Privacy Notice

Last updated: 6/13/2026

1. Who we are

This Privacy Notice describes how leagal Draft pro pI ("we", "us", "our") collects and processes personal data in connection with our software-as-a-service product (the "Service"). leagal Draft pro pI acts as the data controller for personal data described below.

2. Categories of personal data we collect

• Account data: name, email address, login credentials.
• Customer support data: messages and attachments you send us.
• Usage and telemetry: pages visited, features used, error logs, device and browser information.
• Network identifiers: IP address, approximate location derived from IP.
• Content you upload: case files, drafts, and documents you process through the Service.

3. Purposes and legal basis

• Creating and maintaining your account — performance of contract.
• Providing, securing, and improving the Service — legitimate interests.
• Customer support — performance of contract.
• Fraud prevention and security monitoring — legitimate interests and legal obligation.
• Marketing communications (where applicable) — consent, which you may withdraw at any time.

4. Data sharing

We share personal data with the following categories of recipients:

• Service providers / subprocessors — cloud hosting, database, analytics, error monitoring, and customer support tooling.
• Merchant of Record: our payments and subscription billing are handled by Paddle.com Market Limited, who acts as the Merchant of Record and processes payments, subscription management, tax compliance, invoicing, and refunds.
• Professional advisers — legal, accounting, and auditors where necessary.
• Authorities — where required by law or to protect rights.

5. International transfers

Where personal data is transferred outside your jurisdiction (e.g., outside the UK/EEA), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep personal data only for as long as needed for the purposes set out above, to comply with legal obligations, resolve disputes, and enforce our agreements. After that, data is deleted or anonymised.

7. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent. UK/EEA users may lodge a complaint with their local supervisory authority. We respond to verified requests within one month.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and least-privilege practices, to protect personal data.

9. Cookies

We use essential cookies to operate the Service and may use analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

10. Contact

For privacy questions or to exercise your rights, contact us through the support channel inside the Service.