Legal
Privacy Policy
How CheckLegal.ai collects, uses, retains and shares personal data, and how to exercise your GDPR and CCPA rights.
Last updated: August 2026
Who We Are
CheckLegal.ai is operated by CheckLegal Ltd. For any privacy question or request, contact coo@checklegal.ai.
What Data We Collect
- Website URLs submitted for scanning (stored as scan queries).
- Email address (for account creation).
- IP address (for rate limiting and security).
- Scan results and compliance reports (stored in your account).
- Usage analytics (page views, feature usage).
How We Use Your Data
- To provide compliance scanning and report generation.
- To improve our AI council accuracy.
- To send account-related emails.
- For security and fraud prevention.
- To comply with legal obligations.
Legal Basis (GDPR)
| Basis | Applies to |
|---|---|
| Contract performance | Account holders using the platform |
| Legitimate interests | Security and product improvement |
| Legal obligation | Compliance with applicable law |
Data Retention
- Guest scan data is deleted after 30 days.
- Account data is retained until account deletion.
- Backups are retained for 90 days after deletion.
Third-Party Processors
| Processor | Purpose |
|---|---|
| Anthropic | AI processing — Claude |
| OpenAI | AI processing — GPT |
| xAI | AI processing — Grok |
| Supabase | Database and authentication |
| Resend or similar | Transactional email |
Each processor handles data only as instructed by us and under data processing agreements.
Your Rights
- Under GDPR: access, rectification, erasure, restriction, portability and objection.
- Under CCPA: the right to know, delete, correct and opt out of sale — we do not sell personal data.
- To exercise any right, email coo@checklegal.ai.
International Transfers
Data processed by Anthropic, OpenAI and xAI may be transferred outside the EU/EEA. Those transfers rely on Standard Contractual Clauses.
Contact and Complaints
Contact coo@checklegal.ai with any privacy concern. EU residents may also lodge a complaint with their national Data Protection Authority.
Was this page helpful?