Privacy Policy

1. What Data We Collect

SeyLegal collects the following types of information:

• Account Information: Email address, password (encrypted), and account creation date
• Usage Data: Questions you ask, answers provided, search history, and usage statistics
• Payment Information: Processed securely by Stripe. We store only subscription status and transaction IDs
• Document Data: Personal documents you upload for analysis (Premium and Pro users only)
• Technical Data: IP address, browser type, device information, and access times
• Cookies: Session cookies for authentication and analytics cookies for service improvement

2. How We Use Your Data

We use your information to:

• Provide and maintain the SeyLegal service
• Process your questions and provide legal information
• Manage your account and subscription
• Improve our AI models and service quality
• Send important service updates and notifications
• Prevent fraud and ensure platform security
• Comply with legal obligations
• Analyze usage patterns to improve the platform

3. Who We Share Data With

We share your information only in these limited circumstances:

• Service Providers: Stripe (payment processing), Supabase (database hosting), OpenAI (embeddings), and Anthropic (AI responses)
• Legal Compliance: When required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale of assets

We do NOT sell your personal data to third parties. We do NOT share your questions or documents with other users.

4. Your Rights

Under the Seychelles Data Protection Act 2003, you have the right to:

• Access: Request a copy of your personal data
• Correction: Request corrections to inaccurate data
• Deletion: Request deletion of your account and data
• Data Portability: Request your data in a portable format
• Objection: Object to certain data processing activities
• Withdraw Consent: Withdraw consent for optional data processing

To exercise any of these rights, contact us at admin@seylegal.com with your request. We will respond within 30 days.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Retained until you delete your account
• Question History: Retained for the lifetime of your account for service improvement
• Payment Records: Retained for 7 years for accounting and tax purposes
• Uploaded Documents: Deleted within 90 days of account deletion
• Security Logs: Retained for 12 months

After you delete your account, personal data is permanently deleted within 90 days, except where retention is required by law.

6. Cookie Policy

SeyLegal uses cookies and similar technologies to:

• Essential Cookies: Required for authentication and core functionality (cannot be disabled)
• Analytics Cookies: Used to understand how users interact with the platform
• Guest Tracking: Anonymous identifier stored locally to track free tier usage for non-registered users

You can manage cookies through your browser settings, but disabling essential cookies will prevent you from using certain features.

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Secure password hashing
• Regular security audits and updates
• Access controls and authentication requirements
• Rate limiting to prevent abuse

While we strive to protect your data, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

8. Compliance with Seychelles Data Protection Act 2003

SeyLegal complies with the Seychelles Data Protection Act 2003 and follows data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the platform. Your continued use after changes constitutes acceptance of the updated policy.

10. Contact for Data Requests

For any privacy-related questions, data requests, or to exercise your rights under the Seychelles Data Protection Act 2003, please contact us:

admin@seylegal.com