Privacy Policy

1. Data Controller

LegalFront AI (“we”, “us”, “our”) is the data controller responsible for processing your personal data. If you have questions about this policy, contact us at privacy@legalfront.ai.

2. Data We Collect

• Account information — name, email address, hashed password
• Usage data — contracts analysed, research sessions, document AI sessions
• Client data — client records you create within the platform
• Technical data — IP address, browser type, cookie preferences
• Consent records — timestamped logs of your consent choices

3. Legal Basis for Processing

• Contract performance — to provide the services you signed up for
• Legitimate interest — security, fraud prevention, service improvement
• Consent — for analytics cookies, marketing cookies, and optional communications
• Legal obligation — retention of consent and audit records

4. Data Retention

We retain your personal data for as long as your account is active. After account deletion, all personal data is erased within 30 days, except for anonymised consent logs which are retained for up to 730 days to meet audit requirements. Technical logs are rotated every 90 days.

5. Your Rights

Under the GDPR, you have the right to:

• Access — request a copy of your personal data
• Portability — export all your data in a machine-readable format (available in Settings)
• Rectification — update inaccurate personal data via your profile
• Erasure — delete your account and all associated data (available in Settings)
• Restrict processing — request limitation of processing
• Object — object to processing based on legitimate interest
• Withdraw consent — revoke any previously given consent at any time (available in Settings)

6. Cookies

We use the following categories of cookies:

• Essential — authentication tokens, session management (always active)
• Analytics — usage statistics to improve the service (opt-in)
• Marketing — personalised advertising (opt-in)

You can manage your cookie preferences at any time using the cookie banner or from your account settings.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), and regular security audits. Access to personal data is restricted to authorised personnel only.

8. Contact & Complaints

For privacy-related enquiries, contact us at privacy@legalfront.ai. You also have the right to lodge a complaint with your local data protection authority.