Last updated: February 2026
Sophia.law provides AI-powered compliance tools for legal professionals. For privacy inquiries, contact us at privacy@sophia.law.
Account data: Name, email, firm name, and billing information when you register.
Usage data: Queries submitted to Sophia, documents generated, and feature usage patterns.
Technical data: IP address, browser type, and device information for security and service optimization.
Communications: Support tickets, feedback, and correspondence with our team.
Legal basis (GDPR): Contract performance (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), and legal compliance (Art. 6(1)(c)).
Your queries are processed by our AI systems to generate responses. We do not use your client data to train our models. Query content is retained for 90 days to provide conversation history and improve response quality, then automatically deleted.
Generated documents remain accessible in your account until you delete them.
We do not sell your data. We share data only with:
All sub-processors are bound by data processing agreements with EU-adequate protections.
Your data is processed and stored within the European Economic Area. Where transfers outside the EEA are necessary (e.g., certain AI model providers), we rely on Standard Contractual Clauses and verify adequate security measures.
We implement encryption in transit (TLS 1.3) and at rest (AES-256), access controls, audit logging, and regular security assessments.
Account data is retained while your account is active and for 2 years after closure for legal compliance. Query logs are retained for 90 days. You can request earlier deletion at any time.
Under GDPR, you have the right to:
To exercise these rights, email privacy@sophia.law. We respond within 30 days.
We use only essential cookies for authentication and session management. We use Plausible for analytics, which does not use cookies or collect personal data.
We may update this policy and will notify you of material changes via email or in-app notice. Continued use after changes constitutes acceptance.
privacy@sophia.law