Legal
Privacy Policy
Last updated: June 15, 2026
Information We Collect
We collect information you provide when creating an account, using the Services, or communicating with us. This includes your name, email address, firm name, job title, and billing information. We also collect information about your use of the Services, including pages viewed, features used, and interactions with other users. When you upload documents, we process and store those documents on our infrastructure. We may also collect device information such as IP address, browser type, and operating system.
How We Use Your Information
We use the information we collect to provide, maintain, and improve the Services. This includes authenticating your access, processing transactions, sending service-related communications, and providing customer support. We may use aggregated, anonymized data to analyze usage patterns and improve our product. We do not use the content of your documents or communications for training AI models or for any purpose other than providing the Services to you.
Data Sharing and Disclosure
We do not sell your personal information. We may share information with service providers who process data on our behalf, such as cloud infrastructure providers (AWS), payment processors (Stripe), and email delivery services. These providers are contractually bound to protect your data and may only use it to provide services to us. We may disclose information if required by law, such as in response to a valid court order or subpoena, or to protect our rights and property.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Services. Upon account closure, we retain your data for 30 days before permanent deletion, unless a longer retention period is required by law or to comply with our legal obligations. Document content associated with matters is retained according to your firm's retention settings or until deleted by an authorized administrator.
Data Security
We implement industry-standard security measures to protect your data, including encryption at rest (AES-256) and in transit (TLS 1.3), access controls, and continuous monitoring. Our infrastructure is hosted on AWS with multi-region redundancy. We conduct regular security assessments and maintain SOC-2-aligned controls. Despite these measures, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
Your Rights
Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, delete, or port your data. You may also have the right to restrict or object to certain processing activities. To exercise these rights, please contact us at privacy@lawden.dev. We will respond to your request within 30 days. If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.
Cookies and Tracking
We use essential cookies to operate the Services, including session cookies for authentication and security. We also use analytics cookies to understand how the Services are used. You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Services. We do not use third-party tracking cookies for advertising purposes.
International Data Transfers
Your data may be transferred to and processed in the United States and other countries where our service providers operate. When transferring data from the European Economic Area, the United Kingdom, or Switzerland, we rely on Standard Contractual Clauses or other appropriate safeguards. You may request a copy of the applicable safeguards by contacting us.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Services. Your continued use of the Services after the effective date of the updated policy constitutes acceptance of the changes.
Contact
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@lawden.dev or by mail at Lawden, Inc., 548 Market Street, San Francisco, CA 94104, United States.