Privacy Policy

Legal Kairos ("we", "us", "our") is committed to protecting the privacy of every user, lawyer and client on our platform. This policy explains what information we collect, how we use it, and the rights you have over it.

1. Information we collect

• Account data: name, email, phone (optional), role in firm.
• Matter data: cases, clients, contacts, notes, hearings, invoices and time entries you create.
• Documents: files you upload for OCR, review, drafting or research.
• Usage data: pages visited, features used, AI prompts, error logs (for reliability).
• Device data: IP address, browser type, timestamps of sign-in attempts (for security).

2. How we use your information

• To provide the platform features you request (AI drafting, review, research, CRM, billing).
• To secure your account (lockout, 2FA, session management, audit logs).
• To improve reliability and detect abuse.
• To send transactional emails (invitations, receipts, security alerts). We do not send marketing emails without consent.

3. Data isolation

Each user's data is strictly isolated. Row-Level Security enforces that documents, cases, clients, invoices and notes uploaded by one user are never visible to another user. Only firm administrators with explicit admin role have cross-user visibility, and only within their own firm workspace.

4. AI processing

When you use an AI feature, the relevant text is sent to our AI provider (via our secure AI gateway) for that single request. We do not use your content to train third-party models. AI outputs are stored against your account for your future reference and can be deleted at any time.

5. Storage and retention

• Data is hosted on managed infrastructure inside India / Asia region.
• Files are stored in private encrypted storage buckets; access is per-user only.
• We retain data for the life of your account. On deletion request, personal data is removed within 30 days, except where retention is required by law (e.g. billing records for 8 years under Indian tax law).

6. Sharing

We do not sell your data. We share it only with:

• Infrastructure providers (hosting, database, storage) under data-processing agreements.
• AI providers, only the specific content required to complete your request.
• Law enforcement, only when compelled by a valid Indian legal order.

7. Your rights

• Access, correct or export your data — email us or use in-app account settings.
• Delete your account — permanently removes personal data within 30 days.
• Withdraw consent — you may stop using the platform at any time.

8. Security

Passwords are hashed with bcrypt; sessions use rotating JWTs; failed logins trigger progressive lockout; 2FA/TOTP is available for every account. Report vulnerabilities to security@legalkairos.app.

9. Contact

Grievance Officer, Legal Kairos — privacy@legalkairos.app.