LegAI Assistant, Inc. ("Company") is a Delaware, U.S., corporation that operates Kurzly. This Privacy Policy explains how we collect, use, store, and protect personal information. We comply with U.S. federal and state privacy laws (including, where applicable, California, Virginia, Colorado, and other state laws). Where you are located in the EU/EEA, the UK, Korea, or another jurisdiction, we also comply with applicable local law (e.g., GDPR, Korean PIPA) to the extent it applies.
1. Information We Collect
- Account data such as email, name, organization details, profile information, authentication tokens, and contact preferences.
- Workspace data including cases, evidence, timelines, summaries, analyses, chats, plans, and related metadata; and community-related data such as posts, comments, and report records.
- Usage data such as device identifiers, IP address, browser/OS information, timestamps, feature usage, logs, and cookies.
- Billing data such as invoicing contact details and payment method references (full card numbers are not stored by us).
2. How We Use Information
- To operate authentication, case/evidence management, AI analysis, chat, export, collaboration, and community features (posts, comments, reporting, and moderation).
- To improve performance, reliability, and security, including abuse prevention.
- To provide customer support and service notices.
- To comply with legal obligations and protect rights and safety.
3. AI Processing and Model Policy
- To provide AI features, relevant input data may be processed by model providers (e.g., Google Vertex AI).
- We apply policy controls so customer case data is not used to train or fine-tune public models.
- Processing is limited to service delivery purposes and subject to provider data protection terms.
4. Retention
- Personal data is retained only as long as necessary for the stated purposes and legal obligations.
- Guest/trial workspace data may be auto-deleted within 24 hours unless converted to a signed-in account.
- After account closure, workspace data is deleted or anonymized unless legal retention applies. Community posts and comments may be removed on request or under policy; report and moderation records may be retained for safety and compliance for a limited period.
5. Sharing and Processors
- We may engage cloud, authentication, payment, analytics, and support processors as needed to provide the service.
- Processors are bound by confidentiality and security obligations and may not use data for unrelated purposes.
- We may disclose information when legally required.
6. Data Location and Multi‑Jurisdiction
- We are a U.S. company. Data may be stored and processed in the United States and in other regions where we or our service providers operate (e.g., Korea).
- We comply with U.S. federal and state privacy laws, including where applicable the California Consumer Privacy Act (CCPA/CPRA), Virginia CDPA, Colorado CPA, and similar state laws. Where you are in the EU/EEA, the UK, Korea, or another jurisdiction, we comply with applicable local law (e.g., GDPR, Korean Personal Information Protection Act) to the extent it applies to our processing.
- Residents of California and other U.S. states with privacy laws, and of the EU/EEA, UK, or Korea, may have additional rights (access, deletion, portability, opt‑out of sale/sharing, correction). Submit requests to privacy@leg-ai.com.
7. Your Rights
- Under U.S. and applicable state law you may request access, correction, deletion, and related rights. California and other state residents, and users in the EU/EEA, UK, or Korea, may have additional rights under local law (e.g., CCPA, GDPR).
- Requests can be submitted to privacy@leg-ai.com or +82-10-2178-9598. Identity verification may be required.
8. Security Measures
- We use encryption in transit and at rest, access controls, and security monitoring.
- Access to personal data is restricted on a need-to-know basis and auditable.
9. Children's Privacy
- The service is not intended for individuals under 18.
- If we discover child personal data, we will delete it promptly.
10. Policy Updates
- We may update this policy to reflect legal or service changes.
- Material changes will be announced before they take effect.
11. Contact
- Privacy Officer, LegAI Assistant, Inc.
- Email: privacy@leg-ai.com
- Phone: +82-10-2178-9598
- Address: 1111B South Governors Avenue, Dover, DE 19904, USA