Privacy Notice

1. Scope and privacy principles

This Notice applies to the U.S.-focused MyLegalDocs AI website, secure order pages, document generation, transactional email, support, security and related operational records. It does not control a court, agency, payment provider, AI provider or external website acting under its own privacy terms.

The service is designed around purpose limitation, data minimization, short operational retention, access controls and truthful privacy promises. The platform aims to collect only information reasonably necessary to identify, prepare, secure, deliver, revise and support the requested document or to comply with law. The U.S. Federal Trade Commission emphasizes that privacy promises must be accurate and that businesses should collect only what they need, protect it and dispose of it when the need ends. FTC privacy and security guidance ↗

2. Categories of information collected

4. Sources of information

Information comes directly from the user, uploaded materials, interactions with the website, payment and email providers, security systems, and official public sources used to verify forms, courts, agencies, statutes or rules. The service does not purchase consumer profiles from data brokers.

A user who uploads information about another person must have lawful authority and should provide only what is reasonably necessary for the user's own matter.

5. Purposes of processing

• provide free identification and show the supported scope and exact price;
• extract and organize user-supplied facts and documents;
• identify jurisdiction-sensitive restrictions and block an unauthorized paid service;
• perform official-source research and current-form verification where configured;
• process payment, discounts, service credits, refunds and disputes;
• generate, review, package, deliver and revise files;
• recover interrupted work and communicate order status;
• secure the platform, prevent abuse and diagnose errors;
• answer support, privacy and complaint requests;
• maintain accounting, tax, consent and legal records;
• improve reliability using de-identified, aggregated or operational measurements where feasible.

Information is not used for an incompatible purpose without a new notice or consent where required.

6. AI, model providers and official-source research

User text, extracted content and necessary contextual information may be sent to configured AI providers to identify, research, draft, review, repair and revise the requested package. The service may also query public official websites or search tools to locate current courts, agencies, statutes, rules and forms. AI output can be inaccurate and must be independently verified.

The platform configures paid and free processing routes separately and seeks to avoid placing case content in optional analytics. Provider processing remains subject to provider contracts, security controls, retention settings and legal obligations. The service does not represent that uploaded material becomes attorney-client privileged merely because an AI provider processes it.

7. Payments

Stripe processes card and payment-method information. MyLegalDocs AI receives transaction and status metadata needed to match the payment to the order, confirm the amount, deliver the service, apply a service credit and administer a refund or dispute. Stripe acts under its own privacy notice for information it collects directly.

Do not send card credentials by email, upload or support message.

8. Cookies, local storage and optional analytics

Essential storage supports security, form continuity, consent records and order access. It cannot always be disabled without affecting the requested function. Optional analytics is separated from the legal-document content and loads only after the user accepts the analytics choice and only when the analytics tool is configured.

The user may choose “Necessary only” through the consent interface. The platform does not currently use cookies to sell personal information or deliver cross-context behavioral advertising. Browser “Do Not Track” signals do not have a uniform legal meaning. If the platform later engages in a use that requires recognition of Global Privacy Control or another universal opt-out mechanism, the required control will be implemented before that use begins.

9. Disclosures to service providers and other recipients

Information may be disclosed only as reasonably necessary to categories of recipients such as hosting and storage providers, AI and model providers, payment processors, transactional email providers, security and anti-abuse providers, optional analytics providers after consent, professional advisers, and authorities or litigants where disclosure is legally required.

These disclosures are operational services, not a public release of the user's case. Providers receive only the information reasonably necessary for their role and may be located in the United States, European Economic Area or other jurisdictions.

10. No sale, sharing for targeted advertising or data-broker use

MyLegalDocs AI does not sell personal information for money, does not knowingly exchange personal information for cross-context behavioral advertising, and does not provide case documents to data brokers. It does not use case content to advertise unrelated products to the user.

Accordingly, the platform does not presently display a “Do Not Sell or Share” link. If practices change so that a state-law opt-out becomes applicable, the notice and required opt-out mechanism will be provided before the new processing begins. A user may still send a privacy request at any time.

11. Retention and deletion

Deletion requests are honored where applicable, but information may be retained when necessary to complete a transaction, protect security, detect fraud, maintain tax or accounting records, establish or defend legal claims, preserve a service credit or comply with law. Backups and provider systems may require a reasonable deletion cycle.

12. Security

The platform uses measures designed for the sensitivity and size of the service, including HTTPS transport, restricted runtime paths, access tokens, payment verification, file-type and size controls, short operational retention, rate limiting, logging, provider isolation, noindex controls for private pages and recovery safeguards. No internet system can guarantee absolute security.

Users should protect secure links, use a trusted device, avoid public computers, download files promptly and remove unneeded local copies. The FTC recommends collecting only necessary data, limiting access, protecting data in transit and storage, and securely disposing of data when the business need ends. FTC Start with Security ↗

13. U.S. state privacy rights

Depending on the user's state and whether a particular statute applies to the operator or processing, the user may have rights to confirm processing, access data, obtain a portable copy, correct inaccuracies, delete data, opt out of sale, targeted advertising or qualifying profiling, limit certain sensitive-data uses, use an authorized agent, appeal a denial and receive equal service without unlawful discrimination.

Even where a comprehensive state statute does not apply, the operator may voluntarily respond to a reasonable verified request when doing so does not undermine another person's privacy, security, a paid order, a non-expiring credit or a legal obligation.

14. California notice at collection and 12-month disclosure

At or before collection, the platform collects the categories described in section 2 for the purposes described in section 5 and retains them as described in section 11. During the preceding 12 months, the platform's intended practice has been not to sell personal information and not to share personal information for cross-context behavioral advertising.

Categories disclosed for business purposes may include identifiers and contact information; commercial and transaction records; internet or technical activity; user-provided matter and document content; sensitive information included by the user; generated and derived operational information; and communications. Recipient categories are described in section 9. This statement does not concede that the CCPA applies where statutory thresholds or coverage requirements are not met.

15. How to submit, verify and appeal a privacy request

Email contact@mylegaldocsai.com with the subject “Privacy Request.” State the request type, the email used for the service, relevant order identifier if available and the state of residence. Do not attach identity documents or case files unless requested through a secure method.

The operator may verify control of the email or secure order link and may request limited additional information proportionate to the request. Verification protects users from unauthorized access or deletion. An authorized agent may be required to provide signed authority, and the user may be asked to confirm the request directly.

If a request is denied, the response will explain the reason where required. A user with a statutory appeal right may reply with “Privacy Appeal.” The operator will not unlawfully discriminate because a user exercises a privacy right.

16. Children

The paid service is intended for adults who can enter a contract and is not directed to children under 13. The platform does not knowingly collect personal information from a child under 13 as a direct user. If a parent or guardian believes that a child submitted information without appropriate authorization, contact the privacy email for review and deletion.

Legal documents about children may be processed when submitted by an authorized adult for the adult's own lawful matter. Users should minimize children's information and redact unnecessary identifiers.

17. International processing and EEA/UK users

The service operator is established in Poland and uses providers that may process information in the United States, European Economic Area and other jurisdictions. Privacy protections and government-access rules can differ by location.

Where European Economic Area or United Kingdom data-protection law applies, processing may rely on performance of the requested contract, steps requested before contract, compliance with legal obligations, legitimate interests in security and service operation, and consent for optional analytics or another use requiring consent. Applicable users may have access, correction, deletion, restriction, objection, portability, consent-withdrawal and supervisory-authority complaint rights. This section does not expand a law beyond its territorial scope.

18. Legal process, safety and security incidents

Information may be preserved or disclosed where reasonably believed necessary to comply with valid law, court process or regulatory obligations; protect users, the public, providers or the platform; investigate fraud or abuse; enforce a contract; or establish, exercise or defend legal claims. Requests are evaluated for scope and authority where feasible.

If a security incident triggers a notification duty, affected persons and authorities will be notified as required by the controlling federal or state law. Users should report suspected unauthorized access promptly without sending additional sensitive material by ordinary email.

19. Changes to this Notice

The effective date and version appear at the top. Material changes are applied prospectively unless law requires otherwise. Where required, notice or consent will be provided before a materially different use of previously collected information. The privacy terms recorded with an order may be retained as evidence of the notice in effect when the user accepted the service.

20. Contact

For access, correction, deletion, consent, appeal, security or privacy questions, email contact@mylegaldocsai.com. Include only the minimum information needed to locate the request. Contractual operator details and the postal notice address appear only in the Terms of Service.