01Introduction
Lawvidia (“we,” “us,” or “our”) operates a U.S.-based AI-powered legal service platform (the “Platform”) designed to assist personal injury lawyers, solo and small firm attorneys, big law litigators, corporate counsel, trial lawyers, and the general public with legal questions. Our features include document drafting, summarization, legal AI chatbot, AI judge simulator, claim element identification, legal defense suggestions, litigation planning, ethical guidance, jury selection planning, multilingual document translation, task management, team collaboration, notifications, reminders, complaints, and discovery management. We are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information, and outlines your rights under applicable privacy laws. We comply with U.S. privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and laws in Virginia, Colorado, Connecticut, and Utah. For users in the European Economic Area (EEA) or United Kingdom (UK), we incorporate principles of the EU/UK General Data Protection Regulation (GDPR) to ensure robust data protection.
By using our Platform, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree, please do not use the Platform. This Policy applies to our website and online services (no mobile apps) and does not cover third-party websites or services we do not control.
Note for Legal Professionals and Their Clients
If you use the Platform as an attorney or on behalf of another individual (e.g., a client), you are responsible for ensuring you have the authority to provide personal information about others. We process such data as described in this Policy and in accordance with our agreements with you. When acting as a service provider or processor for a business client (e.g., a law firm), we process personal data under their instructions, and the client, as the data controller, is responsible for compliance with relevant privacy laws.
02Information We Collect
We collect personal information (“personal data”) that you provide directly and information we gather automatically when you use the Platform. The types of information we collect include:
Information You Provide Directly
- Account Information: When you create an account or use our services, you provide details such as your name, email address, phone number, and account login credentials (e.g., username and password).
- User Content: When using features like document drafting, summarization, AI chatbot, or discovery management, you may input information such as legal case details, names, contact information of parties involved, or other content relevant to your legal matter. This may include sensitive personal information (e.g., health, financial, or demographic data) if you choose to include it. We only collect such sensitive data if you voluntarily provide it, and we handle it with heightened care (see Data Security).
- Payment Information: For paid subscriptions (Basic, Pro, Enterprise, Ultimate), you provide payment details processed by our third-party payment processor. We do not store full credit card numbers but may retain basic transaction information (e.g., billing name, payment method, amount) for record-keeping.
- Communications: When you contact us for support or feedback, we collect the information you provide, such as your contact details and message content. If you request assistance with a feature (e.g., a document or chatbot query), our support team may access relevant content with your permission to resolve the issue.
Automatically Collected Data
- Usage and Device Information: We collect data about your device and Platform interactions, including IP address, browser type, device type, operating system, referring URLs, pages viewed, and access dates/times. We log interactions (e.g., features used, errors) to analyze usage patterns and improve the Platform.
- Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to authenticate logins, remember preferences, and analyze usage. See Cookies and Tracking Technologies for details and your options.
Categories of Personal Information (CPRA)
For California residents, we have collected the following categories of personal information in the past 12 months, as defined by California law:
- Identifiers: Name, email address, phone number, IP address, account credentials.
- Customer Records Information: Contact details, billing information, account credentials.
- Protected Class Characteristics: Only if voluntarily provided in User Content (e.g., health or demographic data relevant to a legal case).
- Commercial Information: Transaction records (e.g., subscription purchases).
- Internet or Network Activity: Browsing history, feature usage, and interaction data.
- Geolocation Data: Approximate location derived from IP address.
- Professional or Employment Information: If provided (e.g., law firm name, job title).
- Sensitive Personal Information: Account credentials and any sensitive data (e.g., health, legal) included in User Content.
We collect these categories directly from you or via automated means during Platform use.
03How We Use Your Information
We use your personal information for the following purposes:
- Provide and Improve Services: To deliver core Platform functionalities (e.g., generating documents, answering chatbot queries, simulating judicial outcomes), maintain your account, and store User Content. We analyze usage data and feedback to enhance AI algorithms, develop new features, and improve user experience.
- Communicate with You: To send service-related communications (e.g., account confirmations, subscription updates, policy changes) using your contact details. With opt-in consent, we may send newsletters or marketing emails about new features; you can unsubscribe at any time.
- Customer Support: To respond to inquiries and resolve issues, potentially accessing User Content with your permission for troubleshooting.
- Legal and Compliance: To comply with legal obligations (e.g., tax, accounting, identity verification) and respond to lawful requests from public authorities (e.g., subpoenas, court orders).
- Security and Fraud Prevention: To protect the Platform using device identifiers and usage patterns to detect and prevent fraud, unauthorized access, or abuse. This includes automated monitoring and manual review of suspicious activities.
- Analytics and Development: To analyze usage (e.g., feature popularity, error rates) for Platform improvements, creating aggregated, de-identified statistics that do not identify individuals. We do not use User Content for profiling or marketing without consent.
- Advertising and Marketing: With consent or opt-out options, we use cookies and third-party tools for targeted advertising of our services (e.g., showing Lawvidia ads on other sites based on your Platform visits) and to measure campaign effectiveness.
We will not use your information for incompatible purposes without notifying you or obtaining consent as required.
06Data Retention
We retain personal information only as long as necessary for the purposes outlined in this Policy, unless a longer period is required by law:
- Account Information and User Content: Retained while your account is active. You can delete documents or data via account settings. Upon account closure, we delete or anonymize data within 30 days, except as noted below.
- Transaction Records: Retained for tax, accounting, or legal compliance (e.g., billing records may be kept for several years).
- Backup and Log Data: Data may persist in encrypted backups for up to 60 days after deletion from live systems. Server logs with identifiers (e.g., IP addresses) are retained for security/audit purposes for a limited period.
- Legal Obligations: Data may be retained to comply with legal requirements or resolve disputes.
After retention periods, we delete or anonymize data. Anonymized data may be used indefinitely for analytics without identifying you.
07Data Security
We implement robust safeguards to protect your personal information:
- Encryption: Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256). User Content and sensitive data are encoded to prevent unauthorized access.
- Access Controls: Only authorized personnel access data for specific purposes (e.g., support, maintenance), with two-factor authentication and strict policies.
- Security Certifications: We align with SOC 2 standards for data security, availability, and confidentiality, and follow HIPAA-aligned practices for sensitive data (e.g., health information in legal documents).
- Monitoring and Testing: We use firewalls, intrusion detection, anti-malware, and regular penetration testing to identify and address vulnerabilities.
- Incident Response: In case of a breach, we will investigate, mitigate, and notify affected users within 72 hours (unless delayed by law enforcement), providing details and protective steps.
No system is 100% secure. You can help by using strong passwords and reporting unauthorized access to support@lawvidia.ai .
08International Data Transfers
Lawvidia is headquartered in the United States, and your data may be stored or processed in the U.S. or other jurisdictions where our service providers operate. For EEA/UK users, we use safeguards like Standard Contractual Clauses (SCCs) to ensure GDPR-compliant data transfers. By using the Platform, you acknowledge that your data may be transferred to jurisdictions with different privacy laws, and we will protect it as described in this Policy.
09Children’s Privacy
The Platform is not intended for children under 13. We do not knowingly collect data from children under 13. If you are 13–18, you may use the Platform only with parental/guardian consent. If we discover data from a child under 13, we will promptly delete it. Contact us at support@lawvidia.ai if you believe we have such data.
10California Privacy Rights
Under the CCPA/CPRA, California residents have the following rights:
- Right to Know: Request categories or specific pieces of personal information collected, sources, purposes, and third parties with whom it’s shared.
- Right to Delete: Request deletion of your personal information, subject to exceptions (e.g., legal obligations, transaction completion).
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share data for cross-context behavioral advertising without consent. You can opt out of targeted advertising via our cookie settings or GPC.
- Right to Limit Sensitive Data Use: We use sensitive data (e.g., User Content) only for requested services or permitted purposes (e.g., security). No separate opt-out is needed.
- Right of Non-Discrimination: We will not discriminate against you for exercising these rights.
Submitting Requests
Contact support@lawvidia.ai with “California Privacy Rights Request” in the subject line, or call [1-800-LAWVIDIA]. We verify identity using account details or email confirmation. We respond within 45 days (extendable by 45 days if needed).
Shine the Light
We do not share data for third-party direct marketing without consent. Contact us for inquiries.
11Privacy Rights in Other U.S. States (Virginia, Colorado, Connecticut, Utah)
Residents of Virginia, Colorado, Connecticut, Utah, or other states with similar laws have rights to:
- Access: Confirm and access your personal data.
- Data Portability: Obtain a copy of your data in a usable format.
- Correct: Correct inaccurate data.
- Delete: Request deletion, subject to exceptions.
- Opt-Out: Opt out of targeted advertising, sales, or profiling with legal effects. We do not engage in sales or automated profiling, and you can opt out of targeted ads via cookie settings.
- Appeal: Appeal denied requests, with instructions provided in our response.
Submitting Requests
Contact support@lawvidia.ai with your state and request type (e.g., “Virginia Data Request – Access”). We verify identity and respond within 45 days.
12GDPR and UK Data Protection Rights
For EEA/UK users, Lawvidia is the Data Controller (except when acting as a processor for a business client). We process data under these legal bases:
- Contractual Necessity (Art. 6(1)(b)): To provide services (e.g., document generation, chatbot responses) per our Terms.
- Consent (Art. 6(1)(a)): For sensitive data in User Content, marketing emails, or non-essential cookies. You can withdraw consent anytime.
- Legitimate Interests (Art. 6(1)(f)): For analytics, security, and service improvements, balanced against your rights.
- Legal Obligation (Art. 6(1)(c)): For compliance with laws (e.g., tax reporting).
Your Rights
- Access: Obtain a copy of your data.
- Rectification: Correct inaccurate data.
- Erasure: Delete data when no longer needed, subject to exceptions.
- Restrict Processing: Limit processing in specific cases (e.g., contested accuracy).
- Data Portability: Receive or transfer your data.
- Object: Object to processing for marketing or legitimate interests.
- Automated Decision-Making: Our Platform does not make automated decisions with legal effects.
- Withdraw Consent: Stop consent-based processing.
- Complain: Contact an EU/UK data protection authority (e.g., UK ICO) or us first.
Exercising Rights
Email support@lawvidia.ai with your request. We verify identity and respond within one month (extendable for complex requests).
13Contact Us
For privacy inquiries, contact:
- Email: support@lawvidia.ai
- Mail: Lawvidia, Attn: Privacy Team, [1163 Fairway Dr, City of Industry, CA]
Please specify your request and residency (e.g., California, EEA) for efficient processing.
14Changes to This Privacy Policy
We may update this Policy to reflect changes in practices, laws, or technology. We will revise the “Last Updated” date and provide notice (e.g., email, website banner) for significant changes. Your continued use of the Platform after changes constitutes acceptance. Review this Policy periodically.
Thank you for trusting Lawvidia with your personal information. We are dedicated to protecting your privacy and welcome your feedback.