Privacy Policy

Effective Date: 1 January 2026

Introduction

Welcome to AI Paralegal ("we", "our", or "us"), operated by AI Paralegal Limited, a company incorporated in Hong Kong. We are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (aiparalegal.ai) and use our AI-powered legal technology services. By using our services, you consent to the practices described in this policy.

Information We Collect

We collect the following categories of information:

  • Personal Information: Name, email address, phone number, job title, and firm or company name provided during account registration or waitlist sign-up.
  • Firm & Case Data: Legal documents, templates, case files, and related data uploaded to the platform for AI-assisted processing.
  • Usage Data: IP address, browser type, device information, pages visited, and interactions with our platform, collected automatically via cookies and analytics tools.
  • Payment Data: Billing information and transaction records processed through our secure third-party payment provider. We do not store full credit card numbers on our servers.

How We Use Your Data

We use the information we collect for the following purposes:

  • To provide, operate, and maintain our AI-powered legal services.
  • To verify user identity and onboard law firms and legal professionals.
  • To process and generate legal documents using our AI engine.
  • To improve platform performance, features, and user experience.
  • To communicate with you about your account, updates, and promotional offers (with your consent).
  • To comply with legal obligations and enforce our Terms and Conditions.

Data Sharing & Disclosure

We may share your information in the following circumstances:

  • Service Providers: We engage trusted third-party providers for hosting (cloud infrastructure), analytics, email delivery, and payment processing. These providers are contractually bound to protect your data and use it only for the services they provide to us.
  • Legal Requirements: We may disclose your information if required by law, regulation, court order, or governmental authority in Hong Kong or any applicable jurisdiction.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the succeeding entity, subject to the same privacy protections.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Data Security

We implement industry-standard security measures to protect your personal data:

  • AES-256 encryption for data at rest and TLS 1.3 for data in transit.
  • Isolated data environments ensuring your firm's data is segregated from other users.
  • Regular security audits, penetration testing, and vulnerability assessments.
  • Role-based access controls and multi-factor authentication for all administrative access.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).

Uploaded legal documents and generated outputs are retained only for the duration of your active subscription. You may request deletion of specific files at any time through your account settings.

Cookies & Tracking

We use cookies and similar technologies to enhance your experience:

  • Essential Cookies: Required for core platform functionality, such as authentication and session management.
  • Analytics Cookies: Help us understand how users interact with our platform so we can improve our services. These may include Google Analytics.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

Your Rights Under PDPO

Under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"), you have the right to:

  • Access the personal data we hold about you by submitting a data access request.
  • Request correction of any inaccurate or incomplete personal data.
  • Request deletion of your personal data, subject to legal retention requirements.
  • Withdraw consent for marketing communications at any time.

To exercise any of these rights, please contact us at privacy@aiparalegal.ai. We will respond to your request within 40 days as required by the PDPO.

Children's Privacy

Our services are designed for legal professionals and businesses. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of our services after any changes constitutes your acceptance of the revised policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

AI Paralegal Limited
Suites 714-15, 7/F, CMB Wing Lung Bank Centre, 630-636 Nathan Road, Mong Kok, Hong Kong
Email: privacy@aiparalegal.ai
Phone: +852 2370 0001

AI Paralegal – AI Legal Assistant for Hong Kong Law Firms