Privacy Policy

LawSignals ("we," "our," or "us") provides AI-powered legislative tracking services for legal professionals. This Privacy Policy describes how we collect, use, and protect your information when you use our platform.

We are committed to protecting the privacy of legal professionals. Our architecture is designed with privacy as a foundational principle, not an add-on.

Account Information

• Name, email address, and organization name (provided during registration via Clerk)
• Role within your organization (admin or member)
• Billing information (processed and stored by Stripe; we do not store payment details)

Usage Data

• Categories and keywords you create for bill tracking
• Alert preferences and notification settings
• Tracked bills and report configurations
• General usage analytics (page views, feature usage)

What We Do NOT Collect

• Your data for AI training, ours or anyone else's
• Client information or case details
• Full bill text (we link to official sources)

• Provide, maintain, and improve the LawSignals platform
• Match bills to your categories using keyword matching
• Send alerts and notifications based on your preferences
• Generate reports you request
• Process payments via Stripe
• Communicate about service updates and support
• Enforce plan limits and usage tracking

Some features use a large language model: the written summary in each monthly report, and the relevance triage that decides which federal rulemaking documents belong to a tracker. Those calls are made by LawSignals against public legislative and regulatory text, on our own provider account. They do not include your categories, tracked bills, client information or any other content you create, and no data you provide is used to train a model.

LawSignals previously required you to supply your own AI provider key. That arrangement was removed, and any keys stored under it were deleted.

We do not sell your personal information. We share data only with:

• Clerk: Authentication and user management
• Stripe: Payment processing
• Resend: Email delivery for alerts and notifications
• Vercel: Dashboard hosting and analytics
• Sentry: Error tracking and performance monitoring

We may also share data if required by law or to protect our rights.

• All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• AI API keys encrypted with AES-256-GCM
• Role-based access control (RBAC) for all accounts
• All data stored in US-based data centers
• Automated daily backups with point-in-time recovery

• Legislative data (bills, status changes): retained indefinitely
• Delivered alerts: retained for 90 days
• User activity logs: retained for 90 days
• Account data: retained while your account is active
• After cancellation: data accessible for 30 days, then deleted

You have the right to:

• Access your personal data
• Export your data in CSV, JSON, or PDF formats
• Request correction of inaccurate data
• Request deletion of your data (we do not keep hidden copies)
• Withdraw consent for non-essential processing
• Lodge a complaint with a supervisory authority

We use essential cookies for authentication (via Clerk) and session management. We use Vercel Analytics for basic, privacy-respecting usage analytics. We do not use third-party advertising cookies.

For privacy-related inquiries, contact us at hello@lawsignals.com.