Privacy Policy — LawPredictAI

1. Controller under GDPR

The responsible party ("controller") for data processing is:

Innov-AI-tive GmbH
Bahnhofplatz 1, 91054 Erlangen, Germany

2. What Data We Collect

a) When visiting our website:

• IP address, date and time of request
• Browser type and version
• Operating system
• Referrer URL
• Pages accessed and platform usage features
• (Optional) location data with consent

b) When registering and using the service:

• Full name
• Email address
• Encrypted password
• Billing and payment details
• Uploaded files and case-related content
• User activity (e.g., created analyses, log-ins)

3. Purpose and Legal Basis of Processing

Purpose of Processing	Legal Basis
Providing our service (case analysis, user access)	Art. 6(1)(b) GDPR – contract performance
Improving the platform (logs, feedback)	Art. 6(1)(f) GDPR – legitimate interest
Billing and accounting	Art. 6(1)(b) and (c) GDPR
Storing and archiving cases	Art. 6(1)(a) or (b) GDPR
Email marketing (only with consent)	Art. 6(1)(a) GDPR

4. Data Retention

• User data: As long as your account is active or legal retention periods apply
• Uploaded documents and case analyses: Typically stored for 6 months unless deleted earlier or extended by you
• Billing and financial records: Up to 10 years, per legal obligations

5. Data Sharing

We do not share your personal data with third parties, except in the following cases:

• Payment processing via certified providers (e.g., Stripe)
• Hosting and data processing by GDPR-compliant providers located in the EU
• Legal obligations (e.g., court order, tax audit)

All service providers are bound by a data processing agreement in accordance with Art. 28 GDPR.

6. Your Rights

Under the GDPR, you have the right to:

• Access your stored data (Art. 15)
• Rectify inaccurate or outdated data (Art. 16)
• Delete your data ("right to be forgotten", Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time with future effect (Art. 7(3))

To exercise these rights, email us at: privacy@lawpredictai.com

7. Data Security

We implement technical and organizational measures to protect your data, including:

• SSL encryption
• Access logging and role-based permissions
• Encrypted storage in EU-based data centers
• Strict access control and regular reviews

8. Cookies and Analytics

We only use technically necessary cookies by default. We do not use tracking or advertising cookies without your explicit consent.

Optional analytics features (such as pseudonymized usage statistics) are available but require your opt-in consent.

9. Right to File a Complaint

If you believe that our data processing violates applicable data protection laws, you have the right to lodge a complaint with a supervisory authority. In Bavaria (Germany), this is:

Bavarian Data Protection Authority
Promenade 18, 91522 Ansbach, Germany
📧 poststelle@lda.bayern.de

10. Changes to This Privacy Policy

This privacy policy may be updated to reflect legal, technical, or functional changes. Any updates will be posted on this page.