Your Privacy Choices
Last updated: August 5, 2026
The privacy rights available to you, the honest answer about what we do with personal data, and the two ways to act on it — one of them instant.
We do not sell or share your personal information
eLawPlatform does not sell personal information, does not share it for cross-context behavioural advertising, and does not use it for targeted advertising or profiling — under the California Consumer Privacy Act, the Florida Digital Bill of Rights, or any other state privacy law. We have not done so in the preceding 12 months. There is no opt-out to click because there is nothing to opt out of.
We also do not use customer content to train AI models. See AI Transparency.
1. Whose data this covers
Two different relationships run through this platform, and which one applies decides who you should ask.
- Data about you as an account holder. Your name, email, role, login history, and billing records. We decide how this is handled — we are the controller — so bring these requests to us.
- Data inside a firm's workspace.Documents, prompts, conversations, and anything about clients or counterparties contained in them. Your firm decides what goes in and what happens to it; we only process it on the firm's instructions. Requests about this material must go to the firm. If you contact us anyway, we will forward the request to the firm and tell you we have done so.
The processor terms governing the second category are in our Data Processing Agreement.
2. Your rights
We extend the rights below to every user, wherever they live, rather than only to residents of states and countries whose laws compel it.
| Right | What it means here |
|---|---|
| Know / access | What we hold about you, and a copy of it |
| Delete | Erasure of your personal data, subject to legal retention duties |
| Correct | Fix inaccurate personal data |
| Portability | A copy in a structured, machine-readable format |
| Opt out of sale, sharing & targeted advertising | Nothing to opt out of — we do none of these (see below) |
| Limit use of sensitive personal information | We do not use sensitive personal information for inferring characteristics |
| Opt out of profiling | We do not profile anyone for decisions with legal or similar effects |
| Non-discrimination | Exercising a right never degrades your service or price |
| Appeal | A second review if we decline a request |
Depending on where you live, these rights arise under the California Consumer Privacy Act as amended by the CPRA, the Florida Digital Bill of Rights, the Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana privacy acts, the EU and UK GDPR, or comparable law. Where a law that applies to you grants more than this page describes, that law governs.
3. How to exercise them
Immediately, yourself. Signed-in users can export their personal data and request erasure of their account from Settings → Profile. An export is generated on demand. An erasure request enters a seven-day grace period — a deliberate pause, so that a request made in error or under pressure can be revoked before it becomes irreversible.
By email. Write to privacy@elawplatform.com stating the right you are exercising and the account or email address concerned.
- Verification. We verify requests against the email address on the account, and may ask for more where a request is sensitive or the identity is unclear. We do not collect additional personal data solely to verify a request beyond what is necessary.
- Timing. We acknowledge within 10 days and respond within 45 days. Where a request is complex we may extend once by a further 45 days, and will tell you why within the first period.
- Cost. Free, unless a request is manifestly unfounded or excessive — in which case we will say so before charging anything.
- Authorised agents. An agent may act for you with written permission signed by you; we may contact you to confirm it.
4. If we say no
We will tell you why, and you may appeal by replying to our decision or writing to privacy@elawplatform.com with "appeal" in the subject line. A person who was not involved in the original decision reviews it and responds in writing within 60 days.
If the appeal is denied you may complain to your state Attorney General — for Florida residents, the Florida Attorney General; for California residents, the California Privacy Protection Agency or the Attorney General. Users in the EEA or UK may complain to their supervisory authority.
5. What we collect, and why
This is our notice at collection. No category below is collected for a purpose other than the one stated, and none is sold.
| Category | Purpose | Disclosed to | Kept for |
|---|---|---|---|
| Identifiers — name, email, firm, role, IP address | Create and secure accounts, authenticate sessions, prevent abuse | Hosting, email, and security subprocessors | Life of the account + 30 days |
| Commercial information — plan, subscription status, invoices | Take payment, manage subscriptions, meet tax and accounting duties | Stripe | 7 years (financial records) |
| Internet activity — pages viewed, product events, device and browser data | Operate, debug, and secure the Service; understand aggregate usage | Hosting, analytics (with consent), error monitoring | Up to 24 months |
| Customer content — documents, prompts, conversations, agent runs | Provide the features you invoke; nothing else | AI model and infrastructure subprocessors | Until you delete it, or 30 days after the account closes |
| Professional information — job title, practice area, firm size | Provision the workspace and route support | Not disclosed externally | Life of the account |
The full list of recipients is on our Subprocessors page.
6. Sensitive personal information
We do not ask for sensitive personal information, and we do not use or disclose it to infer characteristics about anyone. Documents a firm uploads may of course contain sensitive categories of data about third parties — health records in a personal injury matter, for example. We process that material solely to provide the features the firm invokes, under the DPA; the firm decides what to upload and on what legal basis.
7. Global Privacy Control
We honour the Global Privacy Control signal. Because we do not sell or share personal information, the practical effect of a GPC signal is to suppress optional analytics cookies, which we also do whenever consent has not been given. See the Cookie Policy.
8. Minors
The Service is for legal professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children, and we have not sold or shared the personal information of anyone under 16.
9. Contact
Privacy requests and questions: privacy@elawplatform.com. For how personal data is handled generally, read the Privacy Policy.