Privacy Policy

Last Updated: October 3, 2025

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, and billing information
• Legal Documents: Case files, pleadings, exhibits, and other legal documents you upload
• Case Data: Case names, parties, deadlines, notes, and related metadata
• Communication Data: Messages sent through our platform and support communications

1.2 Information We Collect Automatically

• Usage Data: Features used, time spent, and interaction patterns
• Technical Data: IP address, browser type, device information, and access logs
• Performance Data: System performance metrics and error logs

2. How We Use Your Information

2.1 Primary Uses

• Provide and maintain our legal case management services
• Process and store your legal documents securely
• Generate PDF documents, certificates, and legal forms
• Provide AI-powered legal assistance and document analysis
• Send important account and service notifications

2.2 Secondary Uses

• Improve our services and develop new features
• Provide customer support and technical assistance
• Ensure security and prevent fraud or abuse
• Comply with legal obligations and court orders

3. Information Sharing and Disclosure

3.1 Limited Sharing

We may share your information only in these specific circumstances:

• Service Providers: Trusted third-party payment processors who help us securely process payments under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or government request
• Business Transfer: In the event of a merger, acquisition, or sale of assets (with continued privacy protections)
• Safety and Security: To protect the rights, property, or safety of our users or the public

4. Data Security

4.1 Security Measures

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict access controls and multi-factor authentication
• Infrastructure: Secure cloud and on-premises infrastructure with regular security audits, including bare metal and dedicated hosting options
• Monitoring: 24/7 security monitoring and incident response
• Backups: Regular encrypted backups with secure off-site storage

4.2 Attorney-Client Privilege

We understand the sensitive nature of legal documents and communications. While we are not attorneys and cannot claim attorney-client privilege, we treat all user data with the highest level of confidentiality consistent with such privilege.

5. AI and Machine Learning

5.1 AI Processing

• Our AI features use your documents to provide legal assistance and analysis
• AI processing occurs in secure, encrypted environments
• We use third-party AI providers (like OpenAI) under strict data processing agreements
• Your documents are not used to train general AI models
• Future features will include proprietary, non-third-party LLMs and models designed specifically for enhanced security and compliance requirements

6. Data Retention

• Active Accounts: We retain your data as long as your account is active
• Closed Accounts: We retain minimal account data (username, email, account preferences) to preserve your identity and enable easy account reactivation. Personal documents and case data are securely archived and can be restored upon account reactivation. You may request complete data deletion at any time.
• Legal Requirements: Some data may be retained longer if required by law
• Backups: Data in encrypted backups is purged according to our backup rotation schedule

7. Your Rights and Controls

7.1 Access and Control

• Access: View and download all your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Portability: Export your data in common formats
• Restriction: Limit how we process your data

7.2 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, sold, or disclosed, and the right to delete personal information.

7.3 GDPR Rights

If you are in the European Union, you have rights under the General Data Protection Regulation, including data portability, right to be forgotten, and the right to object to processing.

8. Cookies - Minimal by Design

8.1 What We Actually Use

• Session Management Only: Secure login tokens and session data to keep you logged in safely
• Cross-Domain Authentication: Seamless login between proper.legal and lcm.proper.legal
• Security Features: CSRF protection and secure authentication

8.2 What We DON'T Use

• ❌ No analytics or tracking cookies
• ❌ No advertising or marketing cookies
• ❌ No third-party cookies
• ❌ No social media tracking pixels
• ❌ No preference cookies that follow you around

Result: A cleaner, faster, more private browsing experience focused entirely on your legal work.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Other legally recognized transfer mechanisms

10. Children's Privacy

Our services are not intended for direct use by children under 18. However, we recognize that family law cases often necessarily involve children's information as part of legal documentation.

10.1 Family Law Considerations

10.2 Enhanced Protection for Children's Data

When children's information appears in legal documents, we apply enhanced protections:

• Restricted Processing: Children's data is excluded from any AI analysis, training, or processing beyond basic document storage
• Limited Access: Only the account holder and authorized legal representatives can access documents containing children's information
• No Marketing Use: Children's information is never used for any marketing, analytics, or service improvement purposes
• Enhanced Security: Additional encryption and access controls for documents containing minors' information
• Automatic Redaction: Option to automatically redact children's identifying information in shared documents

10.3 Direct Collection from Children

We do not knowingly collect personal information directly from children under 18. If we learn we have collected such information directly, we will delete it immediately.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by:

• Email notification to your registered email address
• Prominent notice on our website
• In-app notification when you next log in

12. Contact Information

If you have questions about this privacy policy or our privacy practices, please contact us:

---

This privacy policy constitutes a binding agreement between you and Proper Legal. By using our services, you acknowledge that you have read, understood, and agree to be bound by this policy.