Scope
This policy applies to visitors, registered users, advocates, firm staff, and administrators who interact with the Services. If you integrate third-party tools, their privacy practices may also apply.
Information we collect
We collect information that you provide directly, that is generated through your use of the Services, and, in limited cases, from public sources or service providers assisting with verification.
- Account and profile data — name, email, phone, professional credentials, firm details, practice areas, office location, and content you add to your profile.
- Client and matter context you choose to store in product features, including documents metadata where applicable.
- Public inquiries and messages submitted through contact or query flows.
- Technical data — IP address, device identifiers, browser type, approximate location derived from IP, log events, and cookies or similar technologies.
- Support communications — messages you send to our team and feedback you provide.
How we use information
- Create and secure accounts; authenticate users and enforce role-based access.
- Operate multi-tenant workspaces and display public profiles according to your settings.
- Deliver notifications, product updates, and essential service messages.
- Improve reliability, develop features, train models only as permitted by law and contract, and perform analytics in aggregated or de-identified form where possible.
- Detect abuse, fraud, and security incidents; comply with legal obligations; and enforce our terms.
Legal bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we rely on appropriate legal bases such as performance of a contract, legitimate interests (e.g., securing the Services and improving functionality, balanced against your rights), consent where required, and legal obligations.
Retention
We retain information for as long as your account is active or as needed to provide the Services. Backup copies may persist for a limited period. When retention is no longer necessary, we delete or de-identify data subject to legal holds and audit requirements.
Security
We implement administrative, technical, and organizational measures designed to protect information—including encryption in transit, access controls, tenant isolation for professional data, and monitoring. No method of transmission over the Internet is completely secure; we encourage strong passwords and device security.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data; object to or restrict certain processing; withdraw consent where consent is the basis; and lodge a complaint with a supervisory authority.
To exercise rights, contact us through the relevant in-product settings or the Contact page. We may verify your request and respond within the timeframe required by law.
Children
The Services are not directed to children under the age where parental consent is required for data collection in their jurisdiction. If you believe we have collected data from a child inappropriately, contact us and we will take appropriate steps.
International transfers
We may process data in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
Changes to this policy
We will post updates on this page and revise the "Last updated" date. Material changes may be communicated by email or in-product notice when appropriate.
Contact
Questions about privacy or data protection requests can be directed through our Contact page or the privacy contact details published there.
Questions? Contact us.