Privacy Policy

LegalHelpTool (legalhelptool.com) is a website that describes legal services and refers visitors to the providers who offer them. In this policy “we”, “us” and “our” mean the team that runs LegalHelpTool, and “you” means anyone who visits the site or creates an account.

We are the controller of the personal data described below. Questions about this policy or your data can be sent to the contact address published on this site.

Account data. When you register we store your first name, last name, email address and password. The password is stored only as a one-way hash — we cannot read it. We also store whether your email address has been verified and your role on the site.

Google sign-in. If you choose “Sign in with Google”, Google shares your name, email address, Google account ID and profile picture URL with us (the openid, email and profile scopes). We never receive your Google password and we get no access to your Gmail, contacts, files or any other Google data.

Information you submit. Questions, descriptions of your situation and other content you enter into the site's tools, together with the time they were submitted and the account that submitted them. Please share only what the tool needs — avoid entering sensitive data (health, criminal records, identity documents) unless it is really necessary.

Enquiries to a lawyer. If you use the contact form (a chat with an AI assistant) we store what you write or dictate in it: your name, email address, phone number, the place where you need a lawyer, the description of your matter, any documents you attach, and the whole conversation. The assistant translates your name and request into English, so we keep both your own wording and the translation. If you dictate, the voice recording is turned into text and is not stored. While you chat, your browser keeps a reference to the conversation for up to a day so you can continue it on any page.

Profile picture. If you upload one, the image file is stored on our server.

Technical data. Like every website, our server records your IP address, browser type (user agent), the pages you request and the time of the request. For signed-in visitors the session record also keeps the IP address, user agent and time of last activity.

We do not use analytics, advertising or tracking services, and we do not buy data about you from anyone.

• to create and run your account and let you sign in (with a password or with Google);
• to run the site's tools and show you the results for the information you enter;
• to prepare your enquiry with the AI assistant and pass it to the lawyer who will handle it (see Enquiries, AI and lawyers below);
• to send service emails: email verification, password reset and important notices about your account — never marketing without your separate consent;
• to keep the site secure: prevent spam, abuse and unauthorised access, and fix errors;
• to enforce our Terms and Conditions.

The legal bases for this processing (where the GDPR or similar laws apply) are: performing our agreement with you when you use your account (Art. 6(1)(b)), our legitimate interest in running a safe and working service (Art. 6(1)(f)), and your consent where we ask for it (Art. 6(1)(a)), which you can withdraw at any time.

We do not sell or rent your personal data, and we do not use it for advertising or profiling.

AI. The contact form uses artificial intelligence to understand your messages, ask for what is missing, translate your enquiry into English and put it in order. The text of the chat (and, if you dictate, the recording) is sent for this purpose only to the AI service providers we use; it is not used to advertise to you, and the AI makes no decision about you and gives no legal advice.

The lawyer. Your personal information is not distributed to anyone else. When you send the enquiry, it is passed — with your documents — to the lawyer who will work on it, through the provider we work with. From then on the lawyer uses your data to contact you and handle your matter, under the lawyer's own professional duties and privacy policy. We do not sell your data and do not publish it.

The legal basis is taking steps at your request to put you in touch with a lawyer (Art. 6(1)(b) GDPR) and your agreement to our Terms and Conditions when you use the form.

Information you enter into the tools is private to your account: we do not publish it and other users cannot see it. An enquiry you send through the contact form is seen only by us and by the lawyer it is passed to. If a feature ever makes something public, it will say so clearly before you use it.

Your email address is never shown to other users.

We only use cookies that are needed for the site to work:

• Session cookie — keeps you signed in while you browse; expires after a period of inactivity or when you sign out.
• XSRF-TOKEN — protects forms against cross-site request forgery.
• “Remember me” cookie — set only if you tick “Remember me” or sign in with Google, so you stay signed in across browser restarts; removed when you sign out.

These cookies are strictly necessary, so they do not require consent. We do not use analytics or advertising cookies.

Some data is handled by other providers on our behalf or when your browser loads their content:

• Google — only if you use Google sign-in. Google's own privacy policy applies to your Google account.
• Legal service providers — when you follow a link to a provider's website, you leave our site and that provider's own privacy policy applies. We do not pass your account data to providers. The only data we pass on is the enquiry you choose to send through the contact form, which goes to the lawyer who will handle it.
• AI service providers — process the text of the contact chat (and dictated audio) on our behalf to prepare your enquiry, as described above.
• Hosting provider — our servers and database are run by a hosting company that stores the data for us and has no right to use it for its own purposes.
• Email delivery — service emails are passed to a mail server for delivery.
• Bunny Fonts (fonts.bunny.net) — serves the web font; your browser's request reveals your IP address to it.
• UI Avatars (ui-avatars.com) — if you have no profile picture, a placeholder with your initials is generated there, so your display name is sent to it in the image address.
• Icons8 (img.icons8.com) — serves the Google icon on the sign-in pages.

We may also disclose data when the law requires it, or to protect the rights and safety of our users and the service.

• Account data — for as long as your account exists.
• Information you submit — until you delete it or your account; deleting your account deletes it too.
• Enquiries — as long as needed to handle the enquiry and follow its status, then until you ask us to delete it. A copy that has been passed to a lawyer is held by the lawyer under their own policy; write to us and we will help to pass your request on.
• Technical logs — kept for a limited time (normally up to 14 days) for security and troubleshooting, then deleted.
• Sessions — deleted when they expire.

Depending on where you live, you have the right to:

• access the personal data we hold about you and receive a copy of it;
• correct inaccurate data — most of it you can edit yourself on your profile page;
• delete your account and data — from your profile page, or by writing to us;
• restrict or object to processing based on our legitimate interests;
• withdraw consent you have given, without affecting earlier processing;
• lodge a complaint with your local data protection authority.

To use any of these rights, write to the contact address published on this site. We answer within 30 days. If you signed in with Google you can also remove LegalHelpTool's access at any time in your Google account settings.

The site is served over HTTPS only, passwords are stored as salted hashes, and access to the server and database is limited to the people who run the service. No system is perfectly secure, but if a breach affects your data we will inform you and the authorities as the law requires.

LegalHelpTool is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

We may update this policy as the site develops. The date at the top shows the latest version. If a change significantly affects how we use your data, we will announce it on the site or by email before it takes effect.

For any privacy question or request, write to the contact address published on this site.