Privacy Policy
Our Privacy Commitment
We never sell your data. Period. Your privacy is paramount to us, and we take extraordinary measures to protect your confidential legal information. This policy explains how we collect, use, and safeguard your data.
Last Updated: February 28, 2026
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, password, and billing information
- Legal Documents: Case files, pleadings, exhibits, and other legal documents you upload
- Case Data: Case names, parties, deadlines, notes, and related metadata
- Communication Data: Messages sent through our platform and support communications
1.2 Information We Collect Automatically
- Usage Data: Features used, time spent, and interaction patterns
- Technical Data: IP address, browser type, device information, and access logs
- Performance Data: System performance metrics and error logs
- Marketing Attribution Data (Public Site Only): Referrer, campaign parameters,
ad-click identifiers, and aggregate page interaction metrics on
proper.legalbefore authentication
2. How We Use Your Information
2.1 Primary Uses
- Provide and maintain our legal case management services
- Process and store your legal documents securely
- Generate PDF documents, certificates, and legal forms
- Provide AI-powered legal assistance and document analysis
- Send important account and service notifications
2.2 Secondary Uses
- Improve our services and develop new features
- Provide customer support and technical assistance
- Ensure security and prevent fraud or abuse
- Measure and optimize marketing campaign performance on public pages (e.g., search and ad campaign attribution)
- Comply with legal obligations and court orders
3. Information Sharing and Disclosure
We Never Sell Your Data: We do not and will never sell, rent, trade, share, or distribute your personal information or legal documents to third parties for marketing, commercial, or non-commercial purposes.
3.1 Limited Sharing
We may share your information only in these specific circumstances:
- Service Providers: Trusted third-party payment processors who help us securely process payments under strict confidentiality agreements
- Legal Requirements: When required by law, court order, or government request
- Business Transfer: In the event of a merger, acquisition, or sale of assets (with continued privacy protections)
- Safety and Security: To protect the rights, property, or safety of our users or the public
4. Data Security
4.1 Security Measures
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Strict access controls and multi-factor authentication
- Infrastructure: Secure cloud and on-premises infrastructure with regular security audits, including bare metal and dedicated hosting options
- Monitoring: 24/7 security monitoring and incident response
- Backups: Regular encrypted backups with secure off-site storage
4.2 Attorney-Client Privilege
We understand the sensitive nature of legal documents and communications. While we are not attorneys and cannot claim attorney-client privilege, we treat all user data with the highest level of confidentiality consistent with such privilege.
5. AI and Machine Learning
5.1 AI Processing
- Our AI features use your documents to provide legal assistance and analysis
- AI processing occurs in secure, encrypted environments
- We use third-party AI providers (like OpenAI) under strict data processing agreements
- Your documents are not used to train general AI models
- Future features will include proprietary, non-third-party LLMs and models designed specifically for enhanced security and compliance requirements
6. Data Retention
- Active Accounts: We retain your data as long as your account is active
- Closed Accounts: We retain minimal account data (username, email, account preferences) to preserve your identity and enable easy account reactivation. Personal documents and case data are securely archived and can be restored upon account reactivation. You may request complete data deletion at any time.
- Legal Requirements: Some data may be retained longer if required by law
- Backups: Data in encrypted backups is purged according to our backup rotation schedule
7. Your Rights and Controls
7.1 Access and Control
- Access: View and download all your personal data
- Correction: Update or correct your information
- Deletion: Request deletion of your account and data
- Portability: Export your data in common formats
- Restriction: Limit how we process your data
7.2 California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, sold, or disclosed, and the right to delete personal information.
7.3 GDPR Rights
If you are in the European Union, you have rights under the General Data Protection Regulation, including data portability, right to be forgotten, and the right to object to processing.
8. Cookies and Tracking - Domain-Separated by Design
Privacy-First Boundary: We separate tracking by domain and context:
- Public marketing site (
proper.legal): we allow limited analytics and ad-attribution tracking so we can measure campaign performance and improve website experience. - Authenticated legal workspace (
lcm.proper.legal): we do not use third-party advertising trackers or third-party behavioral analytics tools. Post-login insights are handled by our own proprietary evaluation mechanisms.
đĄ Our philosophy: Cookies belong in a cookie jar, not in your browser. đĒ
8.1 What We Use on the Public Site (proper.legal)
- Analytics and Measurement: Limited tools (including Google Analytics and similar search/ad measurement mechanisms) for aggregate traffic, performance, and conversion attribution.
- Advertising Performance Attribution: Campaign measurement data (for example, ad-click and referral attribution) to evaluate ad spend effectiveness.
- Essential Security and Session Cookies: CSRF protection, login routing, and cross-domain authentication handoff.
8.2 What We Use in the Authenticated Workspace (lcm.proper.legal)
- Essential Cookies Only: Session, authentication, and security cookies required to operate legal workflows safely.
- Proprietary Product Insights: Internal, privacy-preserving operational metrics and evaluation mechanisms used to improve reliability, security, and user experience.
8.3 What We Do NOT Use in the Authenticated Workspace
- â No third-party advertising trackers
- â No third-party behavioral analytics tools that profile legal work activity
- â No social media tracking pixels in authenticated legal pages
- â No sale or rental of legal document data or client data
8.4 Your Controls
- You can control cookies through browser settings and consent tools (where presented).
- Blocking some cookies may affect login and session continuity features.
- We will continue to minimize non-essential tracking and keep legal-workspace boundaries strict.
Result: Transparent marketing measurement on public pages, with strict privacy boundaries and minimal internal-only tracking in legal workspaces.
9. International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by relevant data protection authorities
- Other legally recognized transfer mechanisms
10. Children's Privacy
Our services are not intended for direct use by children under 18. However, we recognize that family law cases often necessarily involve children's information as part of legal documentation.
10.1 Family Law Considerations
Your Legal Files Are Protected: We will not delete your legal documents that contain children's information when it's part of legitimate family law proceedings, custody cases, or other legal matters.
Children's information in legal documents receives enhanced protection and is subject to additional security measures.
10.2 Enhanced Protection for Children's Data
When children's information appears in legal documents, we apply enhanced protections:
- Restricted Processing: Children's data is excluded from any AI analysis, training, or processing beyond basic document storage
- Limited Access: Only the account holder and authorized legal representatives can access documents containing children's information
- No Marketing Use: Children's information is never used for any marketing, analytics, or service improvement purposes
- Enhanced Security: Additional encryption and access controls for documents containing minors' information
- Automatic Redaction: Option to automatically redact children's identifying information in shared documents
10.3 Direct Collection from Children
We do not knowingly collect personal information directly from children under 18. If we learn we have collected such information directly, we will delete it immediately.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by:
- Email notification to your registered email address
- Prominent notice on our website
- In-app notification when you next log in
12. Contact Information
If you have questions about this privacy policy or our privacy practices, please contact us:
Privacy Contact
Email: Contact us for email address
Data Protection Officer: Contact us for email address
Mail: PROPER.legal Privacy
Team
[Address to be provided]
This privacy policy constitutes a binding agreement between you and Proper Legal. By using our services, you acknowledge that you have read, understood, and agree to be bound by this policy.