Privacy Policy

Introduction

At SmartLegal, we understand that privacy is paramount in the legal profession. This Privacy Policy explains how we collect, use, protect, and handle your information when you use our services.

We are committed to maintaining the confidentiality and security of your data. This policy applies to all users of SmartLegal's platform, including attorneys, law firms, and their clients.

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Law firm name and business information
• Billing and payment information (processed securely through third-party payment processors)
• Professional credentials and bar information (optional)

Document Data

When you use SmartLegal to draft, review, or store documents, we process:

• Document content and metadata
• Templates and customizations
• Electronic signatures and timestamps
• Version history and collaboration data

Usage Information

We automatically collect certain information about how you use our platform:

• Log data (IP address, browser type, pages visited)
• Device information
• Feature usage and interaction patterns
• Performance and error data

How We Use Your Information

We use the information we collect to:

• Provide our services: Process documents, enable collaboration, and deliver AI-powered features
• Improve our platform: Analyze usage patterns to enhance features and user experience
• Ensure security: Detect and prevent fraud, abuse, and security incidents
• Communicate with you: Send service updates, security alerts, and support messages
• Comply with legal obligations: Meet regulatory requirements and respond to legal requests

Data Privacy & Security

Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Documents stored using our Forever Storage feature are encrypted before being uploaded to decentralized networks.

Access Controls

We implement strict access controls to ensure that only authorized personnel can access your data, and only when necessary for service delivery or support. All access is logged and monitored.

Data Isolation

Your documents and client data are logically isolated from other users. We use industry-standard practices to prevent unauthorized access or data leakage between accounts.

AI Processing

Our AI features process your documents using privacy-preserving techniques. We use open-source models that can be run locally or in controlled environments. Your document content is never used to train third-party AI models without your explicit consent.

Blockchain & Forever Storage

When you use our Forever Storage feature:

• Documents are encrypted with your keys before being stored on decentralized networks (IPFS, Filecoin, Arweave)
• Only cryptographic hashes and timestamps are anchored on public blockchains — never document content
• You maintain complete control over encryption keys and can revoke access at any time
• Blockchain records are permanent and immutable by design, providing tamper-proof verification

We do not have access to your encrypted documents stored on decentralized networks. Only you hold the decryption keys.

Data Sharing & Disclosure

We do not sell your personal information or document data. We may share information only in the following circumstances:

• With your consent: When you explicitly authorize us to share information
• Service providers: Third-party vendors who help us operate our platform (e.g., cloud hosting, payment processing) under strict confidentiality agreements
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets (with notice to affected users)
• Protection of rights: To protect the rights, property, or safety of SmartLegal, our users, or the public

Your Rights & Choices

You have the following rights regarding your data:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
• Export: Download your documents and data in standard formats
• Opt-out: Unsubscribe from marketing communications (service-related messages may still be sent)

To exercise these rights, contact us at privacy@smartlegal.com. We will respond within 30 days.

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active accounts: Data is retained while your account is active
• Deleted accounts: Most data is deleted within 90 days of account closure
• Legal requirements: Some data may be retained longer to comply with legal, tax, or regulatory obligations
• Forever Storage: Documents stored on blockchain networks are permanent by design and cannot be deleted

Compliance

SmartLegal is committed to compliance with applicable privacy laws and regulations, including:

• GDPR: General Data Protection Regulation (EU)
• CCPA: California Consumer Privacy Act
• HIPAA: Health Insurance Portability and Accountability Act (for applicable use cases)
• SOC 2 Type II: Security and availability controls

International Data Transfers

SmartLegal is based in the United States. If you access our services from outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. We use appropriate safeguards to protect your data in accordance with this Privacy Policy.

Children's Privacy

SmartLegal is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through our platform. Your continued use of SmartLegal after such notice constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: