Privacy Policy
Last updated: 1 August 2026
Lucy Legal is built by Colopio Innovative Technologies LLC. This policy explains what we collect, how we use it, and the protections that apply to attorney-client privileged data. It is written for lawyers and their firms and should be read alongside our Terms of Service.
Who we are
Lucy Legal is a professional tool operated by Colopio Innovative Technologies LLC (Dubai, UAE). We are the data controller for account data and a data processor for the client matter data you enter on behalf of your practice.
What we collect
Account details (name, email, bar number and association, and verification documents you submit); matter and document content you upload; usage and diagnostic data needed to run and secure the service.
Attorney-client privileged data
Matter content is isolated per matter using database row-level security. Calls to AI models are made under zero-retention terms, meaning your client data is not retained by the model provider and is never used to train models.
How we use data
To provide the service (research, drafting, contract review, deadline and conflict checks), to verify lawyer credentials, to secure the platform, and to bill subscriptions. We do not sell personal data.
Sub-processors
We use Anthropic (AI, zero-retention), a self-hosted Supabase database, Cloudflare R2 (document storage), Stripe (billing), and Resend (email). Each processes only what is needed for its function.
Your rights
You may access, correct, export, or delete your data, subject to legal-retention obligations. Contact us at support@lucyailegal.com.
Retention
We keep account and matter data for as long as your account is active, and delete or anonymize it on request or after account closure, except where law requires longer retention.
Contact
Questions about privilege or privacy: support@lucyailegal.com.