Privacy Policy

Information collected

LegalPicsApp collects the information needed to provide the service, including account and profile details, organization information, case details, uploaded images, image-related metadata, tagged-person information, security and access records, support communications, and billing-related information where applicable.

How information is used

We use information to create and manage accounts, authenticate users, organize evidence, generate case materials, provide customer support, improve reliability, protect the service, enforce billing and access rules, and maintain records of important account and case activity.

How information is shared

Information may be shared with other authorized users within the same organization or case, with trusted service providers who help us operate the service, and where required by law, court order, or legal process.

Security and privacy protections

We use administrative, technical, and organizational safeguards designed to help protect account access, uploaded materials, and sensitive case information. These safeguards include access controls, verification steps, restricted file access, and security monitoring. No method of transmission or storage is perfectly secure.

Customer-owned AWS S3 storage

Advanced organizations may choose customer-owned storage at rest with revocable temporary delegated access for newly created cases. LegalPicsApp compute still reads evidence when needed to process images and generate PDFs, and application metadata remains in our PostgreSQL systems. The customer organization separately pays AWS storage, request, transfer, and GuardDuty costs. Customer AWS administrators remain inside that trust boundary and can alter objects, policies, roles, or scan tags. Supported customer buckets are unversioned, so an administrator overwrite or deletion cannot be recovered by LegalPicsApp. Existing cases are not migrated.

Essential cookies

LegalPicsApp uses essential cookies that are required to operate the product and secure user sessions. These include session cookies used to keep signed-in users authenticated and security cookies used to support request protection.

Retention and deletion

We retain information for as long as reasonably necessary to provide the service, support customers, meet legal obligations, resolve disputes, and enforce our terms. Closing a case does not automatically delete case records or generated materials. Some limited records may be retained for security, legal, or audit purposes even after content is deleted.

Privacy requests

For access, correction, deletion, or export requests, use the Privacy Requests page or the official privacy-request email channel at privacy@legalpicsapp.com. The general Support page is for product support, not privacy requests.

California and minors

California residents may use the same privacy-request process described above. The service is not directed to children. Customers remain responsible for obtaining any permissions, notices, or consents required for images or information they submit.