Privacy Policy
Last updated: October 3, 2026
1.Who we are
LegalLens ("we", "us") is a service that helps students understand housing contracts by analysing them with AI and explaining each clause in plain language. We are the data controller for the personal data described in this policy.
If you have any question about your privacy, you can contact us through the contact options on our website or from your account page, and we will respond within one month.
2.Data we collect
Data you give us
- Account data: your name, email address, password (stored in protected form) and language preference.
- Contracts and documents you upload, and the analysis we generate from them.
- Messages you send us, for example support requests.
Data collected automatically
- Technical data such as your IP address, browser and device type, pages visited and timestamps.
- Cookies, as described in Section 8.
Payment data
If you buy a paid plan, payment is handled by a third-party payment provider. We do not store your full card number.
Personal data inside your contracts
A housing contract usually contains personal data such as names, addresses, ID or passport numbers and bank details, both yours and the landlord's. Only upload documents you are entitled to share. If a detail is not needed for the analysis, such as an ID number or bank account number, we recommend removing it before you upload.
3.Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account | Performance of a contract (Art. 6(1)(b)) |
| Analyse your uploaded contract and show you the results | Performance of a contract (Art. 6(1)(b)) |
| Process payments | Performance of a contract (Art. 6(1)(b)) |
| Keep the service secure and prevent abuse | Legitimate interests (Art. 6(1)(f)) |
| Fix and improve the service using technical and aggregated data | Legitimate interests (Art. 6(1)(f)) |
| Answer your questions and support requests | Legitimate interests / contract (Art. 6(1)(f) / (b)) |
| Non-essential cookies and marketing emails, if we ever use them | Consent (Art. 6(1)(a)) |
| Meet our legal obligations | Legal obligation (Art. 6(1)(c)) |
4.How we use AI
To analyse your contract, we send its text to AI service providers that process it on our behalf and return the analysis to you.
- We do not use your contracts to train our own AI models.
- The analysis is automated and may contain mistakes. It is for information only. See Section 11.
- We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
5.Who we share data with
We do not sell your personal data, and we never share your documents with other users, landlords or agencies.
We share data only with service providers that help us run LegalLens, such as hosting, AI analysis, payment processing and email delivery. They may only use your data to provide their services to us and are required to protect it. We may also disclose data when the law requires it, to protect our legal rights, or as part of a merger or sale of the business, in which case we will tell you.
6.International transfers
Some of our providers may process data outside the European Economic Area. When this happens, we rely on approved safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision, so your data keeps an equivalent level of protection.
7.How long we keep your data
- Your account data and uploaded contracts are kept until you delete them or delete your account. You can delete any contract, or all of your data, at any time from your account.
- Payment and invoicing records are kept for as long as tax and accounting law requires.
- Copies in backups are removed on a regular cycle after you delete your data.
8.Cookies
We use only the cookies necessary to run the service, such as keeping you signed in and remembering your language. If we introduce analytics or marketing cookies in the future, we will ask for your consent first.
9.Security
We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including limiting access so each account can only reach its own contracts. No online service can be completely secure, so we cannot guarantee absolute security.
10.Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time where processing is based on consent
You can delete your contracts and data yourself from your account. For any other request, contact us using the details in Section 1. You also have the right to complain to your data protection authority. In Spain this is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.
11.Not legal advice
LegalLens is an information tool. Its analysis and scores are not legal advice and do not create a lawyer-client relationship. For important decisions, consult a qualified lawyer or your university's housing or legal advice service.
12.Age
LegalLens is intended for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.
13.Changes to this policy
We may update this policy from time to time. If we make significant changes, we will notify you by email or on our website. The date at the top shows when it was last updated.