Privacy Policy Last updated: 15 September 2025 This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our websites, purchase subscriptions (including via Stripe), or use our AI-powered legal advertising placements and related tools, dashboards, and analytics (the “Service”).
Last updated: 15 September 2025
This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our websites, purchase subscriptions (including via Stripe), or use our AI-powered legal advertising placements and related tools, dashboards, and analytics (the “Service”).
“Company” means the operator of this website and the Service, as identified in the website footer/legal imprint. “Advertiser” means a business purchasing or using the Service. “User” means an individual who interacts with our conversational experiences (for example, asking legal questions) or visits our sites.
If you do not agree with this Policy, please do not access the Service.
Company acts as an independent controller for personal data it collects through the Service, websites, analytics, payments, security, and support.
Company does not contact leads on Advertisers’ behalf. If a User chooses to contact a law firm, any information the User provides to that firm is controlled by the firm’s own privacy terms.
Account & subscription data (for Advertisers): business name, contact details, billing details, plan selections, communications.
Content & support: messages you send to us (including via forms or email), support tickets, survey responses.
Conversational inputs (for Users): questions, prompts, and other content submitted to our conversational experiences.
Usage & event data: interactions with our sites and Service, timestamps, referral/UTM data, feature use, approximate geolocation (derived from IP), language, device/OS/browser info.
Log data: IP address, user-agent, identifiers (e.g., cookie IDs), diagnostic and security logs.
Cookies and similar tech: pixels, SDKs, local storage used for essential functionality, analytics, fraud prevention, and (where applicable) remembering preferences.
Payments are processed by Stripe or another payment provider. We do not store full card numbers. Stripe independently processes certain data as its own controller to complete transactions and comply with law.
Identity/firmographic data from public sources or vendors (e.g., business registries, data enrichment) to verify Advertisers and reduce fraud.
We process personal data for these purposes and legal bases:
Provide the Service (create/manage subscriptions, allocate inventory/keywords, deliver placements, troubleshoot) — performance of a contract.
Payments & billing (fraud prevention, chargebacks, accounting) — performance of a contract and legal obligation.
Analytics & service improvement (measure usage, quality, safety; enhance features; train heuristics and delivery logic) — legitimate interests.
Security & abuse prevention (detect, prevent, and respond to spam, fraud, or misuse) — legitimate interests and legal obligation.
Communications (service notices, administrative messages, responding to inquiries) — performance of a contract and legitimate interests.
Marketing to Advertisers (product updates, offers to business contacts) — legitimate interests; where required, consent.
Compliance (tax, accounting, regulatory requests, enforcement of our Terms) — legal obligation and legitimate interests.
Where we rely on consent, you may withdraw it at any time (this will not affect prior processing).
We use:
Essential cookies — required for core functionality (cannot be disabled).
Analytics/performance cookies — to understand usage and improve the Service.
Preference cookies — to remember settings.
Where required, we obtain consent for non-essential cookies. You can adjust browser settings to block or delete cookies; doing so may impact functionality.
We share personal data only as described below:
Service providers/processors: hosting, AI model infrastructure, content delivery, customer support, analytics, email, security, and payment processing (e.g., Stripe). They act under contract and only process data on our instructions.
Change of control: if we undergo a merger, acquisition, or asset sale, data may transfer to the buyer subject to this Policy.
Legal & safety: to comply with law, enforce our Terms, protect the rights, safety, or security of Company, Users, or the public.
With Advertisers: we do not share Users’ personal data with Advertisers unless a User explicitly chooses to contact a firm or otherwise consents.
We do not sell personal data.
Your data may be processed outside your country, including outside the EEA/UK. Where required, we use adequacy decisions (e.g., EU/UK-US frameworks) or Standard Contractual Clauses and implement appropriate safeguards. You can contact us for a copy of the relevant transfer mechanism (with redactions where necessary).
We retain data for the minimum period necessary to fulfil the purposes in this Policy, then delete or anonymize it:
Account, subscription & billing records: for the life of the account plus the period required by tax/accounting law (up to 10 years).
Usage & logs: typically up to 12 months for security/diagnostics.
Conversational inputs: typically up to 18 months to operate, secure, and improve delivery and measurement.
Support communications: typically up to 24 months for reference and training.
We may retain data longer if required by law, to resolve disputes, or enforce our agreements.
We use administrative, technical, and physical safeguards designed to protect personal data (access controls, encryption in transit, network safeguards, and vendor due diligence). No system can be guaranteed 100% secure.
You have the right to access, rectify, erase, restrict, object (including to processing based on legitimate interests), and data portability. You also have the right to withdraw consent where processing is based on consent, and to lodge a complaint with a supervisory authority (in Spain: the Agencia Española de Protección de Datos).
Depending on your state, you may have rights to access, delete, correct, opt-out of certain targeted advertising or profiling, and to appeal a decision. We do not “sell” personal information. We honor applicable opt-out rights where required by law.
To exercise rights, see Contact Us below. We may verify your request.
We use automated systems to match conversation context to relevant legal categories/keywords and to determine when and how placements appear. These systems do not produce legal or similarly significant effects about a person. You may object to processing based on legitimate interests (see Your Rights).
The Service is intended for business and adult users and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us to request deletion.
Our websites and conversational experiences may link to third-party sites or services. Their privacy practices are governed by their own policies.
We may update this Policy from time to time. Material changes will be highlighted on this page or via in-product notice. Your continued use of the Service after an update means you accept the revised Policy.
For privacy questions or requests, contact us using the email address published in the website footer/legal imprint or via the site’s contact channel.
Please describe the nature of your request and the country you are located in.
If we cannot resolve your concern, you may lodge a complaint with your local authority (EEA example: Agencia Española de Protección de Datos).