Privacy Policy

LegalForge ("we," "us," or "our") operates the LegalForge website and AI-powered legal document generation service (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have in relation to your data. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect information that you provide directly, information generated through your use of the Service, and limited technical data collected automatically.

• Account information. When you create an account, we collect your email address and, optionally, a display name. Passwords are managed through our authentication provider and are never stored in plain text by us.
• Generated documents. The privacy policies, terms of service, and other legal documents you generate through the Service are stored in your account so that you can access, edit, and export them at any time.
• Questionnaire responses. When you use our document generator, we collect the answers you provide (such as your company name, website URL, and the third-party services you use) in order to produce a customized document.
• Usage analytics. We collect anonymized data about how you interact with the Service — including pages visited, features used, document types generated, and session duration — to help us understand usage patterns and improve the product.
• Payment information. If you subscribe to LegalForge Pro, payment is processed by Paddle. We do not receive or store your full card number or banking details. We do receive a record of the transaction, your subscription status, and billing-related metadata from Paddle.
• Technical data. We may collect your IP address, browser type, operating system, referring URL, and device information to diagnose errors and maintain the security of the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating and storing your legal documents.
• Authenticate your identity and manage your account.
• Process subscription payments and manage your billing relationship through Paddle.
• Send you transactional emails — such as account confirmation, password reset, and subscription receipts. We may also send product update notifications if you have opted in.
• Analyze aggregate usage patterns to improve the product, prioritize new features, and fix bugs.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal data to third parties. We do not use your generated document content for advertising purposes.

3. Third-Party Services We Use

The Service relies on the following third-party providers, each of which processes certain data on our behalf:

• Supabase. We use Supabase for user authentication and as our primary database. Your account credentials, generated documents, and account settings are stored on Supabase infrastructure. Supabase operates under its own privacy policy and security controls.
• Google Gemini. Document generation is powered by Google's Gemini AI models. Your questionnaire responses and website URL (if provided) are sent to the Gemini API to produce document content. Please review Google's privacy practices for information on how API input data is handled.
• Paddle. Subscription billing for LegalForge Pro is processed by Paddle. Paddle acts as the merchant of record and processes your payment details directly. We receive subscription status and billing metadata only. Paddle's privacy policy governs the handling of your payment information.

4. Cookies

We use cookies to make the Service work and, optionally, to understand how it is used.

• Essential cookies. These are strictly necessary for the Service to function. They include the authentication session cookie that keeps you logged in across page loads. Without these cookies, core features of the Service cannot be provided.
• Analytics cookies. If you consent, we may use analytics cookies to collect anonymized data about how you navigate the Service. This data helps us understand which features are most used and where improvements can be made. You can opt out at any time through your browser settings or any cookie preference controls we provide.

5. Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, delete, or receive a portable copy of your data. We honor these requests regardless of jurisdiction.

• Access. You can view and download the documents associated with your account at any time from your dashboard. To request a full export of your personal data, email us at [email protected].
• Correction. You can update your account information from your account settings. If you need to correct other data we hold, contact us at the email above.
• Deletion. You can delete your account from your account settings, which will schedule all associated data for removal. You may also request deletion by emailing [email protected].
• Export. Your generated documents can be exported as plain text, HTML, or PDF (Pro plan) directly from the Service. For a machine-readable export of all personal data we hold, contact us.

We will respond to all verifiable requests within 30 days.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data and generated documents will be permanently removed from our systems within 30 days, except where retention is required by applicable law (for example, financial records related to your subscription). Anonymized, aggregated analytics data that cannot identify you may be retained indefinitely.

7. Children's Privacy

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete it promptly. If you believe a child has provided us with their information, please contact us at [email protected].

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you by email or by placing a prominent notice within the Service. Your continued use of the Service after such notice constitutes your acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your data, please contact us at [email protected]. We aim to respond to all privacy-related inquiries within 5 business days.