Privacy Policy

Last updated: July 6, 2026

1. Introduction

Startup Lab 24 LLC (“we,” “us,” or “our”) operates Lawerly (“the Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Information you provide:

  • Account information: Name, email address, and authentication data when you create an account. Authentication is self-hosted (better-auth); passwords are hashed at rest and never stored in plaintext. There is no third-party authentication processor.
  • Research queries: The legal questions and searches you submit to the Service
  • Generated documents: The documents you create using our document generation feature
  • Payment information: Billing details processed securely by Stripe (we do not store card numbers)

Information collected automatically:

  • Usage data: Pages visited, features used, query frequency, and session duration
  • Device information: Browser type, operating system, and device identifiers
  • Analytics: Aggregated usage patterns collected through our analytics service

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Process your research queries and generate documents
  • Manage your account and process payments
  • Enforce usage limits and prevent abuse
  • Send service-related communications (account updates, billing notices)
  • Analyze usage patterns to improve our knowledge graph and AI models
  • Comply with legal obligations

4. AI Processing

Your research queries are processed by third-party AI models (currently DeepSeek, with Cerebras as a fallback) to generate responses. Queries are sent to the AI provider for processing and are subject to their respective privacy policies. We do not use your queries to train AI models. See how Lawerly works for the full model disclosure.

Research queries may be temporarily logged for rate limiting and quality assurance purposes. Chat history is stored in your account for your convenience and can be deleted by you at any time.

5. Data Storage and Security

Your data is stored on secure servers. Your data is stored on managed cloud infrastructure (Hetzner). We implement appropriate technical and organizational measures to protect your information, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Self-hosted authentication (better-auth); passwords are hashed at rest and there is no third-party auth processor
  • Payment processing via Stripe (PCI DSS compliant)
  • Regular security assessments

6. Third-Party Services

We use the following third-party services that may process your data:

  • Stripe: Payment processing and subscription management
  • DeepSeek (primary) and Cerebras (fallback): AI processing for research queries and document generation
  • Cloudflare: Content delivery and DDoS protection

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

7. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • With third-party service providers as described above (for service delivery only)
  • When required by law, court order, or government request
  • To protect our rights, property, or safety, or that of our users
  • In connection with a merger, acquisition, or sale of assets (with prior notice)

8. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your account and associated data
  • Export: Request an export of your research history and generated documents
  • Opt-out: Opt out of non-essential communications

To exercise any of these rights, contact us at privacy@lawerly.app.

9. Data Retention

We retain your account data for as long as your account is active. Chat history and generated documents are retained until you delete them or close your account. After account deletion, we remove your personal data within 30 days, except where retention is required by law.

Anonymized, aggregated usage data may be retained indefinitely for analytics and service improvement.

10. Cookies

The Service uses essential cookies for authentication and session management. We use analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance.

14. Contact Us

For questions or concerns about this Privacy Policy, contact us at:

Startup Lab 24 LLC
Email: privacy@lawerly.app