Privacy Policy

1. Introduction

SpeedLegal, Inc. (“SpeedLegal,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the “Service”). Please read this policy carefully. By using the Service, you consent to the practices described herein.

2. Information We Collect

We collect information in the following categories:

Personal Information

• Name, email address, and phone number provided during registration
• Billing information including payment card details (processed via Stripe)
• Company name, job title, and department
• Communication preferences and support correspondence

Contract Data

• Contracts and legal documents you upload to the Service for analysis
• Metadata associated with uploaded documents (file name, size, type)
• Analysis results, annotations, and user-generated notes

Usage Data

• IP address, browser type, operating system, and device information
• Pages visited, features used, and time spent on the Service
• Referring URLs and search terms used to find our Service
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To process your contracts and deliver analysis results
• To process payments and manage your subscription
• To communicate with you about updates, support, and promotional offers
• To monitor and analyze usage patterns and trends
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our Service (e.g., cloud hosting, payment processing, analytics), subject to confidentiality obligations
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets
• With Your Consent: When you explicitly authorize us to share your information with a third party

5. Data Security

We implement industry-standard security measures to protect your data, including AES-256 encryption at rest, TLS 1.3 encryption in transit, SOC 2 Type II certified infrastructure, role-based access controls, and regular penetration testing. While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Contract data is retained for the duration of your subscription and for 30 days after account deletion to allow for recovery. After this period, contract data is permanently deleted from our systems and backups. You may request deletion of your data at any time by contacting us.

7. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver targeted content. Essential cookies are required for the Service to function and cannot be disabled. Analytics cookies help us understand how visitors interact with the Service. You can manage cookie preferences through your browser settings. Disabling certain cookies may limit functionality.

8. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (“right to be forgotten”)
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing under certain conditions
• Non-Discrimination: Exercise your rights without discriminatory treatment (CCPA)

To exercise any of these rights, please contact us at hello@speedlegal.io. We will respond within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data during international transfers. Our primary data processing infrastructure is located in the United States.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that a child under 18 has provided us with personal information, we will delete it promptly. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at hello@speedlegal.io or write to: SpeedLegal, Inc., San Francisco, CA 94105, United States. For GDPR-related inquiries, you may also contact our Data Protection Officer at the same address.