Last updated 13 October 2026

Privacy Policy

This policy explains how Legalens ("we") processes personal data. Contact for privacy matters: no-reply@localhost.

1. Data we collect

• Account data: email address, password (stored only as a salted hash), plan and optional profile details.
• Contracts you upload: files, their names and folders, and the text extracted from them, which may contain personal or sensitive data about you or others.
• Usage data: analyses requested, usage counters and reminders you create.
• Payment data: handled by Stripe; we store only a customer identifier and subscription status, never card numbers.
• Technical data: a session cookie required to keep you signed in, and server logs.

2. Why we use it (legal bases)

To provide the Service and perform our contract with you (account, analysis, reminders, billing); for our legitimate interests in security, abuse prevention and improving reliability; to meet legal obligations; and with your consent where required.

3. Who processes it

We share data only with service providers acting on our behalf: the hosting provider (Vercel), the database provider (Neon), Stripe (payments), an email delivery provider (for password resets and reminders), and the AI model provider (Ollama) which receives the contract text and your request in order to generate results. We do not sell your data and do not use your contracts to advertise to you. Providers may process data outside your country; where required we rely on appropriate safeguards such as standard contractual clauses.

4. Automated processing

Analysis results are produced by AI models. They are informational and do not produce legal or similarly significant decisions about you.

5. Cookies

We use only an essential session cookie for authentication and security (CSRF protection) and a cookie remembering your language choice. We do not use advertising or analytics cookies.

6. Retention

We keep account data and contracts until you delete them or your account. Deleting a contract or your account from the Service removes the associated data from our systems, subject to short-lived backups and records we must keep by law (such as invoices).

7. Security

We use encrypted connections, hashed passwords and access controls. No system is completely secure; please avoid uploading documents you are not comfortable storing online.

8. Your rights

Depending on where you live (for example under the GDPR) you may access, correct, delete, export or restrict processing of your data, object to processing, withdraw consent, and lodge a complaint with your data protection authority. You can edit your profile and delete contracts or your account yourself on the Account page, or contact us.

9. Children

The Service is not intended for anyone under 18.

10. Changes

We will update this page and notify you of material changes.