Privacy Policy

Data Responsibilities

• Data Controller: We act as a Data Controller when we determine the purposes and means of processing personal data, such as when collecting contact, registration, and payment details for account creation and business transactions.
• Data Processor: We serve as a Data Processor when we process data strictly on behalf of our users within our platform's services, such as when facilitating document signing and contract management. In these scenarios, our processing is governed by our Data Processing Agreement (DPA).

For exercising your rights under this policy, addressing any concerns or questions, or lodging complaints related to it or our actions, you can contact our data privacy team at any time via email at info@dolegal.ai, or write to our corporate headquarters at: DoLegal AI, 23 Hanrapetutyan str, Yerevan, Armenia, 0001.

What We Collect, Why, and Our Legal Basis

Under applicable data protection laws, we must have a valid legal basis to handle your personal data as a Controller. We collect and process data according to the following framework:

• Contact Information: your name, surname, address, phone number, email address, and account-related information. Why: to create and manage your Account, provide the Services, process requests and actions you submit or initiate, facilitate contractual communications, and provide necessary notices relating to the Services. Legal Basis: Performance of a Contract.
• Payment Details: your financial information, such as bank account and credit/debit card details, payment and transaction data, including the amount paid, currency, and transaction date. Why: essential for secure payment processing and managing renewals safely, including processing payments and transactions, managing subscriptions, confirming payments, processing refunds, and maintaining billing and financial records. Legal Basis: Performance of a Contract.
• Usage Data: your IP address, login details, browser type, device-related information, and geolocation. Why: to ensure the technical operation and stability of the Platform, detect and resolve technical issues, maintain information security, prevent unauthorised access and misuse, detect security incidents, and ensure the proper provision of the Services. Legal Basis: Our legitimate interests to optimize and secure our SaaS platform.
• Cookies: used to remember your preferences and enhance your experience by monitoring site usage and performance. You may manage your cookie preferences through the relevant settings made available on the Platform. Legal Basis: Consent, or legitimate interests for strictly necessary session cookies.
• Third-Party Analytics and Tracking: We use third-party analytics tools (such as Google Analytics) to help us measure traffic and usage trends for our service. These tools collect information sent by your device or our platform, which assists us in improving our platform. You can opt out of this tracking through your browser settings or standard opt-out extensions. The scope of the use of such services and the volume of data transferred is limited to what is necessary for the respective analytical purposes.
• Document Data: your document templates, integrated data, participant details, comments, and signatures. Why: to enhance our services, assist in document signing (including for occasional visitors), and improve our AI to serve your needs better, based on either your consent or our legitimate interests.

International Data Transfers

By accessing our platform, you acknowledge that your personal account data may be transferred to, stored, and processed outside your home country or region, including to locations where our trusted cloud infrastructure subprocessors maintain global data centers.

To ensure your information receives an equivalent level of protection to that guaranteed under international regulations, we implement strict safeguarding mechanisms. For corporate and business entities, this includes utilizing standard contractual modules and matching data transfer addendums integrated directly into our Data Processing Agreement (DPA) to legally secure cross-border data flows. Where Personal Data is transferred to, or access to Personal Data is provided in, a country where the level of protection of Personal Data is deemed inadequate under applicable law, such transfer or access shall take place only where an appropriate legal basis and the necessary safeguards are in place, including, where applicable, obtaining the prior authorisation of the competent authority.

Your Privacy Choices & Rights

Regardless of your location, we believe you should have control over your personal data. We honor the following fundamental data rights for all our platform users:

• Access Your Data: You have the right to request a clear summary or a digital copy of the personal information we hold about you.
• Make Corrections: If you notice that any personal data or account information is inaccurate, outdated, or incomplete, you can request that we update it immediately.
• Erase Your Data (The Right to be Forgotten): You can request that we permanently delete your personal information from our active systems, subject to our necessary statutory and tax retention rules.
• Restrict Use: You have the right to ask us to limit or temporarily freeze how we use your personal profile under specific conditions.
• Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format (such as .json or .csv) so you can transfer it seamlessly.
• Object to Profiling: You can object to us using your data for profiling or making automated decisions about you.
• Opt Out from Marketing: You can choose to opt out of marketing communications at any time by clicking the "Unsubscribe" link in any update.
• Cookies and Consent: You can choose not to provide consent or turn off cookies in your browser settings.
• Lodge a Complaint: If you believe we have handled your personal data unfairly or unlawfully, you have the right to file an official complaint with your local personal data protection authority or regulatory body.
• Do Not Track Disclosures (U.S. Users): Our Platform does not currently respond to or alter its behavior in response to browser-based "Do Not Track" (DNT) signals, as there is currently no universally accepted technological standard governing the interpretation or implementation of such signals.

Your Responsibilities

To maintain ecosystem security, you agree to:

• Review the Privacy Policy: Carefully read and understand this Privacy Policy.
• Provide Accurate Information: Ensure any personal data you provide is accurate, complete, and current. Update your information as necessary.
• Consent for Third-Party Information: Ensure you have obtained consent to share others' personal data with us.
• Inform Us of Changes: Notify us promptly about any changes to your personal data or consent preferences.
• Security Practices: Protect your account by using strong passwords and securing your devices.
• Report Misuse: Inform us immediately if you suspect any unauthorized activity or misuse of your personal data.

Data Retention

We retain Personal Data for as long as necessary to provide the Services to you properly and to fulfil the purposes for which such data is processed.

Upon closure of your Account, Personal Data that enables your identification will be deleted within one month. At the same time, we may retain duly anonymised data for the purposes of developing and improving the Platform, the Services, and our technical systems, provided that appropriate technical and organisational measures have been implemented to ensure the security of such data and to prevent the identification of any individual through such data.

Security Measures

We prioritize your data's security and employ comprehensive technical and organizational protection measures, including encryption during transmission and storage. We regularly update our security practices and systems to prevent unauthorized access, following strict global compliance standards.

Information Sharing

We share personal information with outside parties only in the following contexts:

• Legal Authorities: To fulfill statutory reporting requirements or comply with mandatory legal obligations.
• Trusted Partners: Vendors and cloud infrastructure subprocessors who assist directly in service delivery. These partners operate under strict matching confidentiality obligations and employ robust security measures.

Policy Updates

We are committed to keeping this Policy up to date to reflect changes to our Services and developments in global data protection laws and regulations. You will be notified of any changes to this Policy through a clear and prominent notice on our website, by email, or through your account dashboard.

Following the publication of, or notification of, any changes, your continued use of the Platform will constitute acknowledgment that you have become aware of the updated Privacy Policy. If you do not agree with the updated Policy or any of its applicable provisions, you may discontinue using the Services and, where applicable, close your account.