Privacy Policy

This Privacy Policy explains how LawDep collects, uses, and protects personal information when you use the Service. We process personal data as a processor on behalf of our customers (the organizations that subscribe to the Service) and as a controller for our own account and marketing information.

Account information: name, work email address, and role when an account is provisioned for you.

Workspace data: documents, contracts, entity records, litigation matters, and other legal data your organization stores in the Service.

Usage data: login timestamps, IP address, browser type, and feature usage, used to secure the Service and improve reliability.

Account and usage information is used to operate, secure, and improve the Service. Workspace data is used solely to provide the Service to your organization and is never used to train our own models. AI-generated content is produced by third-party LLM providers under your organization’s configuration.

Workspace data is hosted in single-region US infrastructure (AWS us-east-1) by default. EU or India residency can be configured during onboarding. Data is encrypted in transit (TLS) and at rest.

We use hosting and infrastructure providers (AWS, Railway), a database provider, a message queue (Redis), and LLM providers (OpenRouter, MiniMax) that process prompts and documents to generate AI output. Each processor has a data-processing agreement and processes data only under our instructions.

Workspace data is retained for the term of your subscription plus a 90-day export period after termination, after which it is deleted from primary storage. Backups are retained for up to 30 days.

Depending on your jurisdiction (including GDPR and India’s DPDP Act), you may have rights to access, correct, export, or delete your personal data. Contact us at the address below to exercise these rights.

The Service uses essential cookies for authentication and security (such as your login session). We do not use advertising cookies. A cookie banner is displayed on first visit.

We implement industry-standard safeguards including encryption at rest and in transit, JWT-based authentication with login lockout, and organization-level data isolation enforced at the database layer.

Privacy questions: privacy@lawdep.com