LegalOS procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You may submit a request for access and requests to delete Personal Information about you via: email at: help@legalos.ai ; or mail to: LegalOS Inc., 1111B S Governors Ave, STE 94154, Dover, DE 19904. Upon receipt of a request, we may ask you for additional information to verify your identity. Any additional information you provide will be used only to verify your identity and not for any other purpose. We will acknowledge the receipt of your request within 10 days of receipt. Subject to our ability to verify your identity, we will respond to your request within 45 days of receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. In order to protect your privacy and the security of Personal Information about you, we verify your identity by matching the identifying information provided by you to the personal information already maintained by us, or, in cases where your request requires a higher degree of certainty, we may use a third-party identity verification service or ask for a photo ID or for more information. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You have the right to request that we disclose: The categories of Personal Information we have collected about you; The categories of Personal Information about you we have sold or disclosed for a business purpose; The categories of sources from which we have collected Personal Information about you; The business or commercial purposes for selling or collecting Personal Information about you; The categories of Personal Information sold or shared, if any, about you, as well as the categories of third parties to whom the Personal Information was sold, by category of Personal Information for each party to whom Personal Information was sold; and The specific pieces of Personal Information collected. You may submit a request to know via help@legalos.ai . The delivery of our response may take place electronically or by mail. We are not required to respond to requests to know more than twice in a 12-month period. We do not sell, and have not in the prior 12 months sold, Personal Information about California residents. Therefore, we have not included a “Do Not Sell My Personal Info” link on our Site. If our practices change, we will update this Privacy Policy and take any other necessary action to comply with applicable law. We do, however, disclose Personal Information for business purposes as described in the “Third Parties We Share Personal Information With” section above.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You have the right to request that we disclose: The categories of Personal Information we have collected about you; The categories of Personal Information about you we have sold or disclosed for a business purpose; The categories of sources from which we have collected Personal Information about you; The business or commercial purposes for selling or collecting Personal Information about you; The categories of Personal Information sold or shared, if any, about you, as well as the categories of third parties to whom the Personal Information was sold, by category of Personal Information for each party to whom Personal Information was sold; and The specific pieces of Personal Information collected.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ You have the right to request that we delete any Personal Information about you that we have collected. Upon receiving a verified request to delete Personal Information, we will do so unless otherwise required or authorized by law. You may submit a request to delete Personal Information via the methods described in "Methods for Submitting Consumer Requests and Our Response to Requests" below.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We keep Personal Information related to your Account for as long as it is needed to fulfill the purposes for which it was collected, to provide our services, to deal with possible legal claims, to comply with our business interests and/or to abide by all applicable laws. Thereafter, we either delete Personal Information about you or de-identify it. Please note that even if you request the deletion of Personal Information about you, we may be required (by law or otherwise) to retain the Personal Information and not delete it. However, once those requirements are removed, we will delete Personal Information about you in accordance with your request.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ We keep your data on your behalf and for your benefit. You can correct or terminate and delete your Account information by following the instructions on the Services or by e-mail at help@legalos.ai which you may also access for further assistance and questions regarding the Privacy Policy or for a copy of your Account data. If you cancel your Account and request us to delete your information, LegalOS will delete all Personal Information within 30 days, excluding records LegalOS is legally required to retain (including but not limited to attorney-client records and financial records for tax purposes).” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Unless otherwise agreed to in writing between you and LegalOS, either party may terminate these Terms of Service for any or no cause, at any time. You may cancel and delete your Account at any time by either using the features on the Services to do so (if applicable and available) or by written notice to help@legalos.ai. After cancellation, you will no longer have access to your Account, your profile or any other information through the Services. The provisions of these Terms of Service which by their intent or meaning intended to survive such termination, including without limitation the provisions relating to disclaimer of warranties, limitations of liability, and indemnification, shall survive the any termination of these Terms of Service and any termination of your use of or subscription to the Services and shall continue to apply indefinitely. We reserve the right to refuse the Services to anyone for any reason at any time. LegalOS may terminate or limit your right to use the Services in the event that we are investigating or believe that you have breached any provision of this Agreement, by providing you with written or email notice. Such termination or limitation will be effective immediately upon delivery of such notice. If LegalOS terminates or limits your right to use the Services pursuant to this section, you are prohibited from registering and creating a new Account under your name, a fake or borrowed name, or the name of any third party, even if you may be acting on behalf of the third party. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We also use AI Providers to enable AI Functions on the Services, which use cookies to collect and store data on use and access of the Services in accordance with their respective privacy policies. We and our service providers may also use “pixel tags,” “web beacons,” “clear GIFs,” or similar means in connection with the Services and HTML-formatted email messages to, among other things, track the actions of users, to determine the success of marketing campaigns and to compile aggregate statistics about Site usage and response rates. Our advertisement partners may use a “pixel tag” to collect anonymous information about your visits to the Site and to other websites, and they may use that information to target advertisements for goods and services. This information is collected anonymously, in a manner that does not personally identify you.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “To the extent that any User Generated Content contains personal data of any individuals, you are responsible for making sure that that you have the appropriate permission and legal basis for us to collect and process information about those individuals. You authorize Company and its third-party providers to process your User Generated Content to provide you with the Al Functions. You agree that Company may use subprocessors to provide the AI Functions to you. You acknowledge and agree that Company: Is not involved in the creation or development of User Generated Content. Disclaims any responsibility for User Generated Content or any personal data included in User Generated Content. Cannot be liable for claims arising out of or relating to User Generated Content or AI Content. Is not obligated to monitor, review, or remove User Generated Content or AI Content, but reserves the right to limit or remove User Generated Content or AI Content from the Services at its sole discretion. You may provide Input to be processed by the AI Features and receive Output in connection with your use of the AI Features. When you use the AI Features, Input and Output are your User Generated Content. You are solely responsible for the development, content, operation, maintenance, and use of your User Generated Content. You hereby represent and warrant to Company that your User Generated Content and Inputs (i) will not be false, inaccurate, incomplete or misleading, (ii) will not infringe on any third party’s copyright, patent, trademark, trade secret or other proprietary right or rights of publicity, personality or privacy; (iii) will not violate any law, statute, ordinance, or regulation (including without limitation those governing export control, consumer protection, unfair” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ including which pages you go to most often and if they receive error messages from certain pages. These cookies do not collect information that individually identifies you. Information is only used to improve how the Site functions and performs. From time-to-time, we may engage third parties to track and analyze usage and volume statistical information relating to individuals who visit the Site. We may also utilize Flash cookies for these purposes.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We frequently make content or services from other websites available to you from links located on the Site. We may present links in a format that enables us to keep track of whether these links have been followed. In addition, we may provide you the functionality to link your Account to your social media account or other accounts, such as LinkedIn or Google, in accordance with your Account settings (which you may change at any time) and respective policies of these third parties. This Privacy Policy applies only to the Site and the Services. We do not exercise control over third party services or other websites that provide information, or over banners, other advertisements or links from within the Site or the Services. Your interactions with these third party services are governed by the privacy policy of the company providing it. These other sites and services may place their own cookies or other files on your computer’s browser, collect data or solicit Personal Information from you. Other websites and services follow different rules regarding the use or disclosure of the Personal Information that you submit, and the collection and use of such information and access of any third party websites are subject to such third party’s privacy policy. We encourage you to read the privacy policies and other terms of such third parties before using their services.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Your use of these third party websites and social media services may result in the collection or sharing of information about you by these third party websites and social media services. We encourage you to review the privacy policies and settings on the third party websites and social media services with which you interact to make sure you understand the information that may be collected, used, and shared by those third party websites and social media services.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ LegalOS is based in the United States. As a result, Personal Information that we collect in and through the Services and on the Site may be transferred to our U.S. offices. In addition, we may work with third-party service providers in the U.S. and in other countries to support our business activities. Thus, Personal Information may be transferred to, stored on servers in, and accessed from the United States and countries other than the country in which the Personal Information was initially collected. In all such instances, we use, transfer, and disclose Personal Information solely for the purposes described in this Privacy Notice and in compliance with applicable laws.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “We and or our advertising partners may use demographic and geo-location, as well as information logged from your hardware or device, including data such as IP address, device model and ID, MAC address, operating system, application usage data, device time zone, region and language, and click ID, to ensure relevant advertising is presented within the Services.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose Personal Information you provide to us or that we collect automatically on the Site and in and through the Services with the following categories of third parties: Service providers, such as web hosting and data storage service providers, data analytics providers, error tracking and performance monitoring providers, marketing service providers, and communications service providers (e.g. Anthropic, PostHog, Sentry, Stripe, Google LLC and OpenAI, L.L.C.); Payment processors, which may include, but are not limited to, Stripe, Inc. and its affiliates (collectively, “Stripe”). Payment processing services provided by Stripe are subject to the Stripe terms and conditions and other policies available at https://stripe.com/legal and Stripe’s Global Privacy Policy available at https://stripe.com/privacy (collectively, the "Stripe Agreements"). By agreeing to these Terms of Service, users that use the payment functions of the Service also agree to be bound by the Stripe Agreements from time to time. You hereby authorize Stripe to store and continue billing your specified payment method even after such payment method has expired, to avoid interruptions in payment for your use of the Service; Our advertising partners in compliance with applicable law; Public authorities, such as law enforcement, if we are legally required to do so or if we need to protect our rights or the rights of third parties; Our subsidiaries and affiliates; or a subsequent owner, co-owner or operator of the Site and/or the Services and their advisors in connection with a corporate merger, consolidation, restructuring, the sale of substantially all of our stock and/or assets, or in connection with bankruptcy proceedings, or other corporate reorganization, in accordance with this Privacy” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.