Privacy Policy

1. Introduction

My Virtual Lawyer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered legal information service.

By using our Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Profile Information: Optional information you add to your profile
• Communication Data: Questions and messages you submit through the Service
• Payment Information: Billing details processed securely through Stripe
• Contact Information: Information you provide when contacting support

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, referring URLs
• Cookies: Small data files stored on your device (see our Cookie Policy)

2.3 Information from Third Parties

• OAuth Providers: If you sign in with Google, we receive your name and email
• Payment Processors: Stripe provides transaction confirmations
• Analytics Services: Aggregated usage statistics

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining the Service
• Processing your requests and transactions
• Personalizing your experience
• Improving our AI models and Service quality
• Communicating with you about updates and support
• Ensuring security and preventing fraud
• Complying with legal obligations
• Analyzing usage patterns and trends

4. How We Share Your Information

We may share your information with:

4.1 Service Providers

• Supabase: Database and authentication services
• Stripe: Payment processing
• Google Cloud: AI processing (Gemini)
• Vercel: Hosting services
• Crisp: Customer support chat
• PostHog: Analytics

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security audits and updates
• Access controls and employee training
• Secure data centers with physical security

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our Service

Conversation data is retained for the duration of your account. You can delete your conversation history at any time through your account settings.

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at privacy@myvirtualawyer.com.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect
• Know whether your data is sold or disclosed
• Say no to the sale of personal information
• Access your personal information
• Request deletion of your information
• Not be discriminated against for exercising your rights

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with service providers
• Compliance with applicable data protection laws

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@myvirtualawyer.com
• Website: Contact Form

For GDPR-related inquiries, you may also contact our Data Protection Officer at dpo@myvirtualawyer.com.