Privacy Policy

This Privacy Policy explains what personal information Legal LifeSaver collects, how we use it, and the choices you have. We designed the service to hold the minimum amount of your data required to operate it, and to keep that data private to you.

Legal LifeSaver is currently operated by an individual pending the formation of Monocleshire LLC, a limited liability company. Upon formation of that entity, this Policy will be amended to reflect that entity’s legal name, jurisdiction of formation, and registered address.

1. Information We Collect

Account information

• Your email address — used to sign in and to send you account-related messages
• A hashed copy of your password — we never see or store your password in readable form; hashing is performed by our authentication provider
• The timestamp on which you accepted these Terms and this Privacy Policy

Content you upload

• The documents, images, and files you upload as evidence
• Case metadata you enter: case name, case number, court, opposing party, type, and notes
• Deadlines and hearings you record
• Exhibit labels, ordering, and descriptions you assign

Usage data

• Basic technical information required to operate the service: your IP address at the moment of authentication, browser type, and timestamps of activity
• We do not use marketing analytics, third-party pixels, session replay, advertising trackers, or fingerprinting

2. Where Your Data Is Stored

Your data is stored on infrastructure operated by Supabase, which in turn runs on cloud infrastructure operated by Amazon Web Services (AWS). Uploaded files live in a private storage bucket. Database rows are protected by row-level security policies that limit access to each row to its owning user.

We do not maintain a separate copy of your data outside the operational infrastructure required to run the service.

3. Who Can See Your Data

Only you. Your case data, evidence, deadlines, and generated binders are private to your account. Our infrastructure enforces this at the database and storage level via row-level security policies. Other users of the service cannot see your content.

Us — only as strictly required. Our operators may access your data only when strictly required to:

• Diagnose and fix a serious technical problem you have reported to us
• Investigate abuse of the service
• Enforce our Terms of Service
• Comply with a valid legal order (see Section 4)

We do not browse user data for any other reason. We do not train machine-learning models on your content.

Never for third-party marketing. We do not sell your data. We do not rent your data. We do not share your data for advertising, marketing, or profiling. We do not share it with data brokers.

Service providers. We use Supabase and its underlying infrastructure providers (Amazon Web Services) to host the service. These providers are contractually bound to protect your data and may only process it on our behalf and in accordance with our instructions.

4. Legal Disclosure

We will disclose data only when required by a valid subpoena, court order, or other binding legal process, and only to the extent required. Where lawful, we will notify you before disclosing your data so you have an opportunity to challenge the request. If we cannot notify you (for example, because of a court-ordered gag), we will notify you as soon as we are legally permitted to do so.

5. Cookies and Session Storage

We use only the cookies and session storage necessary to keep you signed in. These are set by the authentication provider and expire on logout or session timeout. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

6. Encryption

Data is encrypted in transit (via TLS) and at rest at the infrastructure level. Passwords are hashed by the authentication provider using industry-standard hashing algorithms; we never see the plaintext password.

7. Data Retention and Deletion

While your account is active, we keep your content until you delete it. You may delete individual pieces of content (evidence files, deadlines, cases) at any time from within the app.

When you delete content, we remove it from active storage immediately. Backup copies used for routine disaster recovery may be retained for up to thirty (30) days after deletion, after which they are permanently removed.

When you close your account, we delete your account record and all associated content on the same schedule. Account deletion is currently available on request via the contact email above; a self-service account-deletion feature will be added in a future release. Your record of Terms acceptance may be retained after account deletion for the limited period required to establish the existence and terms of the agreement in the event of a dispute.

8. Data Breach Notification

If we learn that your personal data has been subject to unauthorized access or disclosure, we will notify you by email at the address associated with your account without undue delay, and in any case within the time required by applicable law. The notification will describe, to the extent known at the time, what happened, what data was affected, what we are doing about it, and what steps you can take.

9. Children

The service is intended only for users 18 years of age or older. We do not knowingly collect information from anyone under 18. If we learn that we have collected information from someone under 18, we will delete that information promptly. If you believe we have collected information from someone under 18, please contact us at the address at the top of this Policy.

10. Users Outside the United States

The service is operated from the United States, and your data is stored on infrastructure located in the United States. By using the service, you consent to the transfer of your data to the United States and its processing there.

11. Your Rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data
• Object to certain processing
• Data portability

To exercise any of these rights, contact us at the email address at the top of this Policy. We will respond within a reasonable time and, in any case, within the time required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will notify you by email or by posting a notice in the service before the change takes effect. The “Effective” date at the top of this Policy indicates when it was last updated.

13. Contact

For privacy inquiries, questions about this Policy, or requests to exercise your rights, contact us at privacy@getlegallifesaver.com.

See also our Terms of Service.