Privacy Policy

This Privacy Policy explains how Lenore, Inc. (“280EA,” “we,” “us”) collects, uses, and protects information in connection with the 280EA website and our §280E/§471(c) representation services. For any privacy request, use the contact page.

• Information you provide: your name, email address, and any details you submit through the resources request form or the contact page.
• Information collected automatically: basic usage and device analytics, and cookie data, gathered to operate and improve the site.

• To deliver the sample resources you request and respond to your inquiries.
• To schedule and conduct consultations you book with us.
• To send related communications through our email provider; you may opt out at any time.
• To operate, secure, and improve the website.

• We do not sell, rent, lease, or trade your personal information to anyone.
• We do not use the information you submit through this site to build marketing, prospecting, outreach, or public-records (FOIA) request lists.

Any outreach or public-records lists we compile are derived exclusively from publicly available information and government records — never from the details you provide to us through this site. Information you submit here is kept separate from, and is not used to build, any such list.

• When you engage us for representation, we receive information necessary to perform that work (for example, notices, financial records, and authorizations). We access and use it only as reasonably necessary to provide the representation, and we apply commercially reasonable safeguards.
• To the extent we receive or handle tax return information, we treat it consistent with applicable professional-confidentiality obligations, including U.S. Treasury Circular 230 and, where applicable, IRC §7216.

We rely on the following processors to operate the site and services: Cloudflare (hosting, DNS, storage), Resend (transactional and outreach email), PostHog (privacy-conscious product analytics), and Cal.com (consultation scheduling). Each maintains its own privacy policy. We do not control their practices but select them based on their published security commitments.

Information is stored securely on our infrastructure and retained only as long as needed for the purposes described here or as required by law, after which it is deleted or anonymized.

We use cookies and privacy-conscious analytics to understand site usage. You can manage your preferences through the cookie settings available on the site.

California residents have the right to know what personal information is collected, to delete it, to correct inaccuracies, to opt out of the sale or sharing of personal information, and to non-discrimination for exercising these rights. 280EA does not sell personal information. To exercise any of these rights, use the contact page; we will respond to verified requests within 45 days.

The site is intended for business and professional use and is not directed to children under 13; we do not knowingly collect their information.

We may update this policy from time to time. The last-updated date reflects the most recent revision.