Privacy Policy

We collect information necessary to provide and improve our AI-powered legal, compliance, and financial services:

• Professional Identity Data: Name, email address, bar/professional registration numbers, and firm identification details for Lawyers, Company Secretaries, and Chartered Accountants.
• Client Data: Case descriptions, uploaded documents (bank statements, tax notices, legal briefs, compliance filings), and related metadata submitted through the platform.
• AI Metadata: AI-generated summaries, reconciliation results, predictive analytics outputs, and document extraction data.
• Usage & Technical Data: IP address, browser type, device information, and audit logs for security, performance, and compliance purposes.

We process your information to:

• Provide AI legal analysis, document reconciliation, case management, and compliance tracking services.
• Authenticate users and enforce role-based access control (RBAC) across firm administrators, associates, and clients.
• Generate predictive analytics, risk assessments, and automated compliance deadlines.
• Send notifications via email or Slack regarding case updates, filing deadlines, and hearing reminders.
• Maintain audit trails and comply with professional regulatory requirements.

No Training on Private Data: Your uploaded case documents, financial statements, and client communications are not used to train our underlying AI models. Your data remains your own.

Human Oversight: AI outputs—including legal analysis, document summaries, and compliance forecasts—are assistive tools. Legal professionals and clients are responsible for verifying all AI-generated content before relying on it for legal or regulatory decisions.

Web-Enhanced Analysis: When web search is enabled for AI analysis, the platform retrieves publicly available information to provide citations and context. No private case data is sent to external search engines.

We implement industry-standard measures to protect your data:

• Encryption: All data is encrypted at rest and in transit using industry-standard protocols.
• Access Controls: Strict role-based access control (RBAC) ensures only authorized firm administrators, assigned professionals, and relevant clients can access specific case documents.
• Data Isolation: Data associated with different professional firms is logically isolated to prevent cross-firm access.
• Secure Document Storage: Uploaded documents are stored as private files accessible only through time-limited signed URLs.

We do not sell your personal or professional data. We share information only:

• With Sub-Processors: Authorized technical infrastructure partners (e.g., cloud hosting, payment processing via Stripe) under strict confidentiality and data processing agreements.
• Between Platform Users: Case documents and messages are shared between assigned lawyers/CS/CA professionals and their clients as part of normal service delivery.
• For Legal Compliance: If required by valid legal process, court order, or applicable law, we may disclose information to the extent legally obligated.

We do not share your data with third parties for marketing purposes.

GML Legal AI Hub operates across multiple jurisdictions, including the United Arab Emirates, India, and other regions. Your data may be processed on servers located outside your home country. We ensure such transfers comply with applicable data protection laws, including:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
• India's Digital Personal Data Protection (DPDP) Act, 2023.
• EU General Data Protection Regulation (GDPR), where applicable.

We retain your professional and case data for as long as your account is active or as needed to provide our services. Upon account closure or case completion, you may request deletion of specific records, subject to:

• Professional record-keeping obligations under applicable bar council or regulatory authority rules.
• Legal hold requirements or ongoing litigation preservation duties.

Depending on your jurisdiction, you may have the right to:

• Access the personal and professional data we hold about you.
• Request correction of inaccurate profile or firm information.
• Request deletion of case records upon mandate completion (subject to regulatory retention rules).
• Withdraw consent for AI processing or Slack/email notifications at any time.
• Export your data in a structured, machine-readable format.

To exercise these rights, contact your firm administrator or reach out to us through the Support page.

We use essential cookies and similar technologies to maintain user sessions, authenticate access, and analyze platform performance. We do not use cookies for cross-site advertising or behavioral tracking.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or industry practices. We will notify registered users of material changes via email or in-app notification. The "Last Updated" date below indicates when this policy was last revised.