Privacy Policy
1. Data Controller
Legy (legy.md) is the controller of personal data collected through this platform.
2. What data we collect
We collect: name, email address, phone number (optional), legal questions and chat messages, conversation history, and voluntarily uploaded documents. For security and abuse-prevention purposes we also record technical connection data: IP address (stored masked, /24), device and browser type, and authentication events (date, time, outcome). Authorized staff access to an account's data is itself logged. From the web server's log we make traffic statistics without cookies or analytics scripts (IP address cut short, page addresses without parameters, the referring site by name only; the log is kept 14 days, the statistics 13 months), and when you create an account we keep which site (its name only) or campaign (the link's utm_ parameters) you came from and the first page you visited.
3. Purpose of processing
Data is processed solely to provide the Legy service (answers from the legislation of the Republic of Moldova), authenticate users, and improve the platform.
4. Legal basis
Processing is carried out based on the user's explicit consent (registration on the platform) and the operator's legitimate interest in providing the service.
5. Storage and security
Data is stored on secure servers in the European Union (Finland). Connections are protected by TLS 1.2/1.3. Passwords are stored exclusively as hashes (bcrypt).
6. Service providers (recipients)
To produce the answer, your questions, the conversation history and the documents you send are processed by service providers, including artificial-intelligence processing providers, some of them outside the Republic of Moldova and the European Economic Area; the transfer rests on contractual safeguards. These providers use the data only to produce the answer and do not use it to train artificial-intelligence models. Technical error reports and the sending of e-mails (account confirmation, access codes, messages sent through the contact form) are handled by service providers under contract. We do not sell your data.
7. Cookies
We use only essential cookies for authentication and security (session token, CSRF protection, and a marker with no personal data that the browser is signed in, which makes the site show the "Open the app" button). We do not use tracking, analytics, or advertising cookies.
8. User rights
You have the right to access, rectify, or delete your data, restrict processing, and object to it. To exercise your rights, contact: contact@dablg.com.
9. Retention
Account data is kept for the duration of active use. Inactive accounts may be deleted after 12 months. Conversation history can be deleted at any time from settings.
10. Contact
For privacy questions: contact@dablg.com
Legy provides legal information, not legal advice. For complex cases, consult a licensed advocate.