Privacy Policy

Last updated: October 23, 2026 (version 2026-10-23).

This policy explains what Legal Tech AI™ ("we", "us") collects, how we use it, and your choices. Operator: Olivia M. Villa, doing business as Legal Tech AI, California. Contact: legalai@legaltechinfo.org, phone (323) 505-2607.

What we collect

• Account data: email address, name (optional), a hashed password, account role and plan, sign-in times.
• Your content: prompts and messages to Mi AI™ and other tools, saved workspaces and notes, and documents you upload with the text we extract and the analysis we generate. Documents can contain sensitive personal information, and we handle them only to provide the tool you used.
• Billing data: handled by Stripe. We receive your plan, subscription status and a customer reference. We never see or store full card numbers.
• Consent records: the date, plan, version of our terms and technical details (such as IP address and browser) of your agreement to our Terms and subscription terms.
• Technical data: security and error logs, including IP address and browser type, and a session cookie that keeps you signed in.

We collect this information from you directly and from your use of the Service. We do not use advertising or third-party analytics trackers on the Service.

How we use it

To provide and secure the Service, process payments, answer support requests, enforce usage and cost limits, prevent abuse, improve reliability, and meet legal duties. We do not sell your personal information and we do not share it for cross-context behavioral advertising. We do not use your prompts or documents to train our own models.

Who receives it

• AI provider (Anthropic): your prompts and the text of documents you submit for analysis are sent to Anthropic's API to generate responses. Under Anthropic's Commercial Terms (section B), Anthropic may not train its models on this content. Anthropic's published practice is to delete API inputs and outputs within 30 days, except that content flagged for a usage-policy violation can be kept longer (up to 2 years) and anything the law requires can be kept longer. Anthropic's terms can change; see Anthropic's privacy center for the current version.
• Hosting and database (Render): our servers and database run on Render.
• Payment processor (Stripe): payment and subscription data.
• Email delivery (Postmark): your email address and the text of account emails, such as confirmation and reminder messages.
• Legal or safety reasons: where required by law or to protect rights and safety.

These providers process data for us under their own terms and only to provide their service.

Retention and deletion

Uploaded documents are deleted automatically after 30 days (60 days on the Pro plan) unless you delete them sooner. We email you a reminder about a week before deletion so you can download anything you want to keep; once deleted, a document cannot be recovered. You can delete saved work and your account from your account page. We keep records we must keep for legal, tax or security reasons. Our hosting provider may keep short-term backups that are overwritten on a rolling basis, so deleted data can remain in a backup until it is overwritten.

Your California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended (Civil Code section 1798.100 and following), gives you these rights:

• Know and access: to ask what personal information we collected about you, where it came from, why we use it, and who receives it, and to get a copy.
• Delete: to ask us to delete personal information we collected from you, subject to legal exceptions.
• Correct: to ask us to correct inaccurate personal information.
• Opt out of sale or sharing: we do not sell or share personal information, so there is nothing to opt out of.
• Limit use of sensitive information: we use sensitive personal information, such as what may appear in documents you upload, only to provide the service you asked for.
• No retaliation: we will not deny you service, charge you a different price or give you a lower quality of service for using these rights.

How to make a request. Email legalai@legaltechinfo.org, or use the delete options in your account. We will confirm your identity by matching the request to your account email. You may use an authorized agent; we may ask for proof of authority. We respond within 45 days and may extend once by another 45 days if we tell you why within the first 45 days. Our response covers the 12 months before your request. There is no charge. We update this policy at least once every 12 months.

Categories in the last 12 months. We collected identifiers (email, name, IP address), commercial information (plan and subscription status), internet activity (logs and sign-in times), and the content you gave us (prompts, notes and uploaded documents). We disclosed these categories for a business purpose only to the providers listed above. We sold or shared none.

Do Not Track. We do not track you across other websites, and the Service does not change in response to browser "Do Not Track" signals. No third parties collect information about your activity on other sites through our Service.

Security

We use encryption in transit, access controls, hashed passwords, malware scanning of uploads and monitoring. No system is perfectly secure.

Children

The Service is for people 18 and older. We do not knowingly collect information from anyone under 18.

Changes

We will post changes here and notify you of material ones.

Legal Tech AI is not a law firm and does not provide legal advice or representation. Use of this platform does not create an attorney-client relationship, and communications with it are not protected by attorney-client privilege.