LEGAL
Privacy Policy
Legalcode stores very little about you. Searches are processed in memory and never stored. This policy lists what we keep, why, for how long, and your rights.
Version 2026.09.30 · Effective 24 April 2026 · Last updated 30 September 2026
01 / Who we are
Legalcode is operated by Fordæmi ehf., kt. 460125-1890, Iceland (“we”). We are the controller of the personal data in this policy. When an organisation gives its staff access under our data processing agreement, the organisation is the controller and we are its processor for those users.
Contact: privacy@legalcode.md.
02 / What we store
The table covers our account and service records. Legalcode's own databases are hosted by Hetzner in Germany. Analytics and network processing by other providers are explained below.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account: email; name and profile picture if your sign-in provider shares them; organisation, role and plan | Provide your account and the service | Contract | Until the account is closed; deleted within 30 days |
| Web sign-in sessions with browser type, and AI-app access tokens stored hashed or encrypted; no IP address | Keep you signed in and connect your AI app | Contract | Sessions expire 12 months after last use and are removed within 7 days; revoked tokens are deleted at once; sign-in codes last 5 minutes |
| Usage-limit counters per minute, day and month | Enforce plan limits | Contract | Expire automatically at the end of each period |
| Account-linked usage analytics: account ID, email and available name and organisation details, with service-use events | Measure service use and improve the product | Legitimate interests | Maximum 90 days from each event; only anonymous aggregate statistics may be kept longer |
| Audit log of account and administrative actions; no IP address | Security and accountability | Legitimate interests | 90 days |
| Plan, subscription and invoice details; card details stay with Polar | Billing and bookkeeping | Contract and legal obligation | Invoices 7 years (Bookkeeping Act no. 145/1994) |
| Emails you send to support, privacy or security | Answer your request | Legitimate interests | 90 days after the matter is closed |
Legal bases are GDPR Art. 6(1)(b) for the contract, 6(1)(c) for legal obligations and 6(1)(f) for legitimate interests. Backups are kept for seven days, so deleted data leaves them within a week.
03 / What we never store
- Search text, filters and results. Searches are processed in memory and discarded.
- Your full conversations, documents and AI responses stay in your AI app. Legalcode receives only the tool inputs the app sends, such as search text, filters, source identifiers and any included excerpts. We process these inputs to answer the request and do not keep them as a search history.
04 / Analytics and cookies
We use PostHog, hosted in the EU, for product analytics. Website analytics is cookieless: nothing is stored in your browser. PostHog counts visits with a hash of the IP address and browser type that uses a salt changing every day, so anonymous visits cannot be linked across days, and the IP address is not stored for those visits. For account and sign-in analytics, we send account IDs, email addresses and, where available, names and organisation details with sign-in, API and MCP events so we can measure account activity. Usage-limit hits are counted in total. The legal basis is legitimate interests (GDPR Art. 6(1)(f)), and you can object at privacy@legalcode.md.
Our retention rule limits account-linked usage analytics to 90 days from each event. Longer-term statistics must be anonymous and must not identify a person or account. You can request deletion of your account-linked analytics at privacy@legalcode.md.
The only cookies are those needed for signing in:
| Cookie | Purpose | Duration |
|---|---|---|
| better-auth.session_token | Keeps you signed in | Up to 12 months after last use |
| better-auth.csrf_token | Protects sign-in forms | Session |
| better-auth.state | Protects sign-in with Google or Microsoft | 10 minutes |
05 / Sharing and transfers
We share personal data only with the providers listed on our trust page, under processing agreements, and we never sell it or use it for advertising. Cloudflare’s edge network is global, PostHog’s agreement allows access from the United States, and Polar is based in the United States. These transfers rely on the EU-US Data Privacy Framework or standard contractual clauses. Patent searches also send the patent query or publication identifier to the European Patent Office to retrieve results, without attaching your Legalcode account details or full conversation.
Cloudflare processes traffic and security metadata to deliver the service and protect against abuse. Its logs can include IP addresses, timestamps, hostnames, URL paths and query strings, browser headers, country and network information, and security actions. On our current Free plan, security-event history is available for up to 24 hours and sampled traffic analytics for up to seven days. These are dashboard history periods; other provider retention follows Cloudflare's applicable data-processing terms.
06 / Your rights
You can ask for access to your data, correction, deletion, restriction or a copy, and you can object to processing based on legitimate interests. Email privacy@legalcode.md; we reply within one month. If your organisation provides your access, send the request to your organisation and we will help it respond.
You can complain to Persónuvernd, the Icelandic Data Protection Authority (personuvernd.is).
07 / People named in public legal sources
Legalcode indexes public legal sources, such as court judgments, legislation and official gazettes, from their official publishers. These can name parties, counsel, judges or inventors. We process them for legal research on the basis of legitimate interests (GDPR Art. 6(1)(f)) and follow any anonymisation made by the court or publisher. If you are named in an indexed source, you can object or use your other rights at privacy@legalcode.md.
08 / Security
Access is protected with TLS 1.2 or higher, hashed or encrypted tokens and restricted administrative access. Details are on our security page.
09 / Other information
- Legalcode is a professional service and is not directed at children under 16.
- We make no automated decisions with legal or similarly significant effects about you.
- We post changes here and email account holders at least 30 days before a material change takes effect.