Privacy policy

Turbo Law - Privacy Policy

Effective date: November 7, 2025

This Privacy Policy explains how Turbo Law ("Turbo Law," "we," "us," or "our") handlespersonal information when you visit www.turbolaw.ai or use our products, apps, andsupport channels (the Services).We built this policy to be practical and global. It covers U.S. state privacy laws (e.g.,CPRA and similar state statutes) and international regimes (e.g., EEA/UK/SwissGDPR). Where local law requires additional terms, those will control.If you do not agree with this Policy, please do not access or use the Services.

1) Scope & Roles

Scope: Website, app, product UIs/APIs, and our support/communicationschannels.
Controller vs. Processor: For Website visitors, leads, and marketing contacts,Turbo Law is a controller. For Customer Content that organizations submit to ourplatform (e.g., case files, documents, medical records), we act as a serviceprovider/processor and handle that content only to provide the Services and aspermitted by the customer agreement.

2) Information We Collect

We collect information in three ways—(a) you provide it, (b) we collect it automatically,and (c) we receive it from your organization or third parties.

Example

Identifiers & contact: name, email, phone, firm, role, account credentials
Device & network activity: IP address, browser/device type, pages viewed, appevents, crash/error logs, cookie and advertising identifiers.
Commercial & usage: subscription tier, transactions, in-product activity (featuresused), and support interactions
Communications & content: messages, tickets, chat/call recordings (wherelawful), and feedback
Customer Content (your organization’s data): case files, documents,attachments, and other data your organization submits to the Services.
Job applicant data: resume/CV details, work/education history, and informationyou provide during hiring.
Sensitive data: may appear only inside Customer Content (e.g., health/medicaldetails). We do not collect this from Website visitors for marketing.

We do not knowingly collect information from children. See §12.

3) Sources of Information

You and your organization (account setup, support, product use)
Your devices/browsers (automatic collection via cookies/SDKs)
Your devices/browsers (automatic collection via cookies/SDKs)
Public and enterprise sources (e.g., business contact directories) where lawful

4) How We Use Information

Provide, operate, and secure the Services; authenticate users; prevent, detect,and remediate fraud/abuse
Troubleshoot and support; communicate about the Services
Analyze usage to improve stability, performance, and features
Send transactional messages (e.g., security and product notices) and—wherepermitted—product updates/marketing (you can opt out anytime)
Comply with legal requirements and enforce our terms

AI & data use: We do not use Customer Content to train or improve foundationmodels. Any evaluation or fine-tuning on Customer Content occurs only at thecustomer’s direction. When we use third-party AI infrastructure (e.g., cloud/LLMproviders), they are contractually prohibited from training their models on your data forother customers.

Legal bases (EEA/UK/Switzerland where applicable): performance of a contract;legitimate interests (e.g., security, product improvement); consent (e.g., certaincookies/marketing); legal obligations; vital interests (rare).

5) Cookies & Online Tracking

We use cookies and similar technologies for operations, security, and analytics. Managecookies in your browser and, where offered, in our cookie banner.

We honor Global Privacy Control (GPC) signals as an opt-out of “sale”/“sharing,”where applicable.
We do not respond to legacy Do-Not-Track (DNT) signals

A “Cookie Preferences / Do Not Sell or Share” link may appear in the footer whererequired by law.

6) When We Disclose Information

We disclose information to:

Service providers/Processors for hosting, storage, analytics, communications,customer support, billing/payments, security, and AI infrastructure—undercontracts limiting use to our instructions
Your organization (if your firm administers your account)
Legal & safety purposes (e.g., to comply with law, protect rights, investigatemisuse)
Business transfers (e.g., merger, acquisition, financing), with appropriatesafeguards

We do not sell personal information and do not share it for cross-context behavioraladvertising.

7) Retention

We retain Website/marketing data for about 13–24 months from last interaction unless alonger period is required by law or necessary for legitimate business needs. CustomerContent retention and deletion are governed by the customer agreement (and, whereapplicable, a HIPAA BAA). When retention ends, we delete or de-identify informationconsistent with our policies and applicable law

8) Security

We use administrative, technical, and physical safeguards (e.g., encryption in transit/atrest where appropriate, access controls, logging/monitoring, secure developmentpractices). No system is 100% secure—please use strong, unique passwords andenable available security features.

9) International Data Transfers

We may transfer and store information in countries other than yours (including the U.S.).Where required, we use approved safeguards (e.g., EU Standard Contractual Clausesand the UK Addendum/IDTA). Summaries of these safeguards are available uponrequest (subject to redactions).

10) Your Privacy Rights

Your rights depend on your location. Subject to legal limits, you may have rights to:

Access/Know whether we process your data and obtain a copy
Correct/Rectify inaccurate data
Delete/Erase data
Portability of certain data
Object/Restrict certain processing (e.g., marketing; legitimate-interestprocessing)
Opt-out of sale/share/targeted advertising and certain profiling (we do notsell/share PI for cross-context behavioral ads)
Withdraw consent where processing relies on consent

How to exercise: Email info@turbolaw.ai or (if available) use the Your PrivacyChoices link in the footer or product. We may verify your request and, in some regions,you may use an authorized agent. Where required (e.g., CO/CT/VA), we offer an appealprocess if we deny your request. We will not discriminate against you for exercising yourrights.

EEA/UK/Swiss individuals: You may contact your local supervisory authority if youbelieve our processing violates applicable law; please contact us first so we can help.

11) HIPAA, Privilege, and Confidentiality

If we handle Protected Health Information (PHI), we act as a business associate and willsign a Business Associate Agreement (BAA). We do not use PHI for marketing or totrain foundation models. We do not assert or waive attorney-client privilege or workproduct protections on your behalf. Access to Customer Content is limited to authorizedpersonnel for legitimate purposes (e.g., support, security) as allowed by contract.

12) Children

Our Services are intended for professional/business use and are not directed tochildren. We do not knowingly collect information from children under 18 (or the agedefined by local law). If you believe a child has provided information, contact us andwe’ll take appropriate steps.

13) Changes to This Policy

We may update this Policy from time to time. The “Effective date” shows when it lastchanged. If we make material changes, we’ll provide notice as required by law. Yourcontinued use of the Services after changes means you accept the updated Policy.

14) Contact Us

Email: info@turbolaw.ai
If you are a business customer and need our sub-processor list or have data-handlingquestions, contact your account representative or email info@turbolaw.ai.