Privacy Policy
Introduction
ThinkLana ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our enterprise legal operations platform and related services. We understand that legal professionals entrust us with highly sensitive and confidential information, and we take this responsibility seriously.
This Privacy Policy applies to all users of the ThinkLana platform, including law firms, legal departments, and individual legal professionals. It describes our practices regarding the collection, use, and disclosure of information, as well as your rights and choices regarding your personal information. By using our services, you agree to the collection and use of information in accordance with this policy.
Information We Collect
We collect information that you provide directly to us, information automatically collected when you use our services, and information from third-party sources. The types of information we collect depend on how you interact with our platform and the services you use. We collect only the information necessary to provide our services effectively and in accordance with applicable laws and professional obligations.
We are transparent about our data collection practices and provide you with control over your information. You can access, update, and delete much of your information through your account settings, and you can contact us at any time to exercise your privacy rights or ask questions about our data practices.
Information You Provide
- Account registration information (name, email, organization details)
- Case and document data uploaded to the platform
- Communication records and support requests
- Payment and billing information
Automatically Collected Information
- Usage data and platform interaction logs
- Device and browser information
- IP addresses and location data
- Cookies and similar tracking technologies
How We Use Your Information
We use the information we collect to provide, maintain, and improve our services, process transactions, manage accounts, send communications, respond to inquiries, monitor usage, ensure security, and comply with legal obligations. We do not use your information for purposes unrelated to our services without your consent, and we do not sell your personal information to third parties.
Our use of your information is limited to what is necessary to provide our services effectively and in accordance with our agreements with you. We implement technical and organizational measures to ensure that your information is used only for authorized purposes and is protected against unauthorized access, use, or disclosure.
Specifically, we use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and manage accounts
- Send technical notices, updates, and support messages
- Respond to your inquiries and provide customer support
- Monitor and analyze usage patterns and trends
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations and enforce our agreements
Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances: with your explicit consent, with service providers who assist in operating our platform (under strict confidentiality agreements), to comply with legal obligations, to protect rights and safety, or in connection with a business transfer. We maintain strict controls over any sharing of your information and ensure that third parties who receive your information are bound by appropriate confidentiality and security obligations.
When we share information with service providers, we carefully select partners who meet our security and privacy standards, and we enter into agreements that require them to protect your information and use it only for the purposes we specify. We regularly review our service provider relationships to ensure continued compliance with our privacy and security requirements.
We may share your information in the following circumstances:
- With your explicit consent
- To service providers who assist in operating our platform (under strict confidentiality agreements)
- To comply with legal obligations, court orders, or government requests
- To protect our rights, property, or safety, or that of our users
- In connection with a business transfer, merger, or acquisition
Data Security
We implement industry-standard security measures to protect your information, including encryption, access controls, and regular security assessments. Our platform maintains SOC 2 Type II compliance and employs enterprise-grade security infrastructure. We understand that legal professionals entrust us with highly sensitive client information, and we invest heavily in security measures to protect that information.
Our security measures include end-to-end encryption for data in transit and at rest, multi-factor authentication, role-based access controls, regular security audits and penetration testing, comprehensive monitoring and logging, and incident response procedures. We maintain SOC 2 Type II compliance, which requires regular independent audits of our security controls, and we continuously update our security practices to address emerging threats and best practices.
Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information. These rights may include the ability to access your information, correct inaccuracies, delete your information (subject to legal and contractual obligations), opt out of certain data processing activities, and request data portability. We are committed to honoring your privacy rights and providing you with control over your information.
You can exercise many of these rights through your account settings, and you can contact us at any time to request assistance with exercising your rights. We will respond to your requests promptly and in accordance with applicable laws. Some rights may be subject to limitations based on legal obligations, contractual requirements, or the need to maintain the integrity of our services.
Depending on your jurisdiction, you may have the following rights:
- Access to your personal information
- Correction of inaccurate information
- Deletion of your information (subject to legal and contractual obligations)
- Opt-out of certain data processing activities
- Data portability
Data Retention
We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Legal and case-related documents may be retained in accordance with applicable record-keeping requirements. We do not retain information longer than necessary, and we have procedures in place to securely delete information when it is no longer needed.
The retention period for different types of information varies based on the purpose for which it was collected, legal requirements, and our business needs. For example, account information is retained while your account is active and for a reasonable period thereafter, while legal and case-related documents may be retained in accordance with applicable record-keeping requirements that may extend for several years. When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we may also provide additional notice through email or other communication channels.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes to this policy constitutes acceptance of those changes. If you do not agree with any changes to this policy, you may discontinue use of our services and request deletion of your information in accordance with your rights under this policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@thinklana.com.