Privacy Policy

1. Introduction

At LAW360, we are committed to protecting the privacy and confidentiality of our users. As a legal translation platform serving law firms, corporate legal departments, and government entities across the GCC region, we understand the sensitive nature of the documents and information entrusted to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform and services.

2. Information We Collect

We collect information necessary to provide and improve our legal translation services. This includes:

• Account Information: Your name, email address, organization name, professional role, and billing details provided during registration and account management.
• Documents Uploaded: Legal documents, contracts, court filings, and other texts you submit for translation. These are processed solely for the purpose of delivering translation services.
• Usage Data: Information about how you interact with our platform, including pages visited, features used, translation history, language preferences, and session duration. This data helps us optimize the user experience.

3. How We Use Your Information

The information we collect is used for the following purposes:

• Translation Services: Processing and delivering accurate legal translations across supported languages, including Arabic, English, and other languages relevant to the GCC legal landscape.
• Improving AI Accuracy: Aggregated, anonymized usage patterns help us refine our AI translation models and improve terminology accuracy for jurisdiction-specific legal content.
• Customer Support: Responding to your inquiries, troubleshooting issues, and providing technical assistance related to the platform.

4. Document Security

We employ industry-leading security measures to protect the confidentiality of your legal documents:

• End-to-End Encryption: All documents are encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Your files are never accessible in unencrypted form outside of active processing.
• Automatic Deletion After Processing: Uploaded documents and their translations are automatically deleted from our processing servers once the translation is complete and delivered, unless you explicitly choose to retain them in your account.
• No Training on Client Documents: We do not use your uploaded documents, translations, or any client-specific content to train our AI models. Your legal documents remain strictly confidential.

5. Data Retention

We retain different types of data for different periods based on necessity and legal requirements:

• Account Information: Retained for the duration of your active account and up to 30 days after account deletion to allow for recovery.
• Uploaded Documents: Automatically deleted from processing servers within 24 hours of translation completion. Documents stored in your account library are retained until you delete them or close your account.
• Usage and Analytics Data: Retained in anonymized form for up to 12 months to support platform improvement and reporting.
• Billing Records: Retained for 7 years in compliance with applicable financial regulations in the Kingdom of Bahrain.

6. Third-Party Services

We limit the sharing of your information with third parties to what is strictly necessary for operating our services. Third-party service providers we engage, such as cloud hosting and payment processing partners, are contractually bound to maintain the confidentiality and security of your data.

We do not sell, trade, or otherwise transfer your personal information to outside parties for marketing or advertising purposes. All data processing complies with the EU General Data Protection Regulation (GDPR) and applicable GCC data protection frameworks.

7. Your Rights

In accordance with the Bahrain Personal Data Protection Law (PDPL) and international data protection standards, you have the following rights:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Deletion: You may request the deletion of your personal data, subject to any legal retention obligations.
• Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format for transfer to another service provider.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days.