Privacy Policy
This page is maintained by Alecsgroup to explain how we collect, use, and protect your personal data.
Information we collect and consent
Alecsgroup is committed to protecting the privacy, confidentiality, integrity, and security of all personal information entrusted to the Platform. By using Alecsgroup, users consent to the collection, use, storage, processing, transfer, and protection of personal information necessary to provide legal technology services, facilitate communication with independent legal professionals, process payments, verify identities, prevent fraud, improve services, comply with legal obligations, and maintain the security of the Platform. Information collected may include names, contact information, addresses, dates of birth, government-issued identification, payment information, device identifiers, IP addresses, browser information, authentication credentials, usage data, legal documents, communications, case information, uploaded files, and other information voluntarily provided by users.
Security safeguards
Alecsgroup implements administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, theft, misuse, or accidental loss. These safeguards include encryption in transit using modern TLS protocols, encryption at rest using strong industry-standard algorithms, secure password hashing, multi-factor authentication, role-based access control, least-privilege authorization, secure cloud infrastructure, firewalls, web application firewalls, intrusion detection and prevention systems, continuous monitoring, vulnerability scanning, penetration testing, audit logging, backup encryption, disaster recovery planning, incident response procedures, malware protection, API security, secure software development practices, code reviews, dependency monitoring, database security controls, rate limiting, session management, secure mobile storage, biometric authentication where supported, and regular security assessments.
Retention, user rights, and disclosure
Personal information is retained only for as long as necessary to fulfill contractual, legal, regulatory, operational, security, dispute resolution, fraud prevention, and recordkeeping obligations, after which it is securely deleted, anonymized, or archived in accordance with applicable law. Users may have rights, subject to applicable legal limitations, to access, correct, update, export, restrict certain processing, object where applicable, or request deletion of their personal information. Alecsgroup may disclose information only where necessary to provide requested services, process payments, verify identities, support lawful investigations, comply with court orders or legal obligations, protect users, prevent fraud, enforce Platform policies, or work with carefully selected service providers operating under appropriate contractual and confidentiality obligations.
Cookies, international transfers, and third parties
Alecsgroup may use cookies and similar technologies to improve functionality, remember preferences, analyze usage, enhance security, detect fraud, and personalize the user experience. International transfers of personal information, where applicable, are protected through appropriate legal, contractual, and technical safeguards. Alecsgroup does not sell users' personal information and requires employees, contractors, lawyers, associates, vendors, and third-party service providers with access to personal information to maintain strict confidentiality and comply with applicable privacy and security requirements.
AI model training and customer content
Starting on the effective date of September 12, 2026, Alecsgroup may use Customer Content — your prompts (including images and files you attach), code, project files, and generated outputs — and usage data from Free and Pro plans to train, develop, and improve our AI models. You can opt out at any time in Account Settings → Privacy. If you opt out before the effective date, your data will not be used for training at all; if you opt out later, your data will be excluded going forward.
Importantly, Alecsgroup will not use your apps' end-user data or your account and billing details for training our AI models.
Standards, inherent risk, and updates
Although Alecsgroup employs comprehensive security measures and follows recognized cybersecurity best practices, including principles aligned with standards such as ISO/IEC 27001, PCI DSS where applicable, and other relevant legal and regulatory requirements, no method of electronic storage, transmission, or internet communication can be guaranteed to be completely secure. Users acknowledge and accept this inherent risk while agreeing to maintain the security of their own devices, passwords, and accounts. Alecsgroup reserves the right to update this Privacy and Security Policy as laws, regulations, technologies, and business practices evolve, and continued use of the Platform constitutes acceptance of the updated policy.
We collect information you provide when creating an account, using our services, or contacting us. This includes your name, email address, phone number, and any documents or data you upload.
We also collect technical data such as IP addresses, browser types, and usage patterns to improve our platform and ensure security.
We use your information to provide, maintain, and improve our services, process transactions, communicate with you, and comply with legal obligations.
We do not sell your personal data to third parties. We only share data with trusted service providers necessary to operate the platform.
Alecsgroup uses SMS only for account verification, two-factor authentication, account and security notifications and fraud alerts. No marketing SMS are sent. SMS consent is optional and can be withdrawn at any time by replying STOP.
All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties and is never sold.
Your data is stored on secure servers and may be processed in jurisdictions where our service providers operate. We take appropriate safeguards to protect your data during transfer.
Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data. To exercise these rights, contact us at privacy@alecsgroup.com.
If you have questions about this Privacy Policy or our data practices, please email privacy@alecsgroup.com.
Data we collect, AI processing, processors, uploads, and retention
This section is the detailed disclosure counterpart to Section X.1–X.6 of the Alecsgroup Terms & Conditions: what we actually collect, why, who receives it, how long we keep it, and how AI processing works.
We collect only what is needed to create and maintain your account, verify identity, run the legal-services marketplace, process subscriptions and payments, support you, prevent fraud, secure the Platform, comply with law, and improve the service.
- Account and contact data: name, email, phone number, country, language, role.
- Authentication data: password hashes, MFA/TOTP enrolment, passkeys, backup codes, OTP delivery events, trusted-device fingerprints, session records.
- Identity-proofing data: identity documents and verification results where a role or service requires them.
- Transaction data: subscription plan, billing status, payment references, currency, mobile-money and card processor identifiers (never full card numbers).
- Documents and case data: files you upload to the document registry, case metadata, evidence checksums, and professional correspondence.
- Device and technical data: IP address, user agent, device fingerprint, access logs, security and audit events.
- Preferences and consents: communication preferences, SMS security consent, marketing consents, cookie choices, terms-acceptance records.
AI-enabled features, including the Avani assistant, document classification, review sentiment grading, fraud signals, and support routing, process the content you submit to them in order to deliver that feature.
Personal identifiers are redacted before content is sent to an AI provider wherever technically feasible, lawyer and notary contact details are never sent to AI models, and AI processing is logged for audit. AI features can be declined in your privacy preferences where they are not required to deliver a service you requested.
AI outputs are informational and are not legal advice. See Section X.3 and X.12 of the Terms & Conditions.
We share data only with processors needed to run Alecsgroup, under contractual, technical, and organizational safeguards. We never sell personal data.
- Cloud hosting, database, and storage infrastructure providers.
- Payment processors: card acquiring, mobile money (MTN, Orange, Wave, M-Pesa, Airtel) and related settlement partners.
- Communications providers for email, SMS verification and security alerts, and WhatsApp where enabled.
- Authentication and identity-verification providers.
- AI model providers processing redacted content for AI-enabled features.
- Security, malware-scanning, analytics, and error-monitoring providers.
- Independent lawyers, notaries, and bailiffs you choose to engage, who act as separate controllers for the professional services they provide.
Uploaded documents are stored once in the central Document Registry with a SHA-256 checksum, are private by default, and are reachable only through short-lived signed links issued to authorized users. Access is controlled by authentication, role-based and case-level permissions, and is logged in an immutable audit trail.
Data may be processed in jurisdictions where our infrastructure providers operate, with appropriate transfer safeguards in place.
Retention periods depend on the type of data, the service, your account status, and legal, regulatory, security, and dispute-resolution requirements. Indicative periods:
- Account and profile data: for the life of the account, then deleted or anonymized after closure unless retention is legally required.
- Case documents and evidence: for the duration of the matter plus the retention period required by the applicable professional and legal rules.
- Billing and tax records: as required by applicable accounting and tax law.
- Security, authentication, and audit logs: retained for a limited period for fraud prevention and incident investigation.
- Backups: overwritten on a rolling schedule; deletion requests propagate to backups as those backups expire.
Depending on your jurisdiction you may request access, correction, deletion, restriction, portability, or objection, and you may withdraw consent for optional processing at any time. Use the privacy preferences area of your account or email privacy@alecsgroup.com.
Deletion requests may not immediately remove data from backups, security logs, fraud-prevention records, or records we are legally required to retain.
Delete your Alecsgroup account and data
For security practices and infrastructure details, see our Trust & Securitypage. For terms of use, see our Terms of Service.