Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account, contact us, or use our platform, we collect information you voluntarily provide, including:

• Account Information: Name, email address, firm name, bar number, professional title, and billing information.
• Case Data: Case details, client information, documents, notes, billing entries, and other data you enter into the platform.
• Communications: Messages you send through the platform, support requests, and feedback.
• Payment Information: Credit card and billing details processed securely through our payment processor. We do not store full credit card numbers on our servers.

1.2 Information Collected Automatically

When you use our platform, we automatically collect:

• Usage Data: Pages visited, features used, time spent, and actions taken within the platform.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: See our Cookie Policy for details on how we use cookies and similar technologies.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Legience platform and its features.
• Process payments and manage your account.
• Send transactional communications (account verification, billing notices, security alerts).
• Provide customer support and respond to your requests.
• Analyze platform usage to improve features and user experience.
• Comply with legal obligations, including Massachusetts 201 CMR 17.00.

3. How We Protect Your Information

We implement robust security measures to protect your data:

• Encryption: AES-256 encryption at rest and TLS encryption in transit for all connections.
• 201 CMR 17.00: Our security practices are designed to meet the requirements of Massachusetts Standards for the Protection of Personal Information.
• US-Only Data Residency: All data stored in AWS US-East. No offshore processing.
• Role-Based Access: Configurable permissions ensure users only access data relevant to their role.
• Audit Logs: Comprehensive logs of access, modification, and export actions across the platform.

4. AI and Your Data

AI Data Protection: When you use LegiSearch™, LegiDraft™, or LegiLyze™:

• AI queries are processed through AWS Bedrock, which operates under our AWS Business Associate Agreement (BAA) with encryption at rest and in transit.
• Your data is never used to train, fine-tune, or improve any AI model.
• AI conversation history is stored in our database to provide continuity features. You can delete conversations at any time from within the platform.
• We do not share your data with AI providers for any purpose other than processing your requests.

5. Data Sharing

We do not sell your personal information. We share data only with:

• Service Providers: our payment processor (payments), our e-signature provider, our SMS provider, and AWS (hosting and AI processing via Bedrock) — each bound by applicable service agreements and data protection terms.
• Legal Requirements: When required by law, subpoena, or court order.
• Your Direction: When you explicitly authorize sharing (e.g., sending documents to clients via the Client Portal).

Mobile information is never shared for marketing. No mobile phone numbers or SMS/text-messaging consent obtained through the platform will be shared, sold, or rented to third parties or affiliates for their own marketing or promotional purposes. See the SMS / Text Messaging section below.

6. SMS / Text Messaging

Legience provides a text messaging (SMS/MMS) capability so that law firms using our platform can communicate with their own clients about their legal matters. When a firm messages you, the firm is the sender and Legience transmits the message on the firm's behalf through our SMS provider. This section describes how the program works and your choices.

• Consent (opt-in): You receive text messages only after providing express consent — for example, by giving your mobile number and agreeing to be contacted by SMS during your firm's intake or through a consent checkbox. Consent to receive text messages is not a condition of purchasing any product or service.
• Message types: Messages may include case updates, appointment and court-date reminders, document requests, and other communications relating to your legal matter.
• Message frequency: Message frequency varies based on your matter and your interactions with your firm.
• Cost: Message and data rates may apply, depending on your mobile carrier and plan.
• Opt-out: You can cancel at any time by replying STOP to any message. After you reply STOP we will send a one-time confirmation, and you will receive no further messages unless you opt in again.
• Help: Reply HELP for assistance, or contact your firm directly.
• No sharing of mobile data: Mobile phone numbers and SMS consent are used solely to deliver the messages described above. We do not share, sell, or rent mobile opt-in information or SMS consent to any third parties or affiliates for their marketing or promotional purposes. Message content is processed by our SMS provider only to transmit messages on your firm's behalf.
• Carrier disclaimer: Mobile carriers are not liable for delayed or undelivered messages.

7. Data Retention and Deletion

We retain your data for as long as your account is active. Upon account termination:

• Your data is preserved for 90 days to allow reactivation or data export.
• After 90 days, all data is permanently and irreversibly deleted.
• You may request immediate deletion at any time by contacting privacy@legience.com.

8. Your Rights

You have the right to:

• Access, correct, or delete your personal information.
• Export your data in standard formats (CSV, PDF).
• Opt out of non-essential communications.
• Request information about how your data is processed.

9. Massachusetts Residents

If you are a Massachusetts resident, you have additional rights under applicable state laws Chapter 93H and 201 CMR 17.00, including the right to know what personal information we hold about you and the right to request deletion.

10. Children's Privacy

Legience is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-platform notification at least 30 days before the changes take effect.

12. Contact Us

For privacy-related questions or requests:

• Email: privacy@legience.com
• Mail: Bostoneo Solutions LLC, Malden, MA 02148