about you from courts, government agencies, and public records, other individuals involved in a matter, referral sources, co-counsel, and other third parties, and may combine it with information collected through the Platform. For example, where the Platform offers case-status tracking, we may retrieve from government sources (such as USCIS or the National Visa Center) status information associated with your application, using identifiers you provide such as a receipt or case number.

Required information. Some information is necessary to provide the Platform or our services. If you choose not to provide information we identify as required, we may be unable to provide some or all of the Platform or services to you.

De-identified information. We may de-identify information so that it can no longer reasonably identify you or your device. We may use and disclose de-identified information for any lawful purpose, we will maintain and use it only in de-identified form, and we do not attempt to re-identify it, except to test whether our de-identification processes comply with applicable law.

3. How We Use Information

We use the information described above to:

  • operate and provide the Platform and respond to your requests, including account setup and management, payment processing, intake and case evaluation, matter management, and delivery of legal services;
  • communicate with you about your matters, your account, and the Platform, including transactional messages such as security codes and case updates, and notifications you have enabled (which you can turn off at any time);
  • analyze, maintain, improve, debug, and secure the Platform;
  • record and review calls with us for quality, training, and matter-documentation purposes, with any notice required by law at the time of the call;
  • send Firm news, updates, or offers, which you may opt out of at any time;
  • protect the Platform and our operations, including fraud prevention, security-incident detection, and enforcement of our terms;
  • comply with the legal, regulatory, and professional obligations that apply to law firms, including record-keeping and conflict-checking requirements; and
  • fulfil any other purpose with your consent — where a new purpose is not compatible with the purpose for which information was originally collected, we will ask for your consent.

We do not sell personal information, and we do not use personal information collected through the App for third-party advertising or cross-app tracking.

Legal bases (EEA/UK). Where laws such as the EU/UK GDPR apply, we process your information: to perform a contract with you (providing the App and legal services); for our legitimate interests (operating, securing, and improving the Platform; establishing and defending legal claims); to comply with legal obligations; and with your consent, where sought. Where we process special-category data in connection with a legal matter, we rely on the establishment, exercise, or defence of legal claims.

4. Online Analytics

We use third-party analytics services on our website and in the App (such as Google Analytics and Firebase) to understand how the Platform is used. On the website, these services use cookies and similar technologies — small files or code that recognize your browser, remember your preferences and login status, and measure page visits, including pixels in our emails that tell us whether a message was opened. You can control cookies through your browser settings, and you can opt out of Google Analytics using Google’s browser add-on. Blocking cookies may affect some features of the website.

We do not currently respond to browser “Do Not Track” signals.

The App itself does not display third-party advertising and does not use advertising cookies or ad-tracking SDKs.

5. How We Disclose Information

We disclose personal information only as described below, and we require recipients acting on our behalf to protect it under contractual obligations consistent with this Policy.

  • Affiliated service provider. We use an affiliated technology and case-support services company that develops, hosts, and maintains the App and assists the Firm in the preparation of matters. It processes personal information solely on the Firm’s behalf and instructions, under confidentiality and data-protection obligations, and is not permitted to use it for its own purposes.
  • Other service providers. Vendors that provide services on our behalf, including but not limited to: cloud hosting and document storage (DigitalOcean; Google Cloud); email services (Google Workspace / Gmail); analytics, crash reporting, and push notifications (Google Firebase; Apple Push Notification service); mapping and geocoding (Google Maps); search and retrieval databases (Pinecone; Weaviate); payment processing (Stripe); communications and text messaging (Twilio); and the artificial-intelligence providers described in Section 8.
  • Other law firms and lawyers. At your direction or with your permission, we may share your information with co-counsel or with other lawyers or firms — for example, where we jointly handle a matter or refer a matter — with precautions to preserve confidentiality and any applicable privilege.
  • Professional advisors. Our own professional advisors — such as auditors, insurers (including our professional liability insurers), banks, and outside counsel — where necessary in the course of the services they provide to us, subject to confidentiality.
  • In connection with legal services and legal requirements. Information may be disclosed to courts, authorities, counterparties, experts, or others as necessary to represent you, on your instructions, or as required by law, regulation, or legal process — in each case consistent with our professional confidentiality obligations — and to protect the rights, safety, or property of the Firm, our clients, or others.
  • Business transfers. In the context of an actual or prospective corporate transaction — such as a financing, reorganization, merger, or sale or transfer of all or part of a practice or business — we may disclose information to prospective counterparties and their advisers for due diligence under confidentiality protections, and to a successor or assignee, in each case only as permitted by law and the rules of professional conduct.
  • With your consent, for any other purpose disclosed to you at the time.

Government and legal requests. We do not voluntarily provide personal information to government agencies. If we receive a subpoena, warrant, court order, or other legal demand for information about you, we will assert the protections available to you — including, where applicable, the attorney-client privilege and our professional duties of confidentiality — and will challenge demands that we reasonably believe are improper or overbroad. Unless we are prohibited by law or court order from doing so, we will make reasonable efforts to notify you of a legal demand for your information before disclosing it.

Mobile and text-message information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Sharing with subcontractors that support our services (such as customer service) is permitted. All other use and sharing categories described in this Policy exclude text-message originator opt-in data and consent, which will not be shared with any third party.

6. Attorney-Client Confidentiality

Information relating to a legal representation is protected by attorney-client confidentiality and professional secrecy obligations under applicable law and rules of professional conduct. Those obligations apply independently of, and in addition to, this Policy, and nothing in this Policy reduces them.

Prospective clients. These duties extend to prospective clients. Under rule 1.18 of the California Rules of Professional Conduct and California Business and Professions Code section 6068(e)(1), information you share with us when consulting about a potential matter is treated as confidential even if no attorney-client relationship results, and we do not use or disclose it without your informed written consent, except as permitted or required by law.

Where we process personal information about other individuals in the course of a representation — for example, counterparties, witnesses, or family members involved in a matter — we do so as part of providing legal services and in accordance with our professional obligations.

7. Text Messages

If you opt in, we or our service providers may send you SMS messages for account, case-related, or service purposes and, with your consent, marketing. Reply STOP at any time to stop receiving messages (we may send one message confirming your request). Message and data rates may apply. You can also opt out by contacting us at privacy@callutku.com.

8. Artificial Intelligence and Automated Processing

Certain Platform features are powered by artificial intelligence — for example, intake assistance, document summarization, and call transcription. We also use artificial-intelligence tools when reviewing and evaluating your inquiry — for example, to help our attorneys assess the information and documents you submit. When you use these features or we perform such review, your information may be processed by automated and manual methods, including by our affiliated service provider and AI model providers acting on our behalf (such as Google (Vertex AI), Anthropic, and OpenAI). This processing may include converting text from your matter into numerical representations (“embeddings”) stored in secure databases to enable search and retrieval on our behalf. AI outputs used in your matter are reviewed and approved by the Firm’s attorneys, who retain all professional judgment in your representation. The App’s AI features do not provide legal advice, and no determination about your matter or eligibility is made by AI alone. We do not permit our service providers to use your information to train their models for their own purposes, and, where the provider offers it, we use zero-data-retention or minimal-retention configurations so that your information is not stored by the AI provider after processing. Where required by law, we will tell you when automated processing produces legal or similarly significant effects about you and inform you of your right to object.

9. Your Rights and Choices

Depending on where you live, you may have the right to: request access to and a copy of your personal information; correct inaccurate information; delete certain information; restrict or object to certain processing; receive a copy in a portable format; opt out of processing for direct marketing; and withdraw consent where processing is based on consent.

How to exercise your rights. Contact us at privacy@callutku.com. We may need to verify your identity before responding, and we will respond within the time required by applicable law. An authorized agent may submit a request on your behalf with your written permission; we may still verify your identity directly. Some information is exempt from these rights — in particular, professional and legal record-keeping obligations may require us to retain consultation and matter-related information even after a deletion request (see the “Account deletion” heading below and Section 11); where that is the case, we will tell you. If we deny your request and your state’s law provides an appeal right, you may appeal by contacting us at the same address with a copy of our denial.

Account deletion. You can delete your account at any time directly in the App under Settings, or by contacting us at privacy@callutku.com. Deleting your account permanently removes your login credentials, email address, and telephone number. Once your account is deleted, we can no longer contact you through the App, including by push notification or invitation, and using the App again will require creating a new account. Please note that removing the App from your device does not delete your account or your information — to delete your account, use the in-App deletion option or contact us at privacy@callutku.com.

As a California law firm, when you delete your account we retain a limited record of your consultation and any matter — your name, the parties involved, a description of the matter, relevant dates, and related communications and documents you submitted — in order to comply with our professional responsibility obligations, including conflict-of-interest checking (California Rules of Professional Conduct, rules 1.7, 1.9, and 1.18) and our duties of confidentiality (rule 1.6; California Business and Professions Code section 6068(e)(1)), and, for Clients, the file-retention obligations described in Section 11. Retained information remains strictly confidential, is never used for marketing, and is not disclosed without your informed written consent, except as permitted or required by law.

Marketing choices. You can opt out of marketing emails using the unsubscribe link in any message, or by contacting us; processing an opt-out may take up to 10 days. Even after opting out, you will still receive transactional and legal-notice communications.

Notifications. You can disable push notifications at any time in your device settings.

European Economic Area / United Kingdom. You also have the right to lodge a complaint with your local supervisory authority.

California. If you are a California resident: the categories of personal information we collect, the purposes, and the categories of recipients are described in Sections 2, 3, and 5. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months, including information of consumers under 16. We use sensitive personal information only for purposes permitted without a right to limit under the CCPA (such as providing our services). We do not disclose personal information to third parties for their own direct marketing purposes. We will not discriminate against you for exercising your rights.

10. How We Secure Information

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, access controls limiting access to personnel who need it, and logging of access to matter-related information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, contact us immediately at privacy@callutku.com.

Use secure channels. Please submit sensitive documents and information through the Platform’s secure upload and messaging features — in the App or while signed in on our website — rather than by standard email or text message, which are less secure.

Breach notification. If a security incident affects your personal information, we will notify you and the relevant authorities as required by applicable law, and we will tell you what happened, what information was involved, and what steps you can take.

11. Data Retention

We keep personal information for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. In particular:

  • Conflict-checking records (all prospective clients and Clients). We retain a limited record of every consultation and matter — name and identifying details, the parties involved, a brief description of the matter, relevant dates, and the outcome — for as long as necessary to comply with our conflict-of-interest obligations under rules 1.7, 1.9, and 1.18 of the California Rules of Professional Conduct. This record survives account deletion.
  • Prospective clients. Other intake information, communications, and documents submitted before an engagement are retained for five years after our last interaction with you, and are then deleted or anonymized, except for the conflict-checking record described above.
  • Client files. Information forming part of a Client file — including documents, communications, and matter records — is retained for at least five years after a matter closes, and longer where required by law or by the Client’s interests (for example, matters involving minors or ongoing obligations). Files in criminal matters are retained consistent with State Bar guidance — generally for the life of the client absent written consent to earlier destruction — and, where applicable, California Penal Code section 1054.9. Original documents and property you provided are returned on request (rule 1.16(e)(1)).
  • Fee agreements and billing records. Signed engagement and fee agreements (California Business and Professions Code sections 6147–6148) and related billing records are retained with the Client file.
  • Client trust account records. Records of client funds are retained for at least five years after final disbursement, as required by rule 1.15(d) of the California Rules of Professional Conduct.
  • Consent and request records. Records of your acceptance of our terms, consents you provide, and privacy or deletion requests you submit (together with our responses) are retained as evidence of compliance, including after account deletion.
  • Account and technical data. Login credentials, email address, and telephone number are deleted when you delete your account (see Section 9). Technical data such as crash logs and analytics is retained for shorter periods.
  • Backups. Where information scheduled for deletion persists temporarily in backup archives, we isolate it from any further use and delete it as our backups are rotated.

12. International Users and Where Information Is Hosted

Information covered by this Policy is hosted and processed in the United States, where we, our affiliate, and our service providers operate, and where data protection laws may differ from those of your jurisdiction. By using the Platform from outside the United States, you understand that your information will be transferred to and processed in the United States. Where required, we use appropriate safeguards for cross-border transfers, such as approved contractual clauses.

13. Children’s Privacy

The Platform is not intended for use by anyone under 18, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected a child’s personal information in a manner prohibited by law — or if information was provided on your behalf when you were a minor — contact us at privacy@callutku.com and we will delete it as required by applicable law.

14. Tracking

We do not use information collected through the App to track you across apps or websites owned by other companies.

15. Third-Party Sites and Services

The Platform may link to websites, mobile applications, or online services operated by third parties (for example, government portals or payment pages). We do not control those services or their privacy practices, which are governed by their own policies; we encourage you to review them.

16. Changes to This Policy

The “Last updated” date above indicates when this Policy was last revised, and the most recent version is always posted on the Platform. We may update this Policy from time to time. Non-material changes (such as clarifications or corrections) take effect when posted. If we make a material change, we will provide prominent notice — for example, in the App, on our website, or by email — and the change will take effect no earlier than 30 days after we provide notice, so you have time to review it and, if you wish, stop using the Platform and delete your account before it applies. Where applicable law requires your consent to a change, we will obtain it before the change applies to you.

17. Contact Us

The Firm is the entity responsible for your information under this Policy.

Akcok Law Office, A Professional Law Corporation 330 Primrose Rd., Ste. 510, Burlingame, CA 94010, United States privacy@callutku.com