Summary
We collect only what we need to run your cases. We do not sell your personal information. We do not use your case content to train third-party AI models. You can export or delete your data at any time.
What we collect
- Account data: email, password hash (managed by our auth provider), sign-in timestamps.
- Profile data: name, phone, mailing address, state, preferred contact method.
- Case data: case type, jurisdiction, parties, narratives, timelines, documents, deadlines, notes.
- Evidence: files you upload (photos, video, audio, PDFs, Word documents) and AI-generated analysis of them.
- Chat data: your messages and assistant responses, stored so conversations persist.
- Search data: defendant search queries and returned results.
- Usage data: feature events used to enforce plan limits and improve the product.
- Billing data: handled by our payment processor; we never store full card numbers.
How we use it
To provide the service (drafting, deadlines, search, analysis), to enforce plan limits, to send transactional email you asked for (deadline reminders, document-ready notices, account notices), to secure the platform against abuse, and to comply with law.
AI processing
Your prompts, case context, and uploaded files may be sent to our AI processing provider to generate responses, drafts, and evidence analysis. Content is transmitted encrypted and is processed to return your result — not to train third-party foundation models.
Third parties we use
Cloud hosting and database/storage infrastructure, an AI model gateway, an email delivery service, a payment processor, and a web-search/data-enrichment provider for defendant searches. Each receives only the data needed for its function.
Legal bases (GDPR)
Contract performance (running your account and cases), legitimate interests (security, abuse prevention, product improvement), consent (optional product emails, non-essential cookies), and legal obligation (records we must keep).
Your rights
- Access and export your data (Settings → Privacy → Export my data).
- Correct inaccurate data (Settings → Profile).
- Delete your account and data (Settings → Privacy → Delete account).
- Object to or restrict certain processing, and withdraw consent for optional email.
- California residents: request disclosure of categories collected and opt out of sale — we do not sell personal information.
- Complain to your supervisory authority if you are in the EU/UK.
Requests can also be emailed to privacy@legalspeak.us; we respond within 30 days.Retention
Active account data is kept while your account is open. After deletion, case content and evidence files are removed from live systems within 30 days and from backups within 90 days. Minimal billing and legal records are kept as long as required by law.
Security
Encryption in transit, encrypted storage, row-level access controls scoped to your user account, private evidence storage with signed time-limited download links, and restricted internal access. No system is perfectly secure — please use a strong, unique password.
Cookies
We use essential cookies for authentication and preferences (including your light/dark theme choice). Optional analytics cookies are only set after you accept them in the consent banner, and you can change your choice at any time.
Children
The service is not intended for anyone under 18 and we do not knowingly collect their data.
Changes and contact
We will announce material changes in-product. Questions: privacy@legalspeak.us.
This policy is a good-faith draft. Have it reviewed by privacy counsel before publication.