Last updated: May 12, 2026

BRANDCENTRAL LLC ("Company," "we," "us," or "our") operates the LegalLio platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services. By using LegalLio, you consent to the data practices described in this policy.

1. Information We Collect

Personal Information

We collect information that identifies you personally, including:

• Full name and email address
• Account credentials and authentication information
• Payment information (processed securely through Stripe)
• Billing and transaction history
• Communications with our support team

Document and Usage Data

When you use our Services, we collect:

• Documents you create, edit, and store on our platform
• Form inputs and data provided for document generation
• Document templates accessed and usage patterns
• AI interaction data and conversation history
• Analytics data on feature usage and engagement

Technical Information

• IP address and device information
• Browser type, version, and operating system
• Cookies and similar tracking technologies
• Log data including access times and pages visited
• Referral sources and navigation paths

2. How We Use Your Information

BRANDCENTRAL LLC uses your information to:

• Provide, operate, and maintain our Services
• Process your transactions and manage subscriptions
• Generate AI-powered legal documents based on your inputs
• Improve and personalize your user experience
• Send transactional emails and service notifications
• Respond to customer support inquiries
• Monitor and analyze usage patterns and platform performance
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations and enforce our Terms
• Send marketing communications (with your consent)

3. Information Sharing and Disclosure

Service Providers

We share information with trusted third-party service providers who assist in operating our platform, including Stripe (payment processing), OpenAI (AI services), and analytics providers. These providers are contractually obligated to protect your information and use it only for specified purposes.

Legal Requirements

We may disclose your information if required by law, court order, or legal process, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure user safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy.

4. Data Security

BRANDCENTRAL LLC implements industry-standard security measures to protect your information, including encryption in transit and at rest, secure authentication protocols, regular security audits, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. Documents and data are retained according to your subscription plan. After account deletion, we may retain certain information for legitimate business purposes or legal compliance, typically for up to 90 days, after which data is permanently deleted.

6. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal information
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your information
• Restriction: Request restriction of processing
• Withdraw Consent: Opt-out of marketing communications

To exercise these rights, contact us at policy@brandctl.com. We will respond within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential cookies for platform functionality and security
• Analytics cookies to understand usage patterns (Google Analytics)
• Performance cookies to optimize user experience
• Preference cookies to remember your settings

You can control cookies through your browser settings, though disabling certain cookies may affect functionality.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by relevant authorities, to protect your data during international transfers.

9. Children's Privacy

LegalLio is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information immediately.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact policy@brandctl.com.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the rights described in Section 6. Our legal basis for processing includes consent, contract performance, and legitimate interests. You have the right to lodge a complaint with your local supervisory authority.

12. AI Processing & EU AI Act Compliance

LegalLio uses generative AI models to draft legal documents. In compliance with the EU AI Act (Regulation 2024/1689) and emerging US AI transparency laws, we disclose that: (a) document output is AI-generated content; (b) AI does not make solely-automated decisions producing legal effects on you — every document is reviewed and edited by you before use; (c) you may request information about the categories of data used to train or fine-tune the models we rely on, to the extent disclosed by our subprocessors. Our AI subprocessors are bound by data processing agreements that prohibit training their general-purpose models on your prompts and document content.

13. Subprocessors

The current list of subprocessors used by BRANDCENTRAL LLC to operate LegalLio includes:

• Base44 (hosting & application platform)
• Stripe (payment processing)
• Resend (transactional email delivery)
• OpenAI, Anthropic, Google (AI model providers, configured with opt-out from training)
• Cloudflare (CDN, edge security)

We update this list as our infrastructure evolves. Material additions will be communicated to affected users where required by law.

14. Do Not Sell or Share (CPRA, CPA, CTDPA, VCDPA)

BRANDCENTRAL LLC does not sell personal information and does not share personal information for cross-context behavioral advertising. Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other US states with comprehensive privacy laws may exercise their full set of state-specific rights by emailing policy@brandctl.com. We honor Global Privacy Control (GPC) signals as a valid opt-out request where applicable.

15. Changes to This Privacy Policy

BRANDCENTRAL LLC may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by updating the "Last updated" date and, where appropriate, through email or platform notifications. Your continued use after changes constitutes acceptance of the updated policy.

16. Contact Us

For questions, concerns, or to exercise your privacy rights, please contact:

BRANDCENTRAL LLC
Privacy Officer
Support: policy@brandctl.com