Privacy Policy

1. Scope

This Privacy Policy applies to LegalFlow websites, web applications, and mobile applications (iOS and Android) operated by Wavelength Technology ("LegalFlow," "we," "us"). By using LegalFlow, you agree to the practices described here.

2. Information we collect

Information you provide

• Account data such as name, email, password, and organization details.
• Profile data such as role, firm details, and optional professional credentials.
• Case data and documents, including client information, notes, and files you upload.
• Payment and billing details, processed through third-party payment processors.
• Support communications, including emails and feedback.

Information collected automatically

• Usage data such as pages viewed, actions taken, and feature usage.
• Device and log data such as IP address, browser type, operating system, timestamps, and error logs.
• Cookies and similar technologies for authentication, security, and preferences.

Integrations

When you connect third-party services such as Google Calendar or Google sign-in, we receive the information required to provide those features, including authentication tokens and calendar data.

3. How we use information

• Provide, maintain, and improve the LegalFlow service.
• Authenticate users, manage accounts, and provide customer support.
• Secure the platform, prevent fraud, and monitor performance.
• Communicate service updates and operational notices.
• Power AI-assisted features (see section 4 below).
• Comply with legal obligations and enforce our Terms of Service.

4. AI-powered features

LegalFlow offers optional AI-powered features on eligible subscription plans, including Smart Case Import and Court Order Analysis. When you use these features:

• Relevant case data or document content is sent to our AI processing provider (currently OpenAI) to generate structured results.
• Data is transmitted over encrypted connections and processed only for the purpose of fulfilling your request.
• We do not use your data to train third-party AI models. Our AI provider processes data under a data-processing agreement that prohibits using customer inputs for model training.
• AI-generated outputs (such as extracted case fields or order summaries) are returned to LegalFlow and stored within your organization's account.
• You may choose not to use AI features; no data is sent to the AI provider unless you explicitly initiate an AI action.

5. How we share information

• Service providers who help us operate LegalFlow (hosting, storage, email, security, analytics).
• AI processing providers when you use AI-powered features (see section 4).
• Payment processors (currently Razorpay) to handle billing and subscriptions. Payment card details are collected and stored directly by the payment processor; we do not store your full card number.
• Integrations you enable (for example, calendar or email services).
• Legal and compliance needs when required by law.
• Business transfers if LegalFlow is involved in a merger, acquisition, or asset sale.

We do not sell personal information. We share data only as described here or with your consent.

6. Data safety summary (App Store and Google Play)

• Data collected: account data, case content, documents, usage, and device information.
• Data used for: core functionality, security, support, and product improvement.
• Data sharing: service providers, AI providers (when you use AI features), and integrations you enable.

You can request data access or deletion by contacting us at privacy@legalflow.ltd.

7. Data retention

We retain information for as long as your account is active or as needed to provide the service.

After cancellation or account deletion

• If you cancel your subscription, your data remains accessible until the end of the current billing period. After that period, your account enters a read-only state.
• We retain your data for 90 days after subscription expiry so you can reactivate your account without data loss. After 90 days, data may be permanently deleted.
• You may request export of your data at any time while your account is active or within the 90-day retention period by contacting support@legalflow.ltd.
• Certain records (such as billing history and audit logs) may be retained longer to comply with legal and financial obligations.

8. Security

We use reasonable technical and organizational measures to protect information, including access controls, encryption in transit, and monitoring. No system is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

• Access, correct, or delete your personal information.
• Export your data where available.
• Object to or restrict certain processing activities.

Contact us at privacy@legalflow.ltd to exercise your rights.

10. International transfers

We may process data in countries other than where you live. When we transfer data internationally, we use appropriate safeguards required by law.

11. Children's privacy

LegalFlow is intended for professional use and is not directed to children under 18. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post updates here and revise the "Last updated" date.

13. Contact