Privacy Policy

1. Introduction

Welcome to Team Legali ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our legal case management platform and services.

By using Team Legali, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password, and profile information
• Professional Information: Law firm details, practice areas, bar association numbers
• Case Information: Case details, matter information, docket entries, legal documents
• Communication Data: Messages, chat history, support requests
• Payment Information: Billing details, payment method (processed securely through third-party payment processors)

2.2 Automatically Collected Information

When you use our services, we automatically collect:

• Usage Data: Pages viewed, features used, time spent on platform, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: General geographic location based on IP address
• Cookies and Similar Technologies: Session data, preferences, authentication tokens
• Log Data: Server logs, error reports, performance metrics

2.3 Information from Third-Party Integrations

With your consent, we collect information from third-party services you connect to Team Legali:

• Google Services: Google Drive files, Gmail messages, Calendar events (with explicit user authorization)
• Microsoft Services: OneDrive files, Outlook emails, Teams messages (with explicit user authorization)
• Authentication Providers: OAuth profile information from Google, Microsoft, or other providers

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our legal case management platform
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Case Management: To organize, store, and process case information, documents, and related data
• AI Features: To provide AI-powered document analysis, entity extraction, and legal insights
• Communication: To send service updates, security alerts, and respond to your inquiries
• Analytics: To understand usage patterns, improve user experience, and develop new features
• Security: To detect, prevent, and address fraud, security issues, and technical problems
• Legal Compliance: To comply with legal obligations and enforce our terms of service
• Marketing: With your consent, to send promotional materials and updates (you can opt-out anytime)

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 When We Share Information

We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted third-party vendors who perform services on our behalf (cloud hosting, analytics, payment processing) under strict confidentiality agreements
• Workspace Members: With other authorized users within your workspace or organization
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
• Protection of Rights: To protect our rights, property, safety, or that of our users

4.3 Third-Party Service Providers

We work with the following categories of service providers:

• Cloud Infrastructure: AWS, Supabase for secure data storage and hosting
• AI Services: Amazon Bedrock for AI-powered legal analysis
• Authentication: OAuth providers for secure login
• Analytics: Usage analytics and performance monitoring
• Payment Processing: Secure payment processors for subscription billing

5. Google API Services - Limited Use Disclosure

Team Legali's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to Google user data that is necessary to provide and improve our legal case management features
• We do not use Google user data for serving advertisements
• We do not allow humans to read Google user data unless:
  • We have your affirmative agreement for specific messages, files, or other data
  • It is necessary for security purposes (such as investigating abuse)
  • It is required to comply with applicable law
  • Our use is limited to internal operations and the data has been aggregated and anonymized
• We do not transfer Google user data to third parties except:
  • As necessary to provide or improve user-facing features that are prominent in the requesting application's user interface
  • With your affirmative agreement
  • For security purposes (such as investigating abuse)
  • To comply with applicable law
  • As part of a merger, acquisition, or sale of assets with notice to users

Scopes We Request: We only request the minimum scopes necessary for our features, such as Google Drive file access and Gmail read permissions for case-related communications integration.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access control and multi-factor authentication
• Security Monitoring: Continuous monitoring for suspicious activities and security threats
• Regular Audits: Periodic security assessments and vulnerability testing
• Secure Infrastructure: Hosted on secure, certified cloud infrastructure (AWS, Supabase)
• Data Backups: Regular automated backups with encryption
• Employee Training: Security awareness training for all team members

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory purposes. Case data and documents may be retained longer if required for legal compliance or legitimate business purposes.

8. Your Rights and Choices

You have the following rights regarding your personal information:

8.1 Access and Portability

• Request access to your personal information
• Request a copy of your data in a portable format

8.2 Correction and Deletion

• Update or correct inaccurate information
• Request deletion of your personal information (subject to legal retention requirements)

8.3 Consent Management

• Withdraw consent for data processing where consent is the legal basis
• Opt-out of marketing communications
• Manage third-party integrations and revoke access

8.4 Cookie Preferences

• Manage cookie preferences through your browser settings
• Opt-out of analytics cookies

To exercise these rights, please contact us at privacy@teamlegali.com

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, such as standard contractual clauses approved by relevant authorities.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe we have collected information about a child, please contact us immediately, and we will take steps to delete such information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@teamlegali.com

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: performance of contract, legitimate interests, consent, and legal obligations.

13. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how you use our platform
• Performance Cookies: Improve platform performance and user experience

You can control cookies through your browser settings. Note that disabling certain cookies may impact functionality.

14. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice within the platform

Your continued use of our services after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.