Privacy Policy

1. Overview & Scope

LegalPal Inc. ("LegalPal", "we", "us", or "our") is dedicated to protecting your privacy. This Privacy Policy explains our practices regarding the collection, use, disclosure, and safeguarding of information obtained when you visit legalpal.app, use our mobile and web applications, interact with our AI Prompt Assistant, execute electronic signatures, or communicate with us through SMS, email, and live messaging (collectively, the "Services").

2. Information We Collect

We collect information in several ways depending on how you interact with our platform:

A. Information You Provide Directly

• Contact & Account Details: Name, law firm name, email address, phone number, physical mailing address, and login credentials.
• Client Intake & Case Data: Legal issue statements, incident dates, location/jurisdiction details, case categories, and uploaded legal documents provided during intake triage.
• Communications Data: Messages, chat history, audio notes, feedback, and customer support inquiries.
• Payment Information: Billing addresses, payment card details (processed securely via PCI-DSS compliant third-party payment gateways such as Stripe; LegalPal does not store full credit card numbers).

B. Information Collected Automatically

• Device & Usage Data: IP address, browser type, operating system version, referring URLs, access timestamps, and page interaction records.
• E-Signature Audit Metadata: Timestamps, cryptographic signature hashes, email verification records, and IP addresses generated during electronic document signing.

3. How We Use Your Information

LegalPal uses the information we collect solely for legitimate operational and legal software purposes:

• Providing, operating, maintaining, and enhancing our legal SaaS platform.
• Connecting prospective clients with licensed legal practitioners in their appropriate jurisdiction upon client request.
• Transmitting case updates, appointment reminders, and important platform notifications via SMS and email.
• Executing and verifying tamper-evident electronic signatures and contract audit trails.
• Protecting against fraud, unauthorized access, and violations of our Terms of Service.
• Complying with applicable legal, regulatory, and audit requirements.

4. SMS & Mobile Communications Privacy (10DLC & Carrier Compliance)

5. Data Security & Zero-Trust Encryption

We implement industry-leading technical, administrative, and physical security measures to protect confidential legal information:

• End-to-End Encryption (E2EE): Communications and uploaded case files are encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Zero-Trust Architecture: Micro-segmented database access, ephemeral access tokens, and continuous identity verification prevent unauthorized internal or external access.
• Regular Audits: Continuous vulnerability scanning, dependency audits, and penetration testing.

6. Information Sharing & Disclosure

We do not sell, rent, or monetize your personal information. We disclose information only under the following limited circumstances:

• Authorized Legal Counsel: With your explicit consent, intake information is transmitted to licensed attorneys or law practices for confidential case evaluation.
• Service Providers: Trusted cloud infrastructure and delivery partners (e.g., Cloudflare, Google Cloud) operating under strict data processing agreements and confidentiality obligations.
• Legal & Regulatory Compliance: When required by lawful subpoenas, court orders, or applicable statutory mandates.

7. Data Retention & Deletion

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, provide ongoing SaaS platform access, or comply with legal record-keeping requirements (such as retaining executed contract audit logs under the ESIGN Act).

You may request the deletion of your account and associated personal data at any time by emailing support@legalpal.app.

8. Your Privacy Rights (California CCPA/CPRA & GDPR)

Under California privacy laws (CCPA/CPRA) and international data protection frameworks (such as GDPR), you have specific statutory rights:

• Right to Know / Access: You can request a copy of the specific pieces of personal information we have collected about you.
• Right to Deletion: You can request that we delete your personal information, subject to statutory legal exceptions.
• Right to Correction: You can request that we correct inaccurate personal data.
• Right to Opt-Out of Sale/Sharing: LegalPal does not sell or share personal data for cross-context behavioral advertising.
• Non-Discrimination: We will never discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, submit a verifiable consumer request to support@legalpal.app with the subject line "Privacy Rights Request".

9. Cookies & Tracking Technologies

We use essential and functional cookies to authenticate users, prevent CSRF attacks, maintain session states, and evaluate aggregate website performance. We do not use intrusive third-party cross-site advertising cookies.

10. Contact Us

If you have questions, comments, or requests regarding this Privacy Policy or our security practices, please contact our Data Protection Office: