Privacy Policy

What data we collect

When you submit a request, we receive:

• your name and phone number;
• your description, practice area, city, and urgency;
• the verification code and technical data needed to sign you in and prevent duplicate requests.

Do not put unnecessary contact details, other people’s data, or sensitive information in the description unless it is needed to understand the situation. A Legaty account may be created after you verify your number.

A draft is stored temporarily in your browser. The site and our technical providers may also process your IP address, browser and device type, pages visited, and request timestamps.

How we use it

We use the data to receive and review the request, match an attorney, pass the request to them, and enable contact with you. Your phone number and SMS code verify your identity and help protect the service.

Our legal bases are taking steps at your request before services are arranged, our legitimate interest in operating a secure service, your consent for analytics, and compliance with law where required. We do not use your description for advertising or mailing lists.

Who receives your data

Your name, phone number, and full request are seen by the Legaty team and the attorney we pass the request to. The attorney uses them to contact you and discuss possible help. Your request is not published.

Vercel and other hosting and backend infrastructure providers, the SMS provider, Google Analytics, and Cookiebot by Usercentrics may process data to operate the site. They receive only what is needed for their function and act under their own policies or our instructions. Where data is processed outside the European Economic Area, legally required transfer safeguards apply.

We do not sell personal data or share it for third-party advertising.

How long we keep data

We keep the request, your name, phone number, and related account for up to 12 months after the last contact about the request. We then delete or anonymize the data unless law or an active dispute requires a longer period.

The browser draft lasts until the request is submitted or the tab is closed. The session cookie lasts up to 7 days and the language cookie up to 12 months. Analytics-cookie periods are shown in Cookiebot settings. You can ask us to delete your request or account earlier.

Cookies and analytics

Necessary cookies maintain a secure session and remember your language. Cookiebot stores your cookie choice. Google Analytics starts only after you consent and helps us understand which pages are opened and where people leave the request flow.

Google may receive the page URL, the technical request identifier contained in a URL, browser and device data, IP address, and funnel events such as practice area, urgency, a description-length range, and technical error code. We do not send Google the description text, your name, or phone number. You can change or withdraw consent through Cookiebot settings in the site footer.

Your rights

You may request a copy of your data, correct or delete it, restrict or object to processing, receive it in a portable format, and withdraw consent. Email support@legaty.com; we may ask you to verify your phone number before acting on the request.

You may also complain to the Estonian Data Protection Inspectorate or another competent supervisory authority.

Security and changes

We restrict access to requests and keep session data in an encrypted HttpOnly cookie. No storage method is completely secure.

If this policy changes, we will update the text and the date at the top of this page.

Who provides the service

Legaty is provided by Legaty Technologies OÜ, a company registered in Estonia.

• Registry code: 17553542
• Address: Kaupmehe tn 7-120, 10114 Tallinn, Estonia
• Support email: support@legaty.com