Privacy Policy

Version: 2026-02-13

1. Introduction

Common Laws.ai ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our AI-powered legal research platform ("the Service").

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and organisation (if provided). For student plan applicants, we also collect a copy of your student ID for verification purposes.

2.2 Usage Data

We collect information about how you use the Service, including search queries, pages visited, and features used. This data helps us improve the Service and provide a better experience.

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number or payment details on our servers. Stripe's privacy policy governs the handling of your payment information.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service.
  • Process your search queries and deliver results.
  • Manage your account and subscription.
  • Communicate with you about the Service, including updates and support.
  • Comply with legal obligations.

4. Third-Party AI Providers

To power our search and AI features, your search queries are processed by the following third-party services:

  • Amazon Web Services (AWS) — Bedrock: We use Amazon Titan Embed Text V2 for generating search embeddings and Anthropic Claude 3 Haiku (hosted on AWS Bedrock) for search query enhancement. Your search query text is sent to these services for processing.
  • Microsoft Azure OpenAI: We use GPT-4o-mini for intent classification, structured output, and batch processing (AI headnote generation and semantic section extraction). We may use GPT-5-mini for enhanced AI features when available. Your search query text and case content are sent to these services for processing.

These providers process your search queries solely to deliver results to you. We do not send your personal contact details (name, email, organisation) to these providers. Each provider's own privacy policy governs their handling of data.

5. Data Sharing

We do not sell your personal information. We share your information only in the following circumstances:

  • Service providers: With trusted third parties who assist in operating the Service (e.g., hosting, payment processing, email delivery), subject to confidentiality obligations.
  • Legal requirements: When required by law, regulation, or legal process.
  • Business transfers: In connection with a merger, acquisition, or sale of assets.

6. Contact Details

Your contact details (name, email address, organisation) are kept confidential and are never shared with third parties except as described in Section 5 above.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal information within a reasonable period, except where retention is required by law.

9. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyse usage. You can manage your cookie preferences through the cookie settings link in the footer.

10. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal information. To exercise these rights, please contact us via the Contact page.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the version date above and may notify you through the Service. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy, please contact us via the Contact page.

This document is a placeholder and should be reviewed by a qualified legal professional before going live.