Privacy Policy
Last updated: September 21, 2026
1. Data Controller
The data controller for this service is:
- Company: Legis AI
- Registered Address: [Company Registration Address]
- Privacy Contact: privacy@legis.ai
- Data Protection Officer: Currently not applicable
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password (encrypted), company name
- Payment Information: Transaction amount, payment status. We do not store full card numbers — card data is processed by our payment processor (see Section 5).
- Case Information: Legal documents, contracts, descriptions of legal needs, and related materials you upload
- Communication Records: Emails, support tickets, feedback you send to us
2.2 Information We Automatically Collect
- Device & Network: IP address, device model, operating system, browser type, timezone
- Usage Behavior: Page visits, feature usage, operation logs, session duration
- Log Data: Request timestamps, error logs, performance data
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide and maintain service | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Product optimization and analytics | Legitimate interest |
| Legal compliance | Legal obligation |
We may aggregate or anonymize data for statistical analysis. Such data cannot identify specific individuals.
4. Cookies and Tracking Technologies
| Type | Purpose | Can Be Disabled |
|---|---|---|
| Strictly Necessary | Maintain login, core functionality | No |
| Functional | Language preferences, personalized settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing | Targeted advertising (if applicable) | Yes |
You can adjust cookie preferences through your browser settings or our cookie management center.
5. Sharing and Disclosure of Personal Information
We do not sell your personal information, including as defined under applicable laws such as CCPA. We only share information in the following circumstances:
- Service Providers: Cloud computing, payment processing, customer support, analytics providers, bound by confidentiality agreements. Payment card data is exclusively processed by our PCI-DSS compliant payment processor, Waffo Pancake, and is NOT stored on our servers.
- Licensed Attorneys: Your legal documents are shared for attorney review as part of our service
- AI Service Providers: DeepSeek API processes your legal queries for AI analysis
- Legal Requirements: As required by law, court order, or competent authority
- Business Transactions: In case of merger, acquisition, etc., with advance notice and continued protection obligations
- With Your Consent: For other purposes with your explicit prior consent
6. Data Security Measures
- Transmission Encryption: TLS/HTTPS
- Storage Security: Sensitive data such as passwords is encrypted or hashed
- Access Control: Principle of least privilege; employees sign confidentiality agreements
- Regular Security Audits: Periodic security audits and vulnerability scanning
In case of a security incident affecting your rights, we will notify you within 72 hours of discovery in accordance with legal requirements. Please keep your account credentials secure and do not share them with others.
7. Data Retention Periods
| Data Type | Retention Period | Disposal |
|---|---|---|
| Account information | During active period; 1 year after account deletion | Delete or anonymize |
| Transaction records | 7 years (tax/accounting requirement) | Archive or delete |
| Customer support records | 2 years | Secure deletion |
| Security audit logs | 12 months | Secure deletion |
| Legal case documents | Permanently retained due to legal and compliance requirements | Retained per legal obligations |
8. Your Data Rights
To exercise the following rights, please contact us at privacy@legis.ai. We will process your request within 30 calendar days.
| Right | Description |
|---|---|
| Right to be informed | Understand what data we collect and how we use it |
| Right of access | Obtain a copy of your personal data |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request deletion of data under specific conditions |
| Right to restrict processing | Pause data processing under specific circumstances |
| Data portability | Obtain data in machine-readable format |
| Right to object | Object to processing based on legitimate interests or marketing |
| Right to withdraw consent | Withdraw consent for consent-based processing |
If you believe we have not properly handled your data, you have the right to file a complaint with your local data protection authority.
9. Marketing Communications and Opt-Out
With your consent, we may send you marketing information related to our services via email or in-app notifications. You can unsubscribe at any time: click the "unsubscribe" link in emails, disable marketing notifications in account settings, or contact us. Opting out does not affect service-related notifications (billing, security reminders).
10. International Data Transfers
Our servers and partners may be located in [main regions such as Singapore, US]. For cross-border transfers, we protect data through:
- Data processing agreements incorporating Standard Contractual Clauses (SCC)
- Transfers only to recipients with equivalent protection levels
- Other safeguards such as adequacy decisions or BCR
11. Children's Privacy
This service is for users who are 18 years of age or older. We do not knowingly collect information from minors under this age. If you believe your child has provided us with information, please contact us immediately at support@legis.ai and we will delete it as soon as possible.
12. Third-Party Links and Services
This service may contain links to third-party websites or integrate with third-party services. This Policy only applies to information we directly collect. We are not responsible for third parties' data practices and recommend you review their policies before using them.
13. Policy Changes
If we make significant changes to this policy, we will notify you at least 15 days in advance via platform announcement or your registered email, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the updated policy.
14. Contact Us
- Privacy Contact: privacy@legis.ai
- Customer Support: support@legis.ai
- Company: Legis AI
- Mailing Address: [Company Address]
- Service Hours: Monday to Friday, 09:00–18:00 UTC+8
This Privacy Policy is for reference only and does not constitute legal advice. We recommend consulting a qualified legal professional familiar with your target market before official publication.