Privacy Policy

1. Introduction

Welcome to Legal Assistant ("we", "our", or "us"). We are committed to protecting the privacy of legal professionals and their clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and integrations.

2. Information We Collect

We collect information to provide better services to our users. The types of information we collect include:

• Account Information: Name, email address, profile picture, and account credentials synced via Firebase Authentication.
• Client and Case Data: Client contact details, case names, files, documents, and related litigation metadata entered by you.
• Integration Tokens: Securely encrypted OAuth2 tokens to communicate with third-party APIs (Google Drive, Gmail, Google Calendar, Google Sheets).

3. Google API Services Disclosure

Legal Assistant's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we request permissions for:

• Google Drive Scopes: To automate the creation of case-specific folders and to upload and organize documents client-by-client.
• Google Calendar Scopes: To schedule hearing dates extracted by our AI from court notices.
• Gmail & Sheets Scopes: To import relevant correspondence and client directory records.

No Google user data is ever sold, shared with advertising networks, or used for any purpose other than providing the legal practice organization tools you explicitly trigger.

4. WhatsApp Integration

When clients send documents or messages via WhatsApp to your connected business number, we process that media to automatically match it to the correct case profile, extract key details via AI, and route the file to your Google Drive. We store WhatsApp connection records (phone numbers, verified status) securely.

5. Data Security

All sensitive credentials (including Google OAuth refresh tokens and client-specific secrets) are stored using industry-standard AES-256-GCM encryption. Data transmissions are encrypted in transit using Transport Layer Security (TLS).

6. Data Deletion and Control

You maintain complete ownership of your data. You may disconnect integrations or request permanent account deletion at any time from the settings dashboard. Disconnecting Google services immediately deletes all stored OAuth credentials from our database.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at: support@legalassistant.app.