Privacy Policy
Zachary Gold DBA Cruz Gold and Associates
Effective Date: February 24, 2026
Last Updated: February 24, 2026
Cruz Gold and Associates (“we,” “us,” or “our”) operates the CG Law Clients mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the App.
1. Information We Collect
Information You Provide
- Contact Information: Name, phone number, and email address
- Personal Details: Date of birth, mailing address, and USCIS A-number (if applicable)
- Payment Information: Payment method selection (credit/debit card or eCheck). Full card numbers and bank account details are collected and processed directly by our payment processor, LawPay — we never see or store them.
- Documents: Files you upload related to your immigration case (identification, supporting evidence, forms)
- Electronic Signatures: When you sign retainer agreements through the App
Information Collected Automatically
- Device Token: A push notification token so we can send you case updates
- Language Preference: Your selected language (English or Spanish)
- Authentication Data: Login sessions and biometric enrollment status (Face ID or fingerprint)
Information We Do NOT Collect
- We do not collect location data, browsing history, contacts, or advertising identifiers
- We do not store biometric data (fingerprints or facial scans) — your device’s operating system handles all biometric authentication locally
2. How We Use Your Information
We use your personal information to:
- Manage your immigration case and track its progress
- Send you notifications about case updates, USCIS status changes, document requests, payment confirmations, and milestone completions
- Process payments for legal services
- Store and organize case documents securely
- Generate invoices and payment receipts
- Facilitate electronic signing of retainer agreements
- Communicate with you about your case in your preferred language
3. How We Share Your Information
We share your information only with the following service providers, strictly for the purposes described:
| Service Provider | Information Shared | Purpose |
|---|---|---|
| LawPay (AffiniPay) | Payment amount, invoice reference, name, email | Processing credit/debit card and eCheck payments |
| Microsoft SharePoint | Case documents, file names | Secure cloud storage of your case documents |
| Docketwise | Name, phone, email, case details | Immigration case management and questionnaire completion |
| BoldSign | Name, email, retainer agreement PDF | Electronic signature collection |
| Expo (Push Notifications) | Device token, notification content | Delivering push notifications to your device |
| USCIS | Receipt numbers | Checking the status of filed applications |
We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.
4. Data Security
We protect your information through the following measures:
- All data transmitted between the App and our servers is encrypted using HTTPS/TLS
- Authentication tokens are stored in your device’s secure keychain (iOS Keychain / Android Keystore)
- Payment processing is handled entirely by LawPay’s PCI-compliant infrastructure
- Document access links are temporary and expire after 15 minutes
- Server-side encryption for sensitive credentials and tokens
5. Data Retention
- Case records and documents: Retained for the duration of your attorney-client relationship and for a minimum of 5 years after case closure, as required by professional responsibility rules
- Payment records: Retained indefinitely for accounting and legal compliance
- Push notification tokens: Retained while your account is active
- Authentication codes (OTP): Expire and are deleted within 5 minutes of issuance
6. Your Rights and Choices
Notification Preferences
You can opt in or out of specific notification categories (USCIS updates, document requests, payment reminders, case milestones, and questionnaires) at any time through the App’s profile settings.
Biometric Authentication
Biometric login (Face ID / fingerprint) is entirely optional. You can enable or disable it at any time in the App. No biometric data leaves your device.
Data Access and Deletion
You may request access to, correction of, or deletion of your personal information by contacting us at:
Cruz Gold and Associates
Email: info@cruzgoldlaw.com
Website: https://cruzgoldlaw.com
Please note that we may be required to retain certain records under applicable legal and professional obligations, even after an account deletion request.
7. Children’s Privacy
The App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other means. The “Last Updated” date at the top of this policy indicates when the most recent changes were made.
9. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Cruz Gold and Associates
Website: https://cruzgoldlaw.com
Email: info@cruzgoldlaw.com