Legal

Privacy Policy

Version 1.0 · Last revised: April 18, 2026

No Model Training on Customer Data

LegalTime, Inc. does not train, fine-tune, or otherwise develop any machine learning or AI models using Customer Data. We do not retain Customer Data beyond what is necessary to deliver the Service. We contractually prohibit our third-party subprocessors, including LLM providers, from retaining Customer Data, training or fine-tuning their models on Customer Data, or using Customer Data for any purpose other than delivering the Service to you.

This Privacy Policy describes how LegalTime, Inc. (“LegalTime,” “Company,” “we,” “us,” or “our”) collects, uses, processes, and discloses personal information in connection with your access to and use of our website located at www.legaltime.ai (the “Site”) and our software products and services (the “Service”). This Privacy Policy applies when LegalTime is the data controller responsible for processing personal information.

Disclosure Regarding Customer Data

This Privacy Policy does not apply to personal information that we process on behalf of our customers (law firms and other subscribing organizations) pursuant to a written agreement we have entered into with such customers (“Customer Data”). Customer Data includes, but is not limited to, desktop activity data, application usage, document content, communications, and other work product captured by the Service. Our processing of Customer Data is governed by our written agreements with customers (including our Data Processing Agreement), not this Privacy Policy. Any questions or requests relating to Customer Data should be directed to the relevant customer.

1.Information We Collect

1.1Information You Provide Directly

We may collect personal information that you voluntarily provide to us, including:

Account Information: name, email address, phone number, firm name, job title, and billing information associated with your account.
Communications: information you provide when you contact us through email, web forms, chat, or customer support.
Marketing and Events: information you provide when you sign up for our newsletter, attend our events, or interact with our marketing materials.
Job Applications: information you submit when applying for a position with us.

1.2Information Collected Automatically

When you visit the Site, we may automatically collect:

Device Information: IP address, browser type and version, operating system, device identifiers, and language preferences.
Usage Information: pages visited, time spent on pages, referring URLs, and interaction patterns with the Site.
Cookies and Similar Technologies: small text files and similar tracking technologies used to recognize your browser and remember preferences. You may disable cookies through your browser settings, though this may affect Site functionality.

2.How We Use Information

We use the personal information we collect for the following purposes:

To provide, operate, and maintain the Site and Service.
To process account registrations, subscriptions, and transactions.
To communicate with you, including responding to inquiries, providing customer support, and sending administrative notices.
To send marketing communications, where permitted by applicable law. You may opt out at any time.
To analyze Site traffic and improve the Site.
To detect, prevent, and address fraud, security incidents, and other unlawful activity.
To comply with legal obligations and enforce our agreements.

We do not use Customer Data for product improvement or model training. Where we improve the Site or Service, we do so using non-personal information such as Site analytics, error reports, and feature usage metrics that do not contain Customer Data.

3.How We Share Information

We do not sell your personal information. We may share personal information in the following limited circumstances:

Service Providers and Subprocessors: with vendors that perform services on our behalf, such as cloud hosting, analytics, customer support, payment processing, and LLM inference. These parties are contractually required to protect your information and use it only as directed.
Third-Party Integrations: we exchange minimal metadata with billing and practice management platforms (such as Clio Manage) in order to generate accurate time entries and deliver them back into your workflow, as described in Section 4.
Legal Obligations: when required to comply with applicable law, legal process, or enforceable governmental request.
Protection of Rights: to protect the rights, property, or safety of LegalTime, our users, or others, including enforcing our agreements.
Business Transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business.

4.Third-Party Integrations

The Service integrates with third-party legal practice management and billing platforms (such as Clio Manage, and in the future, MyCase and Caret) to deliver outputs generated by the Service into your existing workflow.

4.1Data Exchanged with Integration Partners

Our integrations exchange data in two directions. From integration partners, we retrieve minimal metadata (such as active matter names, client identifiers, and billing rate information) necessary to classify activity and generate accurate time entries. This metadata is processed by the Service and our LLM subprocessors, under zero-retention agreements, to produce structured time entries. To integration partners, we transmit generated time entries and associated metadata only on your instruction and, where applicable, after attorney review and approval.

4.2What We Do Not Access

We do not retrieve, store, or process substantive client or matter content from integration partners, including documents, communications, notes, or other work product. Our access is limited to the minimal metadata described in Section 4.1, and only for the purpose of generating accurate time entries.

4.3Third-Party Privacy Policies

Your use of third-party platforms is governed by their own terms and privacy policies. We encourage you to review those documents.

5.Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit using TLS 1.2 or higher, encryption at rest, access controls, and regular security reviews. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

6.Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention of Customer Data is governed separately by our written agreements with customers, including our Data Processing Agreement.

When personal information is no longer needed, we delete or anonymize it in accordance with our data protection commitments.

7.AI-Generated Content

The Service generates outputs using machine learning and other automated processes (“AI Outputs”). AI Outputs are generated based on inputs provided through the Service and are intended to assist with timekeeping and related tasks. We do not test, verify, endorse, or guarantee the accuracy, completeness, or currency of AI Outputs. Users should independently review and verify all AI Outputs before use, and in particular, attorneys should exercise professional judgment before submitting any generated time entries for billing.

8.Your Rights and Choices

8.1General Rights

Subject to applicable law, you may have the right to:

Access the personal information we hold about you.
Request correction of inaccurate or incomplete personal information.
Request deletion of your personal information.
Object to or restrict certain processing of your personal information.
Request a copy of your personal information in a portable format.
Withdraw consent where processing is based on your consent.

8.2California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information, including the right to know, the right to delete, the right to correct, the right to limit use of sensitive personal information, and the right to opt out of the sale or sharing of personal information. LegalTime does not sell or share personal information as those terms are defined under the CCPA.

8.3Exercising Your Rights

To exercise any of the rights described above, please email us at support@legaltime.ai with “Privacy Rights Request” in the subject line. We will respond within the timeframes required by applicable law. We may need to verify your identity before processing your request.

8.4Marketing Communications

You may opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email or by contacting us directly. You will continue to receive administrative communications related to your account or the Service.

9.Children's Privacy

The Site and Service are intended for professional use by adults in the legal industry. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have collected personal information from a minor, we will delete that information promptly.

10.International Users

LegalTime is based in the United States and our Service is operated from the United States. If you access the Site or Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries with data protection laws that differ from those in your jurisdiction.

11.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated Privacy Policy on the Site and updating the “Last revised” date above, and where appropriate, by sending an email notification. Your continued use of the Site or Service after such changes constitutes your acceptance of the updated Privacy Policy.

12.Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

LegalTime, Inc.
571 Ocean Meadows Ln.
Santa Barbara, California 93117
support@legaltime.ai