1. Who is responsible for your data
LegalPoint assistants are normally deployed on behalf of a professional firm — for example a law or accountancy practice. In that arrangement:
- The firm is the data controller. It decides why and how your information is used, and it is the organisation you are really speaking to.
- LegalPoint is the data processor. We operate the assistant and handle the data only on the firm's documented instructions, under a written data-processing agreement that meets Article 28 of the UK GDPR.
The firm's own privacy notice governs what they do with your information. If you reached an assistant through a specific firm, please also read that firm's privacy notice.
2. What we collect
When you use an assistant, we process the information you choose to provide during the conversation, which may include:
- Your name and contact details, if you give them;
- Information about a business — ownership, structure, finances, employees and plans — that you share to get a useful answer;
- A transcript of the conversation (text, and where you use voice, the audio and its transcription);
- Basic technical data needed to run the service securely (for example, time of session and general device information).
Please share only what is necessary, and avoid including other people's personal data unless it is relevant to your enquiry.
3. Why we process it
- To hold the intake conversation and produce a summary for the firm's advisers to review;
- To operate, secure and improve the reliability of the service;
- To meet legal and regulatory obligations.
The lawful basis depends on the deploying firm, but is typically the firm's legitimate interests in handling enquiries efficiently, and/or steps taken at your request before entering into a service. You are asked to accept the conversation terms before you begin.
4. Your content is not used to train AI models
The content of your conversation is used to run the assistant and produce the summary for the firm. It is not used to train the underlying AI models, and it is not sold or shared for advertising.
5. Where your data is processed
Conversations are processed and stored on Amazon Web Services infrastructure located in the European Union, with the primary region being eu-central-1 (Frankfurt). Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256), with role-based access controls. Where any processing involves a sub-processor outside the UK or EU, it is covered by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.
6. How long we keep it
Conversation data is retained for the period set by the deploying firm, after which it is deleted or anonymised. The firm, as controller, sets the retention rules for its own matters.
7. Security
We use encryption, access controls and monitoring appropriate to the sensitivity of the data, including TLS 1.2 or higher in transit, AES-256 encryption at rest, and role-based access. No internet service can be guaranteed perfectly secure, but we take this responsibility seriously.
8. Automated decisions
The assistant gathers facts and flags issues for a human adviser. It does not make decisions that have legal or similarly significant effects about you without human involvement (Article 22 UK GDPR). A person at the firm reviews the summary and decides what happens next.
9. Your rights
Under UK GDPR you have rights to access, correct, delete or restrict the use of your personal data, to object to certain processing, and to data portability. Because the firm is the controller, the best route is usually to contact that firm. You may also contact us and we will assist the controller. You can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
10. Contact
Questions about this notice can be sent to privacy@legalpoint.ai. Our registered details are: Legalpoint Limited, a company registered in England and Wales (company number 05430882), registered office 14 Neville Road, Kingston, KT1 3QX.
11. Changes
We may update this notice from time to time. The date at the top shows when it was last revised.