1. Introduction

Welcome to Legy.fi ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered legal assistant platform.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Additional Disclosures for Türkiye (KVKK)

This section provides information required under Law No. 6698 on the Protection of Personal Data ("KVKK").

Data Controller

Legy.fi ("Platform"). Contact: info@legyfi.com

Processing Purposes

• Account creation, authentication and user support
• Providing AI features (document upload/analysis, Q&A, generation/comparison)
• Email verification and transactional communications
• Subscription management and billing (if applicable)
• Security, abuse prevention and legal compliance

Legal Bases

• Performance of a contract (KVKK m.5/2‑c) for providing the Service
• Legal obligation (KVKK m.5/2‑ç) for compliance requirements
• Legitimate interests (KVKK m.5/2‑f) for security and improvement, provided your fundamental rights are not harmed
• Explicit consent (KVKK m.5/1 and m.9) for using AI features that require transfer abroad to providers (e.g., OpenAI) and, if any, for processing special categories of personal data included by you

Special Categories of Personal Data

The Platform does not intentionally request special categories of personal data. Do not upload such data unless you have a lawful basis and explicit consent where required. You are responsible for ensuring you have the necessary rights and consents for any content you upload.

Transfer Abroad (Yurt Dışına Aktarım)

To provide AI features, your inputs may be processed by providers located outside Türkiye (e.g., OpenAI). Such transfers are made based on your explicit consent and applicable KVKK provisions. If you do not consent, please refrain from using AI features.

Your Rights (KVKK m.11)

• Learn whether your personal data is processed
• Request information about processing
• Learn the purpose of processing and whether used in accordance
• Know the third parties to whom data is transferred domestically or abroad
• Request correction if incomplete or inaccurate, and request notification to third parties
• Request deletion/anonymization under the conditions of KVKK and notification to third parties
• Object to adverse results arising from automated processing
• Request compensation for damages due to unlawful processing

You can submit KVKK requests to info@legyfi.com. We will respond within 30 days as per KVKK.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name, email address, and contact information
• Account credentials and profile information
• Payment and billing information
• Legal documents and files you upload
• Communications with our AI assistant
• Feedback and survey responses

2.2 Automatically Collected Information

We automatically collect certain information when you use our services:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Log data (access times, error logs, performance data)
• Cookies and similar tracking technologies

2.3 AI Processing Data

When you use our AI features, the content you provide (e.g., documents, text prompts) is sent to third‑party AI providers to generate outputs (currently OpenAI API). We do not use your data to train our own or third‑party models. According to OpenAI’s stated policy, API data is not used to train OpenAI models by default, but these provider policies may change. We will update this policy if our providers’ practices change.

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our AI legal assistant services
• Process and respond to your requests and inquiries
• Improve and personalize your user experience
• Send important service updates and notifications
• Process payments and manage your account
• Analyze usage patterns to enhance our platform
• Comply with legal obligations and enforce our terms
• Protect against fraud and ensure platform security

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• AI Processing: With OpenAI (API) to process your prompts/documents and return results
• Email Delivery: With our email provider to send verification and service emails
• Payments (if you subscribe): With our payment processor (e.g., Lemon Squeezy) — we do not store full card numbers
• Legal Requirements: When required by law or to protect our rights and safety
• Consent: With your explicit consent for specific purposes

All third-party service providers are bound by confidentiality agreements and data protection obligations.

5. Data Security

We take reasonable measures to protect your information, including using HTTPS for data in transit and access controls for our systems. We rely on reputable third‑party providers for infrastructure, AI processing, email and payments.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain information only as long as necessary to provide the Service and meet legal/operational requirements. In general:

• Account data: kept while your account is active
• Uploaded documents and AI results: kept in your account until you delete them or request deletion
• Billing records (if applicable): retained by the payment processor as required by law
• Backups and logs: may persist for a limited time for reliability and security

You can request deletion of your data at any time at info@legyfi.com. Some data may be retained where we are legally required to do so.

7. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your information
• Objection: Object to certain processing activities

To exercise these rights, please contact us at privacy@legy.fi. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for basic platform functionality
• Analytics Cookies: Help us understand how you use our platform
• Preference Cookies: Remember your settings and preferences
• Security Cookies: Protect against fraud and ensure security

You can control cookie settings through your browser preferences. Disabling certain cookies may affect platform functionality.

9. International Data Transfers

Your information may be processed in countries other than your own by our service providers (e.g., AI, email, payments). We rely on the safeguards and compliance frameworks offered by these providers for international transfers. For users in Türkiye, AI features may require transfer abroad and are carried out based on your explicit consent in accordance with KVKK.

10. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Sending you an email notification
• Displaying a notice on our platform

Your continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: