Privacy Policy

• Account information: your name, email address, and password (stored only as a salted hash).
• Content you submit: the documents, text, and questions you upload or enter, and the summaries, analyses, and drafts generated for you.
• Usage information: if you opt in to analytics, anonymous product events about which features are used (never your document content or the text you submit).
• Device and session information: a session identifier, app version, coarse device or browser type, and a truncated/hashed IP address used for security and abuse prevention.
• Communications: messages you send us, feedback, and support or error reports.

To protect your privacy, before content is sent for AI processing the Service automatically redacts common personal identifiers (such as government ID numbers, payment card numbers, phone numbers, and email addresses) and replaces detected names, organizations, and places with neutral placeholders. The mapping needed to restore names in your results is kept on our server and is not sent to the AI provider. This reduces exposure but is not perfect; you remain responsible for the content you choose to submit.

We use information to provide, operate, secure, and improve the Service; process your documents and generate the outputs you request; authenticate you and manage your account and any subscription; send transactional messages; detect and investigate fraud, abuse, and security incidents; understand product usage (only if you opt in to analytics); and comply with law and enforce our Terms.

We do not sell your personal information, and we do not use your content to train foundational AI models.

When you use AI features, the (minimized) text of your content is sent to an AI processing provider to generate summaries, explanations, translations, and answers. We engage such providers under terms that restrict use of the data to providing the service to us and prohibit using it to train their models. AI features can be turned off per document, in which case that document is not sent for AI processing.

We share personal information only with service providers acting on our behalf (for example, AI processing, email delivery, and hosting) under confidentiality and data-protection obligations; with authorities or others when required by law or to protect rights, safety, and the integrity of the Service; and with a successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy. We do not sell your personal information and do not share it for cross-context behavioral advertising.

The Service runs on secure, access-controlled infrastructure with encryption of data in transit. Information may be processed in the United States and other countries whose laws may differ from yours. Where we transfer personal information out of the EEA, UK, or Switzerland, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep personal information for as long as your account is active or as needed to provide the Service, then delete or anonymize it unless a longer period is required for legal, security, or accounting purposes. When you delete a document or your account, we remove the associated data from active systems promptly and from routine backups within a limited period (typically within 30 days).

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption of data in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and any authorities as and when the law requires.

Subject to your local law, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can access and update much of your information, manage analytics consent, and delete your account directly in the app. To make a request, email privacy@legalscribeai.com. We will not discriminate against you for exercising your rights.

If you are in the EEA, UK, or Switzerland, you have the rights described above under the GDPR and may lodge a complaint with your local supervisory authority. California residents (CCPA/CPRA) and residents of other U.S. states with comprehensive privacy laws have rights to know, access, correct, and delete personal information; we do not sell personal information or use it for targeted advertising.

We do not use advertising or third-party tracking cookies. The Service stores a small amount of essential data (such as your session token, language, appearance, and analytics choice) and, only if you opt in, records anonymous analytics.

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact privacy@legalscribeai.com and we will delete it.

We may update this Policy from time to time. For material changes we will provide reasonable notice before they take effect and update the date above.

For privacy questions or to exercise your rights: privacy@legalscribeai.com. General support: support@legalscribeai.com. SovrinTech LLC, Texas, United States.