1. Introduction
My Legal AI is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our AI-powered services. By using our services, you agree to the terms of this Privacy Policy.
2. Information We Collect
We collect personal information that you provide to us directly, such as when you sign up for our services, contact us, or upload documents. This may include:
- Contact information (name, email, phone number)
- Legal queries or case details
- Payment information (if applicable)
- Other information you choose to provide
We may also collect information automatically through your use of our services, such as:
- IP address
- Browser type and language
- Access times
- Referring website addresses
- Location information (if enabled)
- Cookie data
If you use our AI features, we may collect data related to your interactions with the AI, such as queries and responses, to improve our services.
3. Use of Information
We use your personal information for the following purposes:
- To provide and improve our AI-generated services
- To communicate with you about your account, services, and updates
- To personalize your experience
- To comply with legal obligations
- To protect our rights and property
We limit data collection and use to what is strictly necessary to provide our services, in compliance with applicable state laws.
4. Sharing of Information
We may share your personal information with:
- Service providers who help us operate our business (e.g., hosting, analytics)
- Legal professionals or experts who assist in providing legal support
- As required by law or to protect our rights
We do not sell your personal information to third parties. However, we may share contact information with third-party advertisers for marketing purposes, subject to your consent and opt-out rights as described below.
5. Data Security
We implement reasonable security measures, including encryption and anonymization where feasible, to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Your Rights and Choices Regarding Your Data
As explained below and on our privacy homepage at www.mylegalai.com/privacy, My Legal AI provides ways for you to access and delete your personal information as well as exercise applicable data rights that give you certain control over your personal information.
All Members
- Email Subscriptions: You can always unsubscribe from our commercial or promotional emails by clicking unsubscribe in those messages. We will still send you transactional and relational emails about your use of the My Legal AI Platform.
- Text Messages: You can opt out of receiving commercial or promotional text messages. You may also opt out of receiving all texts from My Legal AI (including transactional or relational messages). Note that opting out of receiving all texts may impact your use of the My Legal AI Platform.
- Push Notifications: You can opt out of receiving push notifications through your device (desktop and mobile) settings. Please note that opting out of receiving push notifications may impact your ability to properly use the My Legal AI Platform.
- Profile Information: You can review and edit certain account information you have chosen to add to your profile by logging in to your account settings and profile.
- Location Information: You can prevent your device from sharing location information through your device's system settings. But if you do, this may impact My Legal AI's ability to provide you our full range of features and services. You may also control some elements of sharing your location with My Legal AI in your My Legal AI account settings.
- Cookie Tracking: You can modify your cookie settings on your browser. You may also further control your cookie settings via our website's cookie management tool at www.mylegalai.com/privacy.
- Deleting Your Account: If you would like to delete your My Legal AI account, please contact our customer service at support@mylegalai.com. In some cases, we will be unable to delete your account, such as if there is an issue with your account related to trust, safety, or fraud. When we delete your account, we may retain certain information for legitimate business purposes or to comply with legal or regulatory obligations. For example, we may retain your payment history or uploaded documents for compliance purposes. When we retain such data, we do so in ways designed to prevent its use for other purposes.
- Opt-Out of Data Sharing or Profiling: You may opt out of data sharing with third parties or automated decision-making/profiling via our "Your Privacy Rights" page at www.mylegalai.com/privacy or by contacting support@mylegalai.com.
- Opt-In for Sensitive Data Processing: In states requiring opt-in consent (e.g., Minnesota, Maryland), you must explicitly consent to sharing sensitive data (e.g., legal queries) with third parties.
To exercise these rights, please contact us at support@mylegalai.com or visit our "Your Privacy Rights" page.
7. Retention
We retain your personal information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Upon your request or account inactivity, we will delete data within legally mandated timeframes (e.g., 45 days under California law). Certain data may be retained for trust, safety, or fraud prevention purposes, as permitted by law.
8. Minors Privacy
Our services are not intended for minors under 18. We implement age verification during registration to prevent minors' access. If we learn that we have collected personal information from a minor, we will delete it immediately.
9. International Transfer
If you are located outside the United States, your personal information may be transferred to and processed in the United States. We use safeguards, such as encryption and contractual agreements, to protect your data during transfers, in compliance with applicable data protection laws.
10. Third-Party Websites
The My Legal AI Platform may contain links or references to third-party websites, products, or services. Those third parties may have privacy policies that differ from ours. We are not responsible for those third parties and their websites, products, or services, and we recommend that you review their policies. Please contact those parties directly if you have any questions about their privacy policies.
11. Changes to the Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on our website and, where required, by email. Your continued use of our services after such changes constitutes your acceptance of the new policy.
12. Data Breach Notification
In the event of a data breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law. Our notification process includes:
- Immediate Assessment: We will assess the nature and scope of any potential breach within 24 hours of discovery
- User Notification: If your personal information is affected, we will notify you via email within 72 hours of confirmation
- Regulatory Notification: We will notify relevant data protection authorities within 72 hours as required by applicable laws
- Detailed Information: Our notification will include details about what information was affected, what we're doing to address the breach, and steps you can take to protect yourself
- Ongoing Updates: We will provide regular updates as our investigation progresses and additional measures are implemented
If you believe your account may have been compromised, please contact us immediately at support@mylegalai.com and change your password.
13. Third-Party Services
We use several third-party services to provide and improve our platform. These services may collect, process, and store your personal information as described below:
- AI Services:
- Grok AI (xAI): We use Grok AI for generating legal insights and document analysis. Grok may process your queries and documents to provide responses. Data is processed according to xAI's privacy policy.
- Azure Document Intelligence: We use Microsoft Azure's document processing service to extract text from uploaded documents. Documents are processed securely and deleted after processing.
- Cloud Services:
- Microsoft Azure: We use Azure for cloud hosting, storage, and various AI services. Data is stored in secure Azure data centers with encryption at rest and in transit.
- Vercel: Our application is hosted on Vercel's platform. Vercel may process basic request data for performance and security purposes.
- Payment Processing:
- Stripe: We use Stripe for payment processing. Stripe handles payment information according to their privacy policy and PCI DSS standards.
- Authentication & Security:
- NextAuth.js: We use NextAuth.js for authentication services. This handles login sessions and user authentication securely.
- Email Services:
- SMTP Email Service: We use SMTP services to send verification emails, notifications, and support communications.
- Maps & Location Services:
- Azure Maps: We use Azure Maps for location services and geocoding. Location data is processed according to Microsoft's privacy policy.
Data Sharing: We only share personal information with third parties as necessary to provide our services. We require all third-party service providers to maintain appropriate security measures and use your information only for the purposes we specify.
Your Rights: You can request information about third-party data sharing or opt out of certain data processing by contacting us at support@mylegalai.com.
14. Disclaimer for Case Sensitive Information
Our platform is not intended for uploading sensitive or confidential legal information without encryption or anonymization. Any such information you upload is at your own risk. We cannot guarantee the security or confidentiality of uploaded documents or data.
15. AI and Data Privacy Disclosures
My Legal AI uses artificial intelligence (AI) to deliver legal insights. We are committed to transparency and compliance with nationwide and state-specific AI and privacy laws. Below are our disclosures:
- Nationwide AI Disclosure: We provide a clear and conspicuous notice at the start of any AI interaction (e.g., via pop-up, banner, or chatbot message) informing you that you are interacting with an AI system. AI-generated outputs are for informational purposes only and must be verified by a licensed attorney.
- Data Use for AI Training: We may use your personal information, including queries and documents, to train our AI models to improve service quality. This processing complies with applicable data protection laws, and you may withdraw consent by contacting support@mylegalai.com, though this may limit access to certain features.
- State-Specific Disclosures:
- California (CCPA, SB 942): You have the right to opt out of data sales, sharing, or profiling via our "Your Privacy Rights" page. If we exceed 1 million monthly users, we provide AI-generated content detection tools. AI interactions are labeled as required.
- Colorado (Colorado AI Act): We conduct privacy and bias impact assessments for high-risk AI systems, ensuring transparency for consequential outputs. Users are notified of AI use in such cases.
- Utah (Artificial Intelligence Policy Act): For regulated occupations, we prominently disclose AI use at the start of interactions, as mandated.
- Minnesota and Maryland: We require opt-in consent for sharing sensitive data (e.g., legal queries) with third parties and prohibit processing minors' data for targeted advertising. Our data minimization practices limit collection to what is necessary.
- Texas (TDPSA): We provide explicit notices for processing sensitive data, such as legal or financial information, and offer opt-out options.
- Other States: In states like Virginia, Delaware, and New Hampshire, we comply with privacy laws by offering clear opt-out mechanisms and conducting risk assessments where required.