Privacy Policy

1. Introduction and Data Controller

LEGALDIGM ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy describes how we collect, use, and protect your information when you use our service, including the AI-based legal assistant (the chat), the contract generator, the legal database, and other features.

The data controller is Lundgren & Partner AB (org.nr 556797-5866), which owns and develops LEGALDIGM. Contact: privacy@legaldigm.se.

1a. The Legal Assistant (AI Chat)

The legal assistant is an AI-driven chat that answers legal queries based on available legal sources. In order to provide the service, we process the following data when you use the chat:

• Queries (prompts) and messages you send to the assistant
• Any uploaded documents and excerpts from them
• AI-generated answers and accompanying source references
• Conversation ID, timestamps, selected mode (e.g. Startup, SME, Consultant, Public, Real Estate, IRAC), and token consumption
• Technical metadata (IP address, browser) for security and abuse prevention

Legal basis: the processing is carried out to perform the contract with you (Art. 6(1)(b) GDPR) and on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in operating, securing, and improving the service.

No training on customer data: Your queries, documents, or conversations are never used to train our or third-party providers' AI models. Content is sent via an AI gateway to underlying models (e.g. Google Gemini, OpenAI GPT) solely to generate a response in real time and is not stored with the model provider for training purposes.

Confidentiality and sensitive content: Avoid entering information regarding identified natural persons or sensitive personal data (Art. 9 GDPR) that you do not have a lawful basis to share. Anonymise names and personal identification numbers wherever possible.

Storage: Conversations are linked to your account and retained for as long as the account remains active so that you can return to previous queries. You may at any time delete individual conversations or the entire account from your profile.

Limitations: The legal assistant provides legal information, not individual legal advice, and is not a substitute for consultation with an advocate or legal professional.

2. Collection of Data

We collect the following types of information:

• Account information (email address, name)
• Conversation history and queries you submit
• Uploaded documents for analysis
• Usage data and statistics
• Payment information (handled by Stripe)

3. Use of Data

We use your information to:

• Provide and improve our AI service
• Save your conversation history
• Manage your account and subscriptions
• Send important notices regarding the service
• Analyse and improve the user experience

4. Data Protection

We employ industry-standard security measures to protect your personal data. Data is encrypted both in transit and at rest. We never share your personal data with third parties without your explicit consent, except where required by law or to deliver the service through the sub-processors specified below.

5. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("the right to be forgotten")
• Restrict the processing of your data
• Receive your data in a structured format
• Object to the processing of your data

6. Cookies

We use necessary cookies to ensure that the service functions properly, including session management and authentication. With your consent, we also use local storage for visitor statistics and referral sources, as well as Google Analytics and Google Ads for statistics and marketing measurement. You may decline this or withdraw your consent via Cookie Settings in the footer. Our proprietary visitor analytics stores randomised session numbers, categorised page paths, and referring websites, not IP addresses, queries, contract content, or full URLs. The registration source is linked to your new account and can be viewed by the administrator. The original source in the browser is retained for a maximum of 30 days.

7. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the service. When you delete your account, all your data will be permanently erased within 30 days.

8. Third-Party Services

We use the following third-party services:

• Cloud services – database, authentication, and serverless functions (hosted on EU infrastructure)
• Stripe – payment and subscription management
• Google Analytics – consent-based analytics with categorised pages. We do not transmit account details, legal queries, or document content. Google may process data outside the EU in accordance with its terms.
• AI gateway – proxy to AI models (Google Gemini, OpenAI GPT) used by the legal assistant; no data is used for model training
• Google Ads – measurement of advertising performance (e.g. that an account was created following an ad click). Measurement commences only after your consent in the cookie banner and can be altered or withdrawn at any time via "Cookie Settings" in the footer. Google's Privacy Terms

9. Amendments to the Policy

We may update this privacy policy from time to time. We will notify you of any material changes via email or by means of a notice on the website.

10. Contact

If you have any questions regarding this privacy policy or how we handle your personal data, please contact us at privacy@legaldigm.se.