Privacy Policy

Last updated: April 2, 2026

Summary: We collect only what we need to provide our service. We never sell your data. Your documents are encrypted and processed securely. You can delete your data at any time.

1. Introduction

LegalOS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered legal platform.

This policy applies to all users of LegalOS services, including our web application, API, and related services. By using LegalOS, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, company name, and billing information when you create an account.
  • Documents: Contracts, agreements, meeting transcripts, and other documents you upload for analysis.
  • Company Playbook: Business rules and preferences you configure for contract review.
  • Communications: Messages you send to our support team or through our platform.

2.2 Information Collected Automatically

  • Usage Data: Information about how you interact with our service, including features used, documents analyzed, and time spent.
  • Device Information: Browser type, operating system, IP address, and device identifiers.
  • Log Data: Server logs that record requests made to our service.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our AI legal analysis services
  • Process and analyze your documents according to your instructions
  • Apply your Company Playbook rules to contract reviews
  • Send you service-related communications and updates
  • Respond to your inquiries and provide customer support
  • Ensure the security and integrity of our platform
  • Comply with legal obligations

4. Document Processing and AI

Important: Your documents are processed by our AI systems solely to provide you with analysis and recommendations. We do not use your documents to train our AI models without your explicit consent.

When you upload a document:

  • It is encrypted in transit and at rest using AES-256 encryption
  • It is processed by our AI system to generate risk analysis and recommendations
  • The original document and analysis results are stored in your secure account
  • You can delete documents and associated data at any time

5. Data Sharing and Disclosure

We do not sell your personal information or documents. We may share information only in the following circumstances:

  • Service Providers: With trusted third-party vendors who help us operate our service (cloud hosting, payment processing), bound by confidentiality agreements.
  • Legal Requirements: When required by law, court order, or governmental authority.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
  • With Your Consent: When you explicitly authorize us to share information.

6. Data Security

We implement industry-standard security measures to protect your information:

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for data at rest
  • Regular security audits and penetration testing
  • Access controls and authentication requirements
  • Employee training on data protection

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time by contacting us at privacy@legalos.ai.

After account deletion:

  • Your documents and analysis results are permanently deleted within 30 days
  • Backup copies are purged within 90 days
  • We may retain anonymized, aggregated data for analytics

8. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Request your data in a machine-readable format
  • Objection: Object to certain processing of your information

To exercise these rights, contact us at privacy@legalos.ai.

9. International Data Transfers

LegalOS is headquartered in Qatar. If you are accessing our services from outside the GCC region, your information may be transferred to and processed in countries with different data protection laws. We implement appropriate safeguards, including standard contractual clauses, to protect your information during such transfers.

10. Children's Privacy

LegalOS is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: privacy@legalos.ai
  • Address: LegalOS, Doha, Qatar