Privacy Policy

Personal Data We Collect

When you use Lawyer Services, we process the following personal data:

• Account information: your email address, full name, account type (citizen/lawyer), and an irreversibly hashed version of your password.
• Chat and research history: the questions you type into Chat and Deep Research, and the AI-generated answers to them.
• Documents you generate: the title, content, and form inputs of petitions and contracts you create with our drafting tools.
• Documents you upload: the full extracted text of files you upload to Contract Analysis, Contract Comparison, and Petition Strength Analysis.
• Case file information: client names, court, opposing party, hearing notes, and party contact details you enter in Case Tracking.
• Bar verification information: your bar association name, registration number, years of seniority, and the ID/bar card image you upload for verification — accessible only to you and authorized reviewers.
• Calculator inputs: dates, amounts, and salary figures you enter for court fee, enforcement, sentence, statute-of-limitations, and severance/notice calculations.
• Billing information: your subscription identifiers managed through Stripe or iyzico. Your card details are never stored on our servers.

Why We Process Your Data

• To provide the service: running chat, research, document drafting, and analysis tools.
• To authenticate and secure your account.
• To verify your bar membership and apply the corresponding lawyer status/discount.
• To process your subscription and payments.
• To send email verification, password resets, and hearing/deadline reminders.
• To improve service quality and the accuracy of AI-generated answers.

Third Parties We Share Data With

To generate answers and provide the service, we share some of your data with the following providers. We do not use any third-party advertising or analytics tracking.

• Groq (AI infrastructure): the questions you type into Chat, Deep Research, and document analysis tools, along with the text of documents you upload, are sent to Groq's API to generate a response.
• Ollama (local AI, fallback only): when Groq is unavailable, some requests are processed by a local model running on our own server — in that case, data never leaves our infrastructure.
• Email providers (SendGrid/Resend/SMTP): your email address is shared with these providers to send account verification, password resets, hearing reminders, and bar verification outcome notices.
• Stripe: for international payments, your email address is passed to Stripe; your card details never reach our systems.
• iyzico: for payments in Turkey, in addition to your email address, iyzico's own regulatory requirements mean your Turkish national ID number and address are shared with iyzico.
• Google: if you use "Continue with Google", we receive your email address and name from Google.

Our Legal Basis (KVKK/GDPR)

Depending on your location, your personal data is processed under Turkey's Law on the Protection of Personal Data No. 6698 (KVKK), the EU General Data Protection Regulation (GDPR), or the UK GDPR:

• Performance of a contract: to create your account and provide the service.
• Your explicit consent: for Google sign-in and other optional features.
• Legitimate interest: to improve the service and maintain security.
• Legal obligation: to meet payment providers' regulatory requirements (e.g. iyzico's identity information requirement).

Cookies and Session Data

On the web app, we place only a strictly necessary, functional session cookie (and its accompanying CSRF protection cookie) to keep you signed in. We use no third-party advertising or analytics cookies.

On the mobile app, your session is kept in your device's secure storage (Keychain/Keystore) instead of a cookie.

How Long We Keep Your Data

Your data is retained for as long as your account is active. When you delete your account from Account > Delete My Account, your chat history, generated documents, analyses, case files, calculator records, and subscription information are permanently deleted.

The record of the reviewer who processed your bar verification application may be retained separately for audit purposes, stored without being linked to your identity once your account is deleted.

Your Rights

Under KVKK Art. 11 and/or the GDPR, you have the right to:

• Learn whether your data is being processed.
• Request information about the data processed about you.
• Request correction of your data.
• Request deletion of your data — you can do this instantly yourself from the Account page.
• Object to processing.
• Request portability of your data.

You can send these requests to us using the contact details below.

Data Security

• All data in transit is encrypted with HTTPS.
• Your password is stored as an irreversible hash — no one, including us, can see your actual password.
• Your bar verification documents are only accessible through an authenticated, ownership-checked endpoint.
• Your card details never reach our servers — they are processed directly by Stripe/iyzico.

Children's Privacy

Lawyer Services is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18.

International Data Transfers

Some of our service providers, such as Groq, may operate outside Turkey. In that case, your data may be transferred abroad with the appropriate safeguards required under KVKK Art. 9 and the relevant GDPR provisions.

Changes to This Policy

We may update this policy from time to time. We'll notify you of material changes by email or an in-app notice. The current version always lives on this page.