Privacy Policy

B.Legal LLC ("B.Legal", "we", "us") operates the B.Legal software and b.legal website. This policy explains what information we collect, how we use it, and what rights you have. If you have questions, emailprivacy@b.legal.

1. Who controls your data

When you use the B.Legal webapp, native apps, or website, B.Legal LLC is the data controller for your account information (email, name, firm, billing). For client data you store in B.Legal — matter records, time entries, documents, communications — you are the data controller and B.Legal is the data processor. We handle that data only under your instructions.

2. Information we collect

We collect three categories of information:

• Account data. Name, email, firm name, billing address, and billing details for your subscription.
• Usage data. Pages viewed, features used, errors encountered, device type, browser type. Used to improve the product. Never sold.
• Client data you enter. Matters, time entries, clients, contacts, documents, invoices, trust ledger entries, AI prompts. We treat this as privileged and confidential.

3. How we use it

• To provide and operate the service you signed up for.
• To bill you and send receipts and renewal notices.
• To diagnose technical issues and prevent abuse.
• To send product updates (opt-in only).

We do not sell your data, share it with advertisers, or use it to train AI models. Your client data is never used for any purpose other than providing the service.

4. AI and your data

B.Legal ships with local AI (Ollama) as the default. When local AI is used, your prompts and responses never leave your Mac. If you opt into Anthropic Claude cloud AI, your prompts are sent to Anthropic under Anthropic's commercial API terms, which do not allow your prompts or outputs to be used for model training. AI drafting and research output is saved to the matter you run it for.

5. Data retention

Active account data is retained as long as your account is active. When you cancel, you have 30 days to export all your data. After 90 days, we permanently delete your data unless you request extended retention in writing.

6. Your rights

You have the right to:

• Access all personal data we hold about you.
• Correct any inaccurate data.
• Request deletion of your account and data.
• Export your data in CSV or JSON format (PDF for trust records).
• Object to processing that's not strictly necessary.
• Withdraw consent at any time.

To exercise any of these rights, emailprivacy@b.legal. We respond within 30 days.

7. Third-party processors

We use a small number of trusted sub-processors:

• Google Cloud — hosting, Firestore database, Firebase Auth.
• Cloudflare — CDN, DDoS protection, web hosting.
• Anthropic — cloud AI (opt-in only).
• Resend — transactional email.
• Sentry — error monitoring (PII-scrubbed technical diagnostics only).

8. Children

B.Legal is not directed to anyone under 18. We do not knowingly collect data from minors.

9. International transfers

B.Legal is based in the United States. If you access the service from outside the US, your data will be transferred to the US. We comply with GDPR and CCPA for covered users.

10. Changes to this policy

We'll notify you of material changes at least 30 days before they take effect. Minor corrections are posted without notice.

11. Contact

B.Legal LLC
Attn: Privacy
Brooklyn, New York
privacy@b.legal