Privacy Policy
Last updated
What data we collect
- Contact and firm details you submit. When you use a form — audit request, lead form, or checkout — we collect your name, email, firm name, practice area, location, and anything else you type into the fields.
- Chat logs. Messages you send to our AI assistant are stored so we can respond, improve the service, and keep a record of the conversation. Do not send confidential client information through the chat.
- Payment information. Billing details are collected and held by our payment processors (Stripe or PayPal). We receive a confirmation and order record, not your full card number.
- Technical data and cookies. Like most sites, our host records IP address, browser type, and pages visited in server logs. We use only essential cookies required for the site to function; we do not run third-party advertising trackers.
How we use your data
To respond to your inquiry in under 60 seconds, deliver the audit or install you purchase, send transactional email about your order, provide support, keep records for tax and accounting, and secure the site against abuse. We do not use your data for automated decision-making that produces legal effects, and we do not sell it.
Where your data is stored and who processes it
We store form submissions, chat logs, and order records in Supabase. We send email through Resend, process payments through Stripe or PayPal, generate AI responses through Anthropic, and host the site on Vercel. Each is a service provider bound to process data only on our instructions. Some providers operate servers in the United States and other countries; by using the site you consent to that transfer.
| Provider | Role | Data touched |
|---|---|---|
| Supabase | Database and storage | Form submissions, chat logs, order records |
| Resend | Transactional email | Email address, message content |
| Stripe / PayPal | Payment processing | Billing details (held by the processor, not us) |
| Anthropic | AI chat and audit generation | Chat messages you send to the assistant |
| Vercel | Hosting and delivery | Server logs, IP address, request metadata |
We do not sell your data
We have never sold personal data and will not. We do not share it with advertisers or data brokers. The only parties who ever touch your data are the service providers listed above, and only to deliver what you asked for.
Cookies
We use only strictly necessary cookies — the kind required to keep the site working and secure. We do not use advertising or cross-site tracking cookies. Because we rely on essential cookies only, you will not see a consent banner; you can still block cookies in your browser, though parts of the site may stop working.
Your rights (GDPR and CCPA)
If you are in the EU/EEA/UK (GDPR) or California (CCPA/CPRA), you have the right to access the personal data we hold about you, correct it, delete it, restrict or object to processing, receive a portable copy, and — because we do not sell data — nothing to opt out of on that front. You will never be discriminated against for exercising these rights.
To exercise any right, email hello@bizlegal-ai.com with your request. We respond within 30 days.
Data retention and security
We keep personal data only as long as needed for the purpose it was collected, or as required by law (order and tax records are kept for the statutory period). We protect data with encryption in transit, access controls, and vetted service providers. No system is perfectly secure, but we design for least privilege and delete what we no longer need.
Children
This is a business-to-business service for law firms. It is not directed at children, and we do not knowingly collect data from anyone under 18.
Changes and contact
We may update this policy as the service evolves; the “last updated” date above always reflects the current version. Questions or requests go to hello@bizlegal-ai.com. See also our Terms of Service.