Privacy Policy

1. Who operates LegalPilot

LegalPilot is an online general legal-information service. Legal entity details for the operator will be published here once confirmed.

2. Scope of this policy

This policy applies to the LegalPilot website and the anonymous chat experience that does not require an account.

3. Information you provide

You may submit text questions and optional local context (such as country, purpose, or status) stored in your browser.

Do not include passport numbers, SSNs, bank details, full case numbers, or other unnecessary identifiers.

4. Information collected automatically

For rate limiting, the server may use your IP address (or proxy header) in in-memory process storage. This is not a user account database.

Your browser may store chat history, UI language preference, and local context profile in local storage.

5. How information is used

Question text is sent to an AI provider to generate a response.

LegalPilot does not create an attorney-client relationship and does not keep a server-side personal case file for the basic chat experience.

Server-side logging of question and answer bodies is disabled by default (CHAT_LOGGING_ENABLED=false).

6. AI service providers

LegalPilot uses an AI model API (such as OpenAI) to generate answers and, when configured, to search public sources.

Training and retention settings on the provider side depend on the operator’s account and agreement and must be confirmed before making public claims.

7. Analytics and cookies

When enabled, LegalPilot may use self-hosted, privacy-focused traffic analytics (Umami) after you accept analytics in the cookie preference banner. Events may include page path, interface language, broad topic or country codes when already selected, feedback values (helpful / not helpful), and source hostnames. Legal question text and AI answer text are not sent to analytics.

Analytics retention and hosting remain under LegalPilot’s control on the configured analytics host. Browser storage may still be used for language and chat history independently of analytics.

8. Data sharing and subprocessors

Request data is shared with the AI provider as a processor to generate answers.

We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined under applicable California law (current configuration: sells/shares = false).

9. International data transfers

AI providers and hosting may process data outside your country. Specific locations depend on the selected vendors.

10. Data retention

Browser chat history: until you clear it in the UI or browser storage.

Security/rate-limit identifiers: held in memory for the rate-limit window; target security-log policy: 30 days if durable logs are introduced.

Server chat content logs: not retained when logging is disabled.

11. Security

We apply reasonable measures such as server-side API keys, request size limits, and rate limiting. No system can guarantee absolute security.

12. Privacy rights

Depending on applicable law, you may request access, correction, deletion, or objection. For browser-stored data, you can clear chat history in the product UI.

Privacy request contact details are listed in the Contact information section below.

13. Children’s privacy

LegalPilot is not directed to children under 16.

14. Changes to this policy

We may update this policy. The last updated date appears at the top of this page.

15. Contact information

Primary contact email: info@legalpilot.net